Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: cUD3n79GDRgD/oWq1FCA5cKlBF/GX6R2AOKbZ8ArvFY=
Subject key identifier: 65:B7:44:43:14:FB:FD:53:8A:76:C8:F8:4D:E7:11:05:9D:16:2E:5C
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019E4FC67269A96590A312EE9E4B26DEA331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 1384
Signing time: Fri 22 May 2026 13:01:05 +0000
Manifest this update: Fri 22 May 2026 13:01:05 +0000
Manifest next update: Sat 23 May 2026 13:01:05 +0000
Files and hashes: 1: Tj86XfWCuCApPHfYX3OGv6qhNv0.roa (hash: KavhnQrG+XPERodqs0bRhCLXxZdjDwTVYFBmFO2dVKc=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: 5aynaFNZ1o5/nOX6l/wNGnuzkkvWXaZJgj6wq014A60=)
3: lz8LsNgX1D_wsrCHWat-j5v2uVI.roa (hash: vw9y4aHyYuZp50dhE6CiKPwsukwzG4Dv5+i3W21W3u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c6:72:69:a9:65:90:a3:12:ee:9e:4b:26:de:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: May 22 13:01:05 2026 GMT
Not After : May 23 13:01:05 2026 GMT
Subject: CN=65b7444314fbfd538a76c8f84de711059d162e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:55:8c:8b:17:ca:37:ff:21:21:dd:47:7c:
0f:32:7f:c5:62:d3:fc:d8:8e:f0:47:fd:21:17:33:
f9:e9:a4:2b:f6:51:47:59:59:1e:1c:4b:d6:60:50:
34:b4:39:28:34:59:eb:ce:c0:1d:e8:32:a7:16:b9:
f8:e9:fb:d6:b1:54:69:be:0c:49:85:90:0d:ea:65:
ad:2a:88:5e:2c:6e:a5:42:6d:4d:a0:84:9f:e9:e5:
ba:ed:7a:79:54:58:1a:a0:1b:2a:6b:fa:e9:ee:c9:
90:67:15:db:f1:61:30:7d:b4:2c:55:cb:3a:31:fd:
8a:89:78:dc:7f:6f:63:a2:cf:57:97:1f:e8:5d:85:
be:08:b4:89:a6:05:cb:03:85:89:23:22:c4:0b:55:
cc:36:3c:82:93:74:90:67:e3:0a:ab:b9:b6:eb:9a:
98:73:66:20:c6:cb:9d:57:d4:1d:db:60:72:80:22:
23:58:93:49:4d:a1:79:e4:57:94:ed:48:aa:e4:9b:
4f:60:13:08:e2:11:f9:70:f9:17:ea:69:06:f5:0f:
30:b7:fd:9b:d6:88:0d:d3:19:90:16:0f:3b:0f:dd:
30:79:e8:c6:b3:3c:fc:6a:8a:e9:d3:3f:b8:27:61:
00:a8:7d:dc:20:1b:ab:83:1b:9e:15:a7:46:c5:e0:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:44:43:14:FB:FD:53:8A:76:C8:F8:4D:E7:11:05:9D:16:2E:5C
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9b:2f:ef:df:5a:99:f5:10:f3:62:c9:19:7f:83:96:bb:33:
75:57:d4:fa:67:1f:d6:77:64:e8:44:aa:4e:cc:80:75:19:b7:
c4:c8:17:1d:ca:8a:32:bb:2f:82:b2:68:a0:7b:83:fa:e2:65:
da:24:14:05:70:79:bc:bc:88:ab:e5:7c:fd:dc:d6:5c:19:be:
ae:9b:dc:33:5a:17:36:a6:f6:f3:1c:c5:91:a6:67:fe:e1:9c:
6c:aa:98:0b:66:f3:4e:e8:51:e0:81:47:ea:45:a2:6d:b6:ae:
eb:a9:71:62:fe:7f:8e:80:f5:bd:f1:be:99:db:24:cd:e8:da:
cb:32:d2:3b:32:d5:41:63:38:75:ef:7d:78:ae:78:fa:30:20:
46:88:41:28:79:91:2a:76:f2:1b:40:ac:34:29:08:17:83:cb:
58:fa:f9:d5:ba:19:df:3a:8c:ea:72:23:d5:dc:29:fa:46:e6:
49:59:7f:5e:0f:c5:9f:20:b6:99:59:57:9e:99:95:e1:f3:d8:
f2:0d:f1:27:73:a0:f7:0f:6f:f8:1f:e7:59:64:ae:35:8c:e4:
07:df:6f:2c:2b:a0:e3:7b:7b:f6:aa:71:7d:96:31:b2:05:b3:
58:79:32:0c:79:4b:eb:03:13:ac:6b:8c:1a:55:da:39:a3:e7:
6e:61:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:07:11 2026 by rpki-client