Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: nvO4neghVW8C5gYyHI/QprEsSut/CO6PggRw7UztGKw=
Subject key identifier: 28:99:D3:C6:D8:D1:FD:D5:27:A7:65:83:6B:2E:A5:04:3E:D3:6E:AB
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019DFC850E373CE8F179BB11A3914085D825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 093C
Signing time: Wed 06 May 2026 09:01:11 +0000
Manifest this update: Wed 06 May 2026 09:01:11 +0000
Manifest next update: Thu 07 May 2026 09:01:11 +0000
Files and hashes: 1: ATrhcvfZe2XqHKs47Dt9M3QKFhs.roa (hash: PefWPwiiidlJBpS7I/NB+iVKQJ0FsVbJRiY+10cA0F4=)
2: HxvfpX5aIfEn1UqJ_JQ9JVA67YY.roa (hash: 7RSyHDJ1xj0KCQZdzozVZqOlI9r3j6g8qDcJh+l/iTA=)
3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: CTqMkR1kiY1fc5PgSQzLdZB9QB/9z3ZuhxWnnqKHJBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:85:0e:37:3c:e8:f1:79:bb:11:a3:91:40:85:d8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: May 6 09:01:11 2026 GMT
Not After : May 7 09:01:11 2026 GMT
Subject: CN=2899d3c6d8d1fdd527a765836b2ea5043ed36eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:be:38:fe:bb:7c:b5:ba:f5:1a:76:08:7c:
de:ee:27:c2:28:64:99:34:e7:24:93:19:07:14:85:
92:04:6a:c1:51:2a:4e:79:c0:f8:38:c0:dc:2c:13:
18:12:5a:68:a6:13:33:8e:aa:62:dd:12:36:7d:76:
4f:d1:dc:88:10:f3:43:af:8d:2a:30:e7:a0:6a:8d:
8b:ea:6e:e2:7b:36:a2:ce:7a:7c:30:11:f7:44:51:
1c:16:b5:ed:88:cb:82:ab:63:b6:3c:29:f8:f6:09:
64:fb:3c:4e:3e:8c:aa:0b:51:9a:e5:59:c4:28:f8:
9a:17:c3:b5:80:e6:00:77:14:24:ff:33:e9:63:59:
82:0c:e6:7b:ff:c3:f8:27:1f:65:3f:2b:49:4f:79:
9a:96:82:58:f4:b9:e2:b0:c7:8c:3f:6b:54:42:90:
04:7e:a8:63:4f:d0:1a:d7:89:32:49:54:01:4e:3b:
19:74:67:00:24:d7:dd:3d:9b:4c:0a:6e:21:96:6b:
89:5c:45:4f:f2:f4:42:43:58:19:81:ba:12:c2:ec:
87:a2:3d:95:fc:53:f1:f8:c7:25:ea:1a:97:db:25:
91:04:86:a8:95:f9:bf:9b:d2:6e:4a:9a:94:72:24:
23:d9:75:1e:45:ab:b1:87:a7:6e:d7:b1:f2:51:4c:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:D3:C6:D8:D1:FD:D5:27:A7:65:83:6B:2E:A5:04:3E:D3:6E:AB
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b5:7f:c0:a2:4c:d2:db:48:6e:7c:31:d1:0f:4c:43:b8:d6:
b4:61:df:02:3e:43:b5:5a:c7:74:68:91:b8:95:c6:7b:55:5f:
d0:c1:cd:c4:f8:7c:05:4b:81:56:6d:ac:f7:b6:22:e6:6d:4b:
81:2a:81:d7:5f:75:91:a6:7e:ea:aa:a2:7b:8c:a9:e3:cb:84:
d4:30:76:47:a7:fd:af:87:29:ed:4f:fc:f5:eb:8b:8f:ad:8d:
26:44:b4:85:47:f1:be:e2:24:5b:7e:43:07:d6:77:6f:0d:62:
18:e4:38:42:94:bc:49:ad:b1:3a:03:3c:14:e1:37:89:0c:e0:
93:03:f0:b9:ea:d7:e1:77:7c:5b:1a:06:73:23:5e:7e:1b:ee:
22:3c:f8:55:1a:32:b9:e2:49:d3:e1:95:ef:5d:88:de:12:8a:
8d:b2:1a:b3:90:c2:58:7d:1d:a7:ed:af:29:07:ba:e4:19:31:
5a:61:83:78:ae:9d:84:9a:27:a8:09:8a:c6:4b:11:f1:c0:ef:
48:4b:9e:b7:d2:51:e2:ca:92:b7:19:ce:87:f2:fa:7c:4c:92:
b3:ca:9e:02:c0:7a:c3:1f:59:95:f1:38:c4:e0:c0:c2:0c:55:
3c:22:2a:fd:4b:83:c4:36:4c:e4:6a:a5:f9:10:2a:e9:95:0f:
38:75:15:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 17:26:31 2026 by rpki-client