
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: Zt5PTth/pF8vfMMUMbUkAQR+cJmr47gTMMOULxMC7Ks=
Subject key identifier: 80:9A:8F:2B:A8:0D:BE:AB:BD:AD:28:41:3D:64:43:2E:22:D6:12:E8
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019EBF5A343627742AC1180BA031A4F17C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 094B
Signing time: Sat 13 Jun 2026 05:00:20 +0000
Manifest this update: Sat 13 Jun 2026 05:00:20 +0000
Manifest next update: Sun 14 Jun 2026 05:00:20 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: /67aeZn1+k04m0y+77ryS0fmjyycOyW7ReU6GwT7RHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:34:36:27:74:2a:c1:18:0b:a0:31:a4:f1:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Jun 13 05:00:20 2026 GMT
Not After : Jun 14 05:00:20 2026 GMT
Subject: CN=809a8f2ba80dbeabbdad28413d64432e22d612e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:9e:aa:9b:24:8b:5a:c7:fd:44:03:bd:fe:
ae:34:45:54:a5:cb:2c:bb:5a:34:b9:2d:7b:b8:14:
0a:ac:be:74:05:a4:48:84:19:6f:ae:3c:3d:5c:4b:
2d:78:51:61:9c:40:f0:a2:97:13:29:3e:36:05:63:
6a:ef:26:81:49:43:ec:5a:e8:95:8e:24:d3:77:6e:
c4:14:53:1a:97:4a:e6:b2:5c:61:e0:f2:be:b4:11:
8d:34:cf:46:16:82:ce:f9:32:e0:44:dc:84:7a:5c:
54:f5:62:da:0e:08:c3:ea:0e:5f:0b:10:3a:77:7a:
43:0d:79:d3:2f:2f:30:0e:0a:0f:e4:36:6b:61:f3:
07:8d:35:40:86:51:bf:cc:b0:08:34:61:03:48:7e:
f2:b6:61:10:b6:da:5d:8a:5b:ef:76:19:ed:c5:ae:
5b:bc:00:22:5c:59:83:bd:ef:ce:e2:3e:90:e7:2f:
d6:cb:d8:f6:df:a1:63:3c:78:ab:bb:fd:0d:e0:8b:
18:11:51:38:38:12:d0:e0:d4:c0:66:7e:32:4c:bf:
cf:5e:8b:f2:6c:73:5f:fe:44:3b:1c:5a:66:a2:59:
4e:af:eb:e3:f4:50:11:a9:60:28:6f:54:db:8a:36:
3e:ab:22:22:c3:78:20:3e:7b:ee:c9:47:ce:33:24:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9A:8F:2B:A8:0D:BE:AB:BD:AD:28:41:3D:64:43:2E:22:D6:12:E8
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d6:15:94:b7:ab:00:f0:ba:11:ee:21:fa:07:f7:67:af:03:
1e:4a:5a:e9:e1:de:ad:8a:5d:96:33:a3:46:0a:18:b6:55:6d:
f1:ad:d3:91:09:27:d3:11:7c:cf:d5:18:06:16:0c:de:88:6b:
a4:88:19:1b:18:c8:3e:8a:a1:c3:47:44:29:c4:49:f6:b9:8d:
8a:87:50:a1:1e:57:30:55:e8:bc:66:98:ca:b9:54:05:8f:19:
af:d9:06:aa:b2:4b:53:be:90:3b:ec:00:65:7d:8f:fc:45:0b:
e1:64:2e:ee:28:04:1c:a9:dd:b9:e4:95:ac:7c:62:5d:b2:67:
41:ec:e4:c0:f2:f3:fc:00:32:4e:b0:d3:6f:a0:ca:fe:c8:b3:
bb:aa:36:66:03:cb:95:ad:c6:df:1d:c3:14:4d:90:f6:2f:70:
b2:c6:4b:19:9f:b5:a7:88:be:36:06:9a:11:37:37:f0:36:49:
42:b1:31:61:01:36:c5:27:b6:ba:91:99:00:d3:46:93:3a:f6:
44:44:34:89:f6:8e:71:30:62:7e:68:3b:0c:75:1f:ff:9c:6a:
9e:3e:6a:1f:ed:c6:38:d0:8c:af:b5:d2:74:48:c8:87:e6:5d:
72:f5:04:d6:ee:b5:c8:b7:28:78:be:87:6a:ac:56:cc:f7:bf:
20:32:7e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:21 2026 by rpki-client