Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: hZXlpHXlBTbbtGirIzIoOopti20SPRwGiPdHUNrQlc0=
Subject key identifier: BC:A9:AB:34:0A:05:F3:08:F0:DC:D6:AD:FB:AA:C5:61:D5:CB:6A:1B
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 019DA453ABBC504798BB5F16E08A3FBCED81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 1485
Signing time: Sun 19 Apr 2026 06:00:39 +0000
Manifest this update: Sun 19 Apr 2026 06:00:39 +0000
Manifest next update: Mon 20 Apr 2026 06:00:39 +0000
Files and hashes: 1: JA3YuaJEsqvd9eusygyCJH9iklY.roa (hash: 9CJlUPdmf0qr6MJ6TlKKLBohMPRtzMpsz+bJMGO5jMQ=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: Y4SF0hGu4I2tJk/2ei7C7ijF9U/kEWfbnwHab/uFOCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ab:bc:50:47:98:bb:5f:16:e0:8a:3f:bc:ed:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Apr 19 06:00:39 2026 GMT
Not After : Apr 20 06:00:39 2026 GMT
Subject: CN=bca9ab340a05f308f0dcd6adfbaac561d5cb6a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:b6:5b:f7:90:15:02:ae:21:bc:97:51:d8:
9c:43:cc:a8:ef:1c:bc:1a:9e:b0:cc:f6:d3:2b:73:
f0:9a:f1:0f:d9:b5:83:a1:d4:26:af:70:48:a1:5f:
d1:4f:15:70:c3:88:97:20:32:38:46:2b:d6:4e:cd:
ee:a5:bf:8f:95:40:57:69:24:8f:c5:01:8a:da:e5:
f6:94:4b:79:d4:0d:86:41:8a:5e:ba:74:c2:97:ab:
83:91:75:24:4b:af:4b:67:4b:5a:50:b2:c7:83:ca:
ec:26:4b:ce:0e:86:91:06:29:df:53:f4:85:36:7f:
87:1b:ba:60:94:9b:2c:4d:65:78:31:d8:65:78:5b:
8b:a3:9e:35:88:8d:84:4c:86:3b:58:52:b2:50:d0:
5a:ac:8a:5e:00:90:c0:fd:b1:86:ea:be:fd:6a:ae:
f9:bf:ff:08:4c:70:c3:ce:82:b7:4f:ff:4b:16:04:
a4:69:22:f9:b8:6c:40:7e:00:ee:a6:a8:be:76:11:
93:98:5c:84:58:ea:dc:76:44:15:c0:8e:c7:1a:74:
18:d7:d0:9d:33:79:bb:46:a2:eb:8c:1a:ae:cc:76:
79:a6:bb:7f:cf:b5:02:63:60:04:28:a0:a1:eb:d1:
9e:8e:10:61:e3:06:8c:c8:45:92:3f:4b:0f:98:c1:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:AB:34:0A:05:F3:08:F0:DC:D6:AD:FB:AA:C5:61:D5:CB:6A:1B
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:02:a2:28:ed:6b:4f:0c:75:04:3c:65:fb:03:50:0c:56:e2:
b8:a3:5d:c0:1a:31:5f:bf:6e:e9:cd:d8:10:f3:93:6e:d5:d6:
9e:d5:6f:e9:82:a4:24:b6:4d:45:27:0a:88:b5:db:b5:a4:b9:
0d:41:88:3e:61:7d:b4:5e:b8:33:67:bb:e4:ba:34:8f:2f:91:
35:69:33:8b:5c:38:52:f5:80:f8:18:1c:7a:5a:5e:be:64:25:
4d:a8:25:c3:57:cb:4c:bd:7a:34:75:6d:e3:75:ff:e4:63:28:
00:00:30:d4:4f:bf:04:f6:77:57:c1:10:16:e3:20:ab:49:a8:
3b:e7:da:bb:58:be:6e:48:e4:95:94:f8:5a:91:01:45:c6:af:
04:5a:59:b4:40:b4:f9:87:14:08:1d:28:97:d8:d8:5c:4a:7f:
d6:f4:e0:90:b4:fd:0f:63:57:b8:e4:0e:25:99:06:67:a1:f6:
77:9b:84:07:94:b6:2a:a4:a0:5f:43:66:fe:a5:91:22:8b:d9:
f9:81:e6:7b:fb:08:7a:65:28:8a:5e:11:2f:8c:a2:76:cc:38:
cd:ed:75:ff:ef:3e:45:ca:2e:fc:b4:03:ba:44:1d:c8:53:46:
4c:1e:b5:ea:5f:37:fd:95:24:51:62:0b:17:56:9b:3b:c4:cf:
83:49:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:15 2026 by rpki-client