Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: UfAVNGIxFDSYkNO2UxMWzzcY7P2wnFlJC3xyUL+85fM=
Subject key identifier: B6:81:83:2F:EF:5C:92:C2:85:5F:C0:87:BC:88:77:7D:B5:1A:DB:84
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 019D98BD162B8958E3EA0547346E272BB22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:21 +0000
Manifest this update: Fri 17 Apr 2026 00:00:21 +0000
Manifest next update: Sat 18 Apr 2026 00:00:21 +0000
Files and hashes: 1: GUgLg3-BRyvvd7IU0mKTRz8HLQo.roa (hash: QrRBGrDD9ZKqKp1YwsfRb3TUqSdKHluo6aJuZoI6754=)
2: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: VmVYiRCXeoYtfR6U98Yah5xy3de0MtjqN3G1rv49SQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:16:2b:89:58:e3:ea:05:47:34:6e:27:2b:b2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Apr 17 00:00:21 2026 GMT
Not After : Apr 18 00:00:21 2026 GMT
Subject: CN=b681832fef5c92c2855fc087bc88777db51adb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:93:b1:1f:92:ed:69:0d:97:fd:88:ec:78:
c8:e1:2d:15:0d:8b:e7:fa:7c:53:2f:c1:1a:25:07:
fc:14:9b:67:b0:cf:e8:a5:85:40:0c:82:48:10:70:
c1:be:e3:32:a8:1d:55:41:34:41:18:fc:bf:94:e7:
7e:dd:6c:c4:27:b7:c5:aa:3d:f5:11:52:f3:f1:9f:
48:f5:0f:ab:65:2d:3f:5c:25:a3:68:ac:31:43:d5:
a0:b6:e4:4e:a2:b6:92:ae:18:69:44:f0:4a:5b:ce:
96:ec:b6:7f:de:f2:24:1e:ac:17:7d:5d:ef:7c:63:
1e:1e:ed:c3:33:47:5e:11:76:fd:65:64:a5:3e:ea:
77:b9:b6:5b:74:76:87:2a:a5:3f:38:3d:db:7e:2d:
42:5a:aa:09:7e:65:51:3b:93:7c:99:7e:ec:6c:a6:
4c:d3:95:78:e8:e5:df:71:4a:22:df:0c:21:ca:91:
cd:03:5b:27:ff:11:12:79:9a:02:3d:61:89:0f:76:
aa:e7:38:05:3c:76:38:7c:20:84:1a:f3:27:8f:06:
3a:26:6f:67:d4:26:e4:df:40:fb:35:c4:b6:9f:cb:
63:ef:a6:8e:e4:89:bd:d2:2b:6b:80:14:47:0b:1e:
b7:76:55:08:10:a6:5c:5b:9c:1d:b4:37:1f:12:bc:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:83:2F:EF:5C:92:C2:85:5F:C0:87:BC:88:77:7D:B5:1A:DB:84
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:11:17:4c:70:cf:92:9e:f2:1f:48:ee:51:9f:54:fd:2b:77:
37:d2:bf:45:39:47:47:7d:6a:29:73:bd:57:d5:ea:e0:8f:84:
6d:f0:58:d9:d5:c6:82:83:21:fe:27:8d:ea:70:ec:2c:cd:52:
76:10:17:aa:5d:b3:6f:e0:03:03:4e:9b:cc:5e:9f:ad:14:55:
36:15:df:c5:27:33:aa:b6:d0:55:66:38:03:1b:e0:d9:b4:7d:
d3:11:d4:90:11:28:bc:34:a3:3e:fd:fc:18:1a:60:b7:0d:76:
77:28:b1:c0:b1:58:ef:f1:68:b3:a3:5a:e6:bf:e5:8b:11:8d:
0c:dd:8a:cc:0c:6f:e5:54:e6:c5:44:c7:e9:21:c5:00:35:75:
77:23:10:19:64:8e:50:71:a0:b4:a8:18:4b:ca:8d:9a:26:d4:
0e:87:93:a7:b2:d4:f0:25:36:24:94:44:c6:5a:d0:6a:80:b4:
ef:67:46:1c:79:e5:a4:89:df:ba:da:3f:4f:f5:85:88:05:36:
8c:f0:b5:04:6d:7e:e1:38:35:45:ec:c7:12:bd:ed:5d:12:dd:
8d:77:b2:aa:4c:5d:de:82:43:48:43:4f:d9:61:a2:3b:d9:32:
ec:b3:07:3c:f9:de:59:ca:f7:05:e5:68:ee:69:60:7e:c9:c9:
82:41:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:55 2026 by rpki-client