Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
File: XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft (raw, json)
Hash identifier: n/T82YUgTRvq/voacMiMWlpWIGR5a92FO/fHM82WAvU=
Subject key identifier: 44:B5:4F:25:73:C4:8A:76:9A:FD:11:30:7B:3E:69:50:65:DE:EE:4D
Authority key identifier: 5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
Certificate issuer: /CN=5e55afde34211bcee6a7fd992488a24927b46947
Certificate serial: 019D9A06CDF2410D75629C0885E134F93AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
Manifest number: 050B
Signing time: Fri 17 Apr 2026 06:00:30 +0000
Manifest this update: Fri 17 Apr 2026 06:00:30 +0000
Manifest next update: Sat 18 Apr 2026 06:00:30 +0000
Files and hashes: 1: XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl (hash: T2u8dsIjV9IIUtOTxb3pp19EBS4G6vHfAKk4kZDBNW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:cd:f2:41:0d:75:62:9c:08:85:e1:34:f9:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e55afde34211bcee6a7fd992488a24927b46947
Validity
Not Before: Apr 17 06:00:30 2026 GMT
Not After : Apr 18 06:00:30 2026 GMT
Subject: CN=44b54f2573c48a769afd11307b3e695065deee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:59:52:a0:ec:e6:3b:19:37:bb:ff:53:98:
26:df:a0:bd:ba:31:c6:af:79:48:5f:2e:7f:9f:b0:
f6:0e:e3:8d:41:58:73:c5:35:3c:0f:ec:da:cd:98:
16:2a:b6:ad:78:a8:d2:8c:83:fe:43:49:70:41:9a:
3b:c2:f6:ac:ad:f3:f3:b0:3a:fd:03:f7:d1:49:da:
04:8e:68:96:7d:f0:40:8a:97:78:20:4d:5b:e1:30:
b0:c2:d3:6d:de:8b:d2:a0:24:7d:ac:58:bc:9a:33:
0c:6e:ef:07:86:dc:5e:b7:c7:77:e4:72:dd:15:46:
9d:4d:02:76:34:ec:79:b7:b5:a3:a5:62:c2:05:8f:
9d:8c:8c:f7:57:f5:4f:03:be:87:77:72:fa:d4:85:
f0:a0:10:b6:a2:7d:3d:f5:4b:ab:c7:7a:e6:7f:6b:
52:fc:89:d7:46:0b:ac:af:88:18:e2:2b:14:27:1f:
a4:81:b0:b3:44:a5:4b:eb:da:d4:ce:81:2b:d9:a2:
64:54:91:ec:8e:d9:98:cc:6b:55:96:ef:19:98:80:
ce:1e:ed:52:0e:b7:cc:6b:e7:e0:ae:3f:49:14:57:
3d:74:2a:99:e0:6d:fc:15:56:49:1d:67:5f:22:7f:
08:8b:97:50:71:63:b1:46:f7:fe:ab:c0:36:7c:02:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B5:4F:25:73:C4:8A:76:9A:FD:11:30:7B:3E:69:50:65:DE:EE:4D
X509v3 Authority Key Identifier:
keyid:5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:77:b1:e5:e2:a2:43:f5:ad:37:a1:42:ff:7e:d4:8b:83:dd:
d5:cb:85:d5:b2:10:3e:d0:9c:29:34:77:b5:6f:93:ee:fd:d9:
fc:86:83:1f:31:b1:4d:99:61:5c:0b:f0:8e:7b:8e:1b:eb:41:
37:5c:d6:68:36:ee:34:0a:f0:77:51:2d:77:fc:76:57:49:e1:
7b:53:14:6d:f8:a6:35:95:36:5a:33:82:4a:7a:13:43:52:77:
87:a6:62:20:1c:08:25:ae:55:fb:31:c5:22:12:bb:61:6a:c9:
9e:a0:e1:8d:13:5e:22:d7:0d:a5:81:37:0a:4a:6f:81:08:d5:
5d:ba:78:bf:b3:81:89:c6:7c:c8:0f:1c:c7:fe:5f:59:f3:3c:
84:62:41:8e:57:a8:59:13:52:06:4a:6c:1f:47:0f:36:b2:b9:
80:d2:71:92:a8:e7:d2:18:ad:9e:02:4d:01:3f:6e:a3:24:00:
09:21:02:32:e0:e0:ac:a8:a7:d0:97:85:16:89:ff:f4:74:ff:
bc:04:39:67:ee:ef:de:c2:67:26:2a:c6:34:48:5b:71:ee:7f:
d6:2d:5f:e5:40:7a:ce:a7:20:16:45:36:f6:30:42:15:ec:58:
5d:9a:df:88:07:e0:7a:c1:4c:44:8e:ee:45:62:57:ec:f3:76:
89:3e:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:19 2026 by rpki-client