Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: GHqdxmKxPGD2KbJ+PGYvNCpxBX5wDdlZAndlrGGRcdg=
Subject key identifier: 08:A2:0E:22:39:1E:4D:F5:33:75:16:3B:85:E5:2B:07:46:5A:F0:8C
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 019E30E02686128122736FE7E4535B53E48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 13:00:56 +0000
Manifest this update: Sat 16 May 2026 13:00:56 +0000
Manifest next update: Sun 17 May 2026 13:00:56 +0000
Files and hashes: 1: 1-KKEOWBhq-Xin1u07sp8fmHrvqc.roa (hash: PYl3rvHgnbdTXI4oGxGWGnIZl/efX3OeaWnZ83sqU1U=)
2: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: I9xiS9ilRpHX3wmcrwgZEgLT92nvWlAa9vfdRGeBGlk=)
3: hRCE6LdZkeQzF92rmCQdMQvaaL8.roa (hash: UB0DT/MFY2dNlWf8e/9nwn7NarMnjJ7fyxrd+zzOII8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:26:86:12:81:22:73:6f:e7:e4:53:5b:53:e4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: May 16 13:00:56 2026 GMT
Not After : May 17 13:00:56 2026 GMT
Subject: CN=08a20e22391e4df53375163b85e52b07465af08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:57:86:e3:6e:be:dd:1f:97:bc:56:81:0e:
f8:4d:11:d2:93:e6:49:e1:05:52:ac:e1:c9:2a:17:
42:69:74:1e:be:6f:6b:76:8c:4b:96:9b:62:54:c7:
f1:84:cb:5c:75:b8:96:50:91:87:fd:cc:4e:5c:ba:
83:95:07:d0:c9:4d:87:de:aa:07:1c:73:1a:b9:a7:
4d:a7:1c:05:43:c6:cd:a2:15:04:e7:3d:6f:7c:9f:
d9:42:5c:8d:89:30:3a:66:aa:b4:f8:d1:bd:23:6a:
4e:01:01:9a:c2:f3:6b:f0:86:60:ec:ce:ee:6b:52:
c8:90:30:67:a8:c6:d5:9d:0e:2d:01:5f:77:9f:f9:
39:0c:78:58:0a:79:ee:8f:5b:92:5f:10:d3:74:5d:
44:ac:ec:b2:9d:bc:b0:ab:90:45:0a:2d:7f:5b:66:
39:37:f1:5c:d7:a1:c3:ac:f4:76:f3:45:34:76:e8:
c5:8e:21:1c:0b:d4:f4:aa:80:ac:4d:80:98:10:82:
8a:4b:f7:92:7f:ef:4a:27:7e:a7:59:69:94:85:4f:
f0:0b:eb:d8:7f:64:fc:39:b8:e4:2a:91:54:03:d4:
1a:81:82:07:f9:a3:fd:76:a0:7b:71:22:59:a7:12:
0d:2f:6c:89:61:0a:87:03:a6:9d:24:77:b2:ad:6e:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A2:0E:22:39:1E:4D:F5:33:75:16:3B:85:E5:2B:07:46:5A:F0:8C
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:da:cd:48:ac:dd:04:e2:38:18:83:55:21:4e:e9:e3:6f:84:
89:99:17:80:b3:e1:d8:3a:e1:55:78:f7:87:45:a9:f8:91:9e:
f7:de:98:a4:aa:97:ce:c0:98:e4:9c:d6:80:d2:be:2b:6d:8f:
57:3a:68:20:5a:a5:5c:83:62:99:97:c6:17:56:c2:9a:98:13:
26:f9:3c:d9:7c:29:e8:af:de:67:b2:dd:23:f2:98:14:ef:e2:
64:cd:c1:fb:00:37:40:6f:f9:90:6f:f3:65:6c:4c:c4:da:7e:
af:38:28:47:b2:29:6b:08:2d:4f:0b:8d:c6:35:ca:6c:ac:6e:
bb:87:c1:ca:32:4a:2b:b9:82:3f:83:fa:4d:33:4e:5a:de:a0:
10:2e:dd:1a:39:1a:0e:3f:56:99:71:a9:64:3c:d6:04:f1:13:
ef:db:fb:83:67:d1:16:4c:eb:c8:5c:27:12:82:7b:2c:77:b2:
44:d9:7c:ad:ec:af:49:7d:c3:29:94:2e:1d:3b:6b:4d:fe:67:
5a:24:8a:f5:ab:aa:72:76:07:1a:3b:41:ce:eb:37:6d:a0:07:
87:00:c0:d9:c8:4a:d1:c6:af:66:cc:52:03:69:63:45:e3:30:
6e:59:03:4e:40:48:f7:67:27:b1:5b:9c:2b:7f:26:f0:4f:46:
e1:4c:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:28 2026 by rpki-client