Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
File: XWU9B97R6Nf08uoEvTaELFsS8V4.mft (raw, json)
Hash identifier: PakWjbSY5zhPlWy4s8oGS05rJ71Ci89AGFtPpd7nJ/Y=
Subject key identifier: 19:8C:BE:1A:BE:91:41:42:63:28:C7:96:BA:C6:D6:89:8E:DE:05:04
Authority key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
Certificate issuer: /CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Certificate serial: 019DA37817E04CB3621C487EBDB4E2DFDC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
Manifest number: 10EF
Signing time: Sun 19 Apr 2026 02:00:49 +0000
Manifest this update: Sun 19 Apr 2026 02:00:49 +0000
Manifest next update: Mon 20 Apr 2026 02:00:49 +0000
Files and hashes: 1: XWU9B97R6Nf08uoEvTaELFsS8V4.crl (hash: FldI90oGwfPKw2Nk3sXYdl/cXFEU3nBrNZ4QkDFPWho=)
2: y8aS9NjGoMwtiWTSfAPqlGnxCWs.roa (hash: ZuvgKYnV+P1b5dUwqqoJerGmgiPYibNQHqD2j8CfPTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:17:e0:4c:b3:62:1c:48:7e:bd:b4:e2:df:dc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Validity
Not Before: Apr 19 02:00:49 2026 GMT
Not After : Apr 20 02:00:49 2026 GMT
Subject: CN=198cbe1abe9141426328c796bac6d6898ede0504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:7d:3c:1e:52:2e:95:72:63:b1:75:d8:80:
cf:95:c2:92:5a:91:41:48:1d:7e:54:af:68:e6:fc:
eb:68:e7:6f:6d:63:32:94:ed:8e:c3:10:a6:84:47:
93:9c:cc:97:99:61:0b:f6:16:91:eb:f8:73:cc:5a:
b3:81:a9:81:c3:38:cb:4e:11:56:96:cb:6f:65:31:
00:ff:ec:8b:56:fc:3d:4f:24:96:dc:98:ef:5a:e3:
71:0d:c8:7c:fa:b4:7b:f8:de:b0:91:bc:a8:fd:50:
e3:e8:40:0d:51:06:86:93:76:d5:07:d5:e7:9a:4e:
98:6b:31:3f:82:4f:90:3d:17:f9:be:48:0e:f9:36:
eb:26:1d:5c:57:e8:f5:62:f0:32:36:1a:c8:c0:8e:
f9:ba:c0:05:28:8f:6a:07:27:f1:f1:42:f2:3f:54:
01:0a:b3:ef:db:6e:26:3c:b7:14:c9:ef:d0:8e:6b:
a4:55:24:fd:9d:99:c3:e0:ea:b8:88:bd:17:b5:16:
85:64:c1:b5:4f:7b:f3:bd:af:b2:ef:b3:91:be:da:
b8:47:10:83:31:44:d0:07:63:ca:46:65:59:20:39:
52:8c:e1:d5:91:33:ec:ef:7d:09:c1:85:80:68:70:
c5:40:7e:95:74:d9:0a:28:b9:0f:49:ca:71:77:24:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:BE:1A:BE:91:41:42:63:28:C7:96:BA:C6:D6:89:8E:DE:05:04
X509v3 Authority Key Identifier:
keyid:5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2e:f6:1c:07:f2:a0:84:aa:82:b8:ae:79:4c:7c:b2:1b:8c:
f1:88:6b:03:54:4e:29:cf:69:45:f5:63:3d:f6:b2:b5:29:45:
be:01:69:33:2a:d8:ba:f5:86:77:cb:3a:84:b1:02:04:5d:a5:
8c:f8:31:42:46:63:5f:18:1f:24:50:7c:c0:5d:28:42:1d:b4:
52:4d:53:e0:78:58:a1:70:29:3f:c6:50:80:21:b4:78:32:16:
55:8f:5a:52:65:4e:fb:0b:9f:de:b7:e3:56:c7:e9:d1:96:4e:
75:f2:a7:31:46:92:99:a8:91:95:62:81:3e:42:c1:9d:81:78:
3a:23:e3:a9:b2:98:b9:d0:52:ed:f4:2a:1d:a5:74:0b:e3:77:
29:65:16:c6:ba:67:d9:c5:e6:fe:2f:7f:36:90:78:92:d9:80:
e2:5a:fd:78:53:1f:50:00:7b:1d:0e:44:be:41:52:bf:fc:4f:
02:31:21:dc:d1:63:fb:0f:84:42:6c:c0:5f:b1:17:ad:c4:1a:
b7:08:0e:63:d0:bb:a9:19:09:79:81:c1:b7:d1:d4:8d:79:1c:
24:46:90:4b:d7:4e:2c:a9:69:cc:03:d8:e2:0c:29:68:aa:87:
78:26:ea:89:73:98:d3:05:98:1d:48:9d:41:e4:24:e1:5c:1b:
ea:e8:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:07 2026 by rpki-client