Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier: ZnLoIZv2lh2HUxYKRF+AQVuY74FRnJZFWBMRkG98icI=
Subject key identifier: FE:EC:B5:CF:87:DD:90:F8:84:52:13:50:31:F6:50:B2:53:6C:FF:E7
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019DDD31696F5659D8A31DFFBB94DEF2A9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number: 015A
Signing time: Thu 30 Apr 2026 07:01:36 +0000
Manifest this update: Thu 30 Apr 2026 07:01:36 +0000
Manifest next update: Fri 01 May 2026 07:01:36 +0000
Files and hashes: 1: 7kloanVHOYaHRlhEsLAGIVGi_rY.asa (hash: 8NXppGEeLQlW5S79hnELA4YUQ5d6IwXskVcbthg2tt4=)
2: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (hash: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=)
3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: cE0PfPcphQigLjQyV1Y9+yhuRldtrwTTiELWD6wgeow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:69:6f:56:59:d8:a3:1d:ff:bb:94:de:f2:a9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: Apr 30 07:01:36 2026 GMT
Not After : May 1 07:01:36 2026 GMT
Subject: CN=feecb5cf87dd90f88452135031f650b2536cffe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:98:0d:08:ec:09:4d:6a:08:b5:6c:af:ce:
c6:7f:b9:5d:0f:48:28:df:58:2f:61:95:03:c5:5a:
b2:de:2b:92:86:8a:35:17:09:fc:b5:9c:08:d9:57:
62:f4:cc:58:9d:25:a4:27:e7:4d:b0:34:13:06:4e:
ae:7e:0f:c7:48:71:31:57:46:1c:84:0b:53:20:4f:
c9:49:98:36:3f:e3:80:46:11:f7:a4:09:c3:ea:a7:
96:e4:79:d6:ab:6b:ea:7f:9b:2d:c3:ef:f7:29:72:
52:4d:02:0a:3e:b4:67:c9:56:ba:b5:fd:8f:d1:a3:
62:31:eb:f2:02:36:2c:31:84:b7:b8:ff:82:04:de:
c9:71:16:bb:3e:b8:ec:01:df:90:e7:e9:90:38:77:
10:bd:c1:62:7a:e8:27:74:f1:a9:e2:bc:d8:73:e4:
f3:c4:51:19:36:64:1c:ba:d1:59:52:34:75:be:0d:
20:1a:00:be:dc:fd:81:c9:1b:e1:6c:84:95:37:e5:
c4:47:db:73:7b:6e:c9:52:21:7c:36:93:a7:0b:68:
05:5c:16:d0:3e:bc:e2:8b:54:78:3c:29:09:be:e0:
c8:00:e4:e3:8d:7b:32:ad:3b:01:21:0a:da:58:a3:
52:c2:63:b3:8e:d4:b4:f8:46:9a:44:0e:34:83:21:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:B5:CF:87:DD:90:F8:84:52:13:50:31:F6:50:B2:53:6C:FF:E7
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4d:61:b6:9a:3b:b3:3c:34:26:9d:c7:6f:7d:59:34:56:f9:
8c:5f:b3:5d:a4:a4:e2:0d:98:a5:ae:38:00:4b:8b:b3:25:b8:
81:a9:70:51:3d:f7:6d:40:fc:e0:4e:56:01:d9:f3:c1:a9:a3:
43:f3:ef:49:76:81:af:31:83:6c:39:5d:53:f8:58:c4:58:bd:
05:bb:cd:71:3a:4f:07:16:62:d6:3d:36:a6:1f:f6:75:8d:6d:
70:fb:82:19:dd:e0:6a:45:42:41:ae:29:1d:2e:74:eb:c6:e5:
fe:b6:0c:6f:d0:59:6b:75:77:37:f0:c7:40:c5:98:95:8e:1f:
cf:e7:06:7b:61:fc:36:e5:f4:a9:a7:e6:75:b8:f3:ab:2b:9f:
3d:11:bb:c8:16:07:63:64:37:a6:c4:5d:2f:79:9c:e4:02:7c:
a7:36:70:e4:17:95:94:0f:58:19:6a:79:c7:ff:14:8e:62:aa:
9b:fe:79:5c:64:55:70:9a:d7:d7:66:d7:5a:c0:12:71:6b:29:
1d:7f:c0:79:62:32:42:59:9f:a6:0f:10:9a:88:4e:5f:8d:f4:
2b:37:a4:a7:bc:17:82:0b:86:6d:53:f2:24:e5:63:fc:ce:87:
04:25:95:44:1b:96:ce:4f:5e:d2:a0:b2:9f:0f:ac:9b:90:63:
0c:22:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:59:34 2026 by rpki-client