Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: y1CPsqclD677WD1JJGa+N4XQi8NzcvqFVO3bdQQwxns=
Subject key identifier: D6:CD:D4:C4:F7:C6:23:61:5B:CD:0B:6B:ED:B3:5E:F8:46:67:FD:28
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 019D9AABDE57BF977D1922DB56A496A1A9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 06BD
Signing time: Fri 17 Apr 2026 09:00:47 +0000
Manifest this update: Fri 17 Apr 2026 09:00:47 +0000
Manifest next update: Sat 18 Apr 2026 09:00:47 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: rU1GOtDTO+/C77JWapjxySK937L4WSo7mkuP6zffslA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:de:57:bf:97:7d:19:22:db:56:a4:96:a1:a9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Apr 17 09:00:47 2026 GMT
Not After : Apr 18 09:00:47 2026 GMT
Subject: CN=d6cdd4c4f7c623615bcd0b6bedb35ef84667fd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:8e:2a:77:92:5d:8e:97:95:33:53:0e:4f:
71:75:31:b3:ab:ba:86:ec:af:07:fd:26:ee:37:ec:
19:9d:12:86:33:4b:6c:31:01:ff:ba:9c:e5:66:6c:
2a:47:b7:79:18:cf:41:86:d3:58:42:4c:0c:56:b8:
35:d2:4c:78:8f:4b:5a:c8:27:45:33:48:ec:01:f4:
62:de:15:84:50:81:1b:d5:79:48:75:62:bb:94:43:
85:f0:bf:bd:68:69:ee:f4:f4:44:2b:4c:c0:68:40:
ab:31:82:73:c6:70:06:99:47:a1:eb:d5:92:07:ea:
b6:94:91:ce:6e:eb:20:eb:ba:39:1a:e9:6d:d0:e7:
8d:bc:94:60:86:a4:55:cf:d1:3c:24:17:0f:34:44:
42:c4:2d:64:fa:64:6d:29:ba:27:bc:29:be:22:dd:
3f:83:71:ff:28:e7:af:df:0f:12:fb:1f:21:f7:d7:
28:b7:66:0d:05:4f:7c:f5:25:0b:2f:2a:1f:c6:d8:
35:d4:25:a1:8a:b7:8a:39:71:7c:22:8d:55:b1:cb:
b4:cb:82:4b:b4:9e:24:53:d8:6a:1e:a3:cb:45:a0:
cd:00:aa:31:67:d4:92:5f:63:15:7f:e3:ef:74:41:
0d:c0:19:5a:0f:1a:db:5c:56:07:6b:b9:74:b2:4a:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:D4:C4:F7:C6:23:61:5B:CD:0B:6B:ED:B3:5E:F8:46:67:FD:28
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:42:24:ec:b7:9f:39:1a:e8:20:0e:70:95:5a:8c:9b:78:84:
7b:ae:34:90:8f:f5:31:e6:9f:f7:3f:3a:7f:93:d5:3f:44:e3:
29:4f:02:b7:12:ec:1e:a2:8e:80:f7:10:8d:14:b2:3a:e3:14:
f8:00:14:3d:f6:cd:ef:2d:b6:4c:83:e9:83:20:0a:79:a4:0c:
4e:13:82:63:e9:35:f0:a6:fd:e0:c8:6e:04:6d:ad:a7:a3:6f:
1e:bd:72:20:29:a8:e4:f9:af:88:b0:4f:22:3f:63:42:07:87:
19:38:c3:24:6d:2f:4b:e6:d4:2a:2e:ab:36:23:cb:8e:d8:4e:
a5:a1:cf:67:12:9f:7c:be:ea:01:92:20:fd:39:60:2a:3c:3a:
ea:ee:87:c7:a8:51:78:15:d4:b1:82:04:11:66:e8:67:15:9f:
d5:56:63:89:35:5b:df:d1:bf:85:5c:7f:78:cb:83:87:cc:43:
1d:e7:50:53:27:00:3a:71:d4:77:36:64:f6:b9:50:b7:f6:2a:
1c:49:af:3b:94:d9:45:b1:fc:0b:38:48:4d:89:aa:b5:f7:25:
56:7b:93:fe:37:06:23:3c:91:54:fd:ba:79:37:16:c0:9d:aa:
8b:98:f2:8b:02:78:7c:91:dd:30:8d:e6:eb:c3:8b:e2:5c:7a:
81:ec:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:17 2026 by rpki-client