Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier: cejgxQtdyKWol/xTHihNxZvHgVGQrwo5rZGrkvMRTTw=
Subject key identifier: 94:C0:AE:6E:F9:CD:D5:75:31:68:7D:57:F0:6A:A0:76:70:C2:DA:D5
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial: 019D97AAE3568E4CF9B276AD72CA2C99F55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number: 0FA0
Signing time: Thu 16 Apr 2026 19:00:51 +0000
Manifest this update: Thu 16 Apr 2026 19:00:51 +0000
Manifest next update: Fri 17 Apr 2026 19:00:51 +0000
Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: opkcQ1EIdeUlrcmaZfTXN1wUV34OVOJeyjYmD/dowCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:e3:56:8e:4c:f9:b2:76:ad:72:ca:2c:99:f5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
Validity
Not Before: Apr 16 19:00:51 2026 GMT
Not After : Apr 17 19:00:51 2026 GMT
Subject: CN=94c0ae6ef9cdd57531687d57f06aa07670c2dad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:a2:33:fd:ed:cc:33:76:8f:86:97:ef:54:
56:e3:99:ed:00:8f:5c:e4:17:e9:82:20:4c:c9:ec:
1e:5e:ec:5e:78:b2:bd:22:4f:b7:ef:a7:68:e8:d2:
9d:42:ae:df:d0:16:9b:cc:32:d5:39:a5:d0:4f:a9:
44:92:d7:0b:04:7b:7e:d6:c3:ca:e6:7b:39:e0:8c:
32:bf:6d:9f:33:92:d7:16:25:d6:55:d0:f9:0b:4c:
c5:b1:ec:ad:54:cc:ad:85:ab:7d:19:e2:b8:77:c2:
d2:2b:41:34:9b:5d:d0:1e:2f:27:eb:81:75:fe:2e:
4b:c9:f1:a5:e3:ab:a3:e2:61:c4:2c:a8:90:93:67:
9c:c8:44:08:92:c1:da:54:54:cd:ff:2d:71:4c:b2:
21:a7:3a:17:a3:07:1f:53:b8:db:01:12:61:7b:48:
6c:d6:a5:42:6a:ef:5c:fa:77:0b:73:44:71:e1:9a:
a6:9a:bf:e6:7e:df:32:87:98:1a:eb:21:71:8f:ba:
36:7f:bf:be:e4:9e:6d:01:bf:93:c6:45:ab:f4:f5:
09:a7:f5:bd:26:db:71:9f:33:f7:60:46:17:dc:a3:
60:20:6d:26:dd:ac:c7:22:c6:c7:ec:19:71:b9:8f:
46:b3:b7:94:e5:9f:2f:ff:23:a8:2c:98:b9:4f:ef:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C0:AE:6E:F9:CD:D5:75:31:68:7D:57:F0:6A:A0:76:70:C2:DA:D5
X509v3 Authority Key Identifier:
keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:ce:ae:57:0e:95:5e:ba:56:de:92:2c:80:56:21:6a:d7:
5a:30:a3:ba:34:f2:90:36:59:88:91:e6:a5:0f:00:a4:30:66:
59:c1:a9:bf:62:19:f5:c8:c8:5e:f5:c2:be:d8:3b:3e:cd:f3:
f2:26:f1:7a:3c:ec:a3:5a:50:7a:7b:68:3d:f7:eb:cc:7a:2f:
12:2b:82:e5:35:62:95:39:fe:75:2a:62:b3:7f:d0:2f:e6:0b:
25:ab:67:48:b7:af:9e:f1:0b:16:42:a7:ae:c6:6c:4c:5e:b4:
29:ac:7a:88:7b:3f:5b:fc:a3:12:7e:03:01:cc:7a:ff:6f:73:
d1:02:94:3e:6b:fc:9a:96:35:fb:46:68:c0:b9:2b:95:d5:47:
36:a9:27:05:38:ab:55:80:34:08:4b:a0:7e:c8:c6:28:e8:a4:
74:39:24:d0:c0:fd:a1:57:ec:ac:71:f5:a3:13:c4:34:db:71:
9b:c5:8a:b7:9e:25:0f:53:63:c3:53:d2:0e:91:81:c7:dc:1d:
69:76:c9:e7:01:f3:75:ea:fa:35:88:e8:af:79:55:2b:00:ff:
20:f8:00:fb:19:33:7b:25:49:4a:44:d1:d5:5d:f6:b1:9f:7a:
eb:2b:86:ce:41:97:ba:ae:86:93:ae:e4:89:04:a1:de:18:2d:
36:f5:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:30 2026 by rpki-client