Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: nSe6KASHiAfKwVUM0chDgsUiX/tfsIbcTHM18tXerx8=
Subject key identifier: 68:FB:70:12:FF:CB:5B:F0:7C:9B:74:04:06:8E:F9:2F:2F:E3:E2:DE
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019E326069DC042396A42C296551D922FA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0EF6
Signing time: Sat 16 May 2026 20:00:39 +0000
Manifest this update: Sat 16 May 2026 20:00:39 +0000
Manifest next update: Sun 17 May 2026 20:00:39 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 9MPNN+G7cJv01CEZxwrBee3zgmDuJE7N0aGvZg8Cki4=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:69:dc:04:23:96:a4:2c:29:65:51:d9:22:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: May 16 20:00:39 2026 GMT
Not After : May 17 20:00:39 2026 GMT
Subject: CN=68fb7012ffcb5bf07c9b7404068ef92f2fe3e2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:f7:52:76:0d:9b:71:9d:59:e0:93:d4:41:
e7:90:8e:30:f3:5d:d2:6b:53:ec:49:b7:73:0e:d7:
f8:2f:0a:f1:2e:f5:4a:01:7c:f6:46:01:81:2c:8c:
c8:0b:db:ce:a1:d5:8a:4b:f8:4c:49:80:71:69:7b:
be:aa:ca:8a:d0:40:61:db:16:92:69:38:9a:1e:f5:
d1:44:ff:7c:c7:cb:e8:00:bf:49:d5:b0:5f:b7:0f:
3f:ed:b4:8b:f6:36:76:ba:46:e2:21:37:30:72:4d:
54:03:c2:1c:5e:d5:9d:b5:3e:95:aa:ff:09:9b:a1:
d7:c2:7a:6b:ba:d3:2a:28:b3:0a:c6:ee:90:1c:35:
42:f1:e9:52:13:95:e8:a0:79:f3:46:1e:ce:3d:ee:
fe:ee:67:88:8c:62:3d:bc:a8:24:ee:a3:bf:4c:55:
d0:20:d0:36:5a:82:bd:26:9a:58:6f:c4:12:5d:4b:
9b:df:59:56:85:fc:c6:8a:1d:6d:da:a1:4a:33:da:
e1:a4:e4:40:39:87:33:dd:d9:57:e3:d7:3c:8f:82:
eb:7d:bd:7c:15:eb:9a:3a:09:8c:85:60:6d:97:66:
78:62:38:c3:fc:94:78:93:01:4a:91:cf:cf:82:57:
5e:8f:8e:69:92:91:33:e7:cc:b1:0f:26:88:b2:51:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:70:12:FF:CB:5B:F0:7C:9B:74:04:06:8E:F9:2F:2F:E3:E2:DE
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b8:63:ef:17:1d:2a:94:f9:6e:0b:b4:d7:98:49:7b:76:2c:
fb:e9:15:35:69:c4:46:d4:39:1b:4a:ad:25:98:cd:e1:ec:b8:
47:c7:c8:e5:55:d1:b3:2f:f5:4c:59:53:32:bd:0b:d0:f1:4c:
b6:39:28:87:c6:e2:a3:6f:17:dc:b0:96:b4:36:d0:d8:ef:7f:
0f:e5:52:26:3b:4d:69:3c:f3:8b:d3:54:28:40:e6:92:b0:0c:
13:d4:1f:35:c7:c2:43:8f:45:77:37:12:df:d1:6f:8c:8c:2a:
89:21:f6:ae:f4:86:45:cd:6e:ae:04:48:dd:7e:30:48:ac:99:
2f:dc:c5:fe:90:b7:aa:3d:7b:86:40:06:a2:56:00:ba:ac:89:
e6:76:30:fa:a9:d2:47:ea:46:85:92:17:3c:dc:43:60:72:be:
06:a6:98:25:11:5b:5e:9e:40:fc:35:ed:42:85:de:a7:04:60:
68:14:f6:52:42:99:c9:fe:7e:65:58:58:23:14:71:6a:ed:df:
5c:d9:29:6c:a5:80:19:09:6d:43:ff:5c:c6:08:ca:2f:85:70:
fd:af:27:df:78:d2:ff:42:0f:3d:d3:f7:db:6e:49:1d:bc:eb:
2a:7e:e5:cb:57:ad:1d:45:50:2c:9e:65:1e:fe:2f:75:d8:b0:
9c:e3:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:01 2026 by rpki-client