Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
File: XbomMhShFwVRmA7pFxn42Ixia14.mft (raw, json)
Hash identifier: CYp0Xu05ZawVqklbphKZoxkVAojteYohZqAMQhdZE1I=
Subject key identifier: 62:DF:1B:53:FE:C4:B0:D6:CD:A9:B7:57:2D:82:D8:9F:E0:CA:24:11
Authority key identifier: 5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E
Certificate issuer: /CN=5dba263214a1170551980ee91719f8d88c626b5e
Certificate serial: 019D97E1AC9ACD12C0AEA5F6CB1362E907FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
Manifest number: 142B
Signing time: Thu 16 Apr 2026 20:00:42 +0000
Manifest this update: Thu 16 Apr 2026 20:00:42 +0000
Manifest next update: Fri 17 Apr 2026 20:00:42 +0000
Files and hashes: 1: XbomMhShFwVRmA7pFxn42Ixia14.crl (hash: Vg7IhonBr23bQjeLlvSr9DSStTqiGA0t4FyAu8jlP1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:ac:9a:cd:12:c0:ae:a5:f6:cb:13:62:e9:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dba263214a1170551980ee91719f8d88c626b5e
Validity
Not Before: Apr 16 20:00:42 2026 GMT
Not After : Apr 17 20:00:42 2026 GMT
Subject: CN=62df1b53fec4b0d6cda9b7572d82d89fe0ca2411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:ff:85:6f:52:4b:f4:85:5a:f1:08:9c:90:
ef:fc:7a:ca:75:af:33:56:95:38:2d:d2:36:70:4a:
2a:f7:51:5c:66:83:2c:b9:43:5b:f5:1e:20:ee:24:
2e:7e:b2:f0:c2:af:b4:52:90:e1:06:ff:9b:f9:2c:
6c:72:1b:8b:89:7c:44:1b:2f:01:1f:85:7f:c8:0a:
53:6e:7e:c3:24:3f:d9:22:41:b3:b6:92:fb:1a:e1:
46:d3:83:27:ee:cf:27:cc:6e:ea:07:5b:29:f5:7f:
a0:48:cd:92:8d:55:84:0d:6a:73:1b:df:2d:f3:86:
a3:3e:16:70:b9:59:6d:e9:48:cb:16:82:3a:7a:6e:
bc:98:5a:e9:34:ec:8f:49:8c:37:e0:50:8e:77:60:
3f:8c:d8:44:c6:dc:82:99:b8:e7:6c:bf:71:35:f6:
9a:5c:c2:04:b8:c4:b4:53:62:db:8d:e9:ce:e5:ca:
ac:2f:1b:87:04:f2:64:c8:cd:11:a9:65:67:e8:f9:
06:fc:bc:3e:38:cb:ec:7a:3f:c6:a1:21:72:e1:a2:
61:0a:c4:a3:bc:a1:9e:37:56:67:0a:07:62:d2:9a:
5f:2b:13:3b:e3:14:26:e8:ad:95:dc:f7:e1:ac:fb:
b4:7e:5d:a4:a2:ca:5c:ef:d0:79:72:c0:10:fa:29:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DF:1B:53:FE:C4:B0:D6:CD:A9:B7:57:2D:82:D8:9F:E0:CA:24:11
X509v3 Authority Key Identifier:
keyid:5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:48:dd:42:54:11:dd:43:da:ad:65:e8:dc:fc:c1:5b:f7:
1a:d2:ff:ea:58:32:d8:5e:c0:10:fc:de:0d:ea:a9:43:6e:bc:
7b:62:d1:bf:ac:58:3c:f4:20:e5:71:8c:4a:98:4c:2e:9c:e1:
6c:3c:8d:e1:b5:4f:02:df:b7:0a:d5:fe:dd:fd:93:32:bd:0f:
d2:ee:ab:c6:e9:db:5f:ca:70:7d:a0:f8:f8:28:f0:bf:aa:c6:
d7:3a:67:dc:41:0f:54:83:ac:be:4a:fa:6e:4b:79:80:b1:c1:
87:d8:a2:51:16:07:cd:0f:71:bd:da:99:3f:de:79:6c:99:4d:
82:69:70:88:58:57:9e:03:32:d8:6d:e6:63:d3:33:82:5c:62:
de:86:22:bf:7f:83:4b:7d:c7:e9:0c:d8:2e:38:39:7c:7d:60:
dc:ac:e9:61:e3:f0:61:d2:8b:8e:82:06:b3:30:5c:81:d0:52:
5e:7a:64:bb:c9:c0:62:fb:30:73:cf:21:39:e6:e9:e4:71:3a:
6c:de:f8:8c:da:00:d2:ea:e8:9e:29:6f:73:7c:5d:38:4b:b0:
a8:38:74:60:83:c3:85:b6:96:3e:d9:8e:44:72:30:ce:e4:0c:
67:7f:79:b9:b1:05:2c:73:b6:e1:a3:dd:04:32:0a:c9:e8:20:
6e:97:e2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:56 2026 by rpki-client