Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: 1ocY5Mk6S4YSqQRBdtc5qH27Iqpapfrz5hjJebMHxZg=
Subject key identifier: AC:CA:E3:03:54:33:8C:BF:F0:2F:29:C8:65:35:DA:E2:EA:D8:BA:83
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019DA379263C041D24F15D6A10255BE70DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0C34
Signing time: Sun 19 Apr 2026 02:01:58 +0000
Manifest this update: Sun 19 Apr 2026 02:01:58 +0000
Manifest next update: Mon 20 Apr 2026 02:01:58 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: 05bbHekvR+1VtoW7ur7hH/vubAKVsi2zZ2KNFdyUQtc=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:26:3c:04:1d:24:f1:5d:6a:10:25:5b:e7:0d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Apr 19 02:01:58 2026 GMT
Not After : Apr 20 02:01:58 2026 GMT
Subject: CN=accae30354338cbff02f29c86535dae2ead8ba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:05:d8:56:5d:2d:a0:d7:0d:e5:89:d7:c1:
98:f8:65:ea:c7:9a:4b:35:b1:38:84:f4:1e:09:44:
de:28:fd:fc:c7:cd:c2:e3:16:a0:5c:c1:dc:d9:e4:
ca:4b:79:4d:4c:31:04:bf:9b:cb:3f:d1:1a:41:d7:
6d:42:47:ff:a2:2c:11:40:30:45:ef:60:24:f6:57:
25:b1:11:e0:a8:90:4d:94:7f:65:1c:46:49:d8:c9:
ec:43:30:99:a5:b4:88:fb:18:d7:07:d8:67:29:a9:
a6:57:1f:96:7c:fa:b4:8c:c4:9c:2b:90:7c:bc:00:
b0:5e:47:b6:ce:e1:30:ad:28:8c:c5:18:e1:f7:52:
0f:fd:76:61:95:12:45:b5:c8:9f:4c:2e:a2:b5:4a:
6d:82:04:af:15:42:84:05:f5:db:fd:8c:ec:5d:ab:
a3:fd:b0:62:b4:76:36:20:43:f9:80:e2:5a:a1:b0:
6b:9f:cb:fb:67:69:01:b0:3d:1d:07:fc:69:a1:d4:
6a:b9:70:a2:03:2f:ad:6f:b8:3f:03:d0:7c:51:2b:
7b:01:fc:20:0f:6a:d1:d0:83:6e:64:76:ad:da:a0:
bc:cd:19:d1:5f:1b:fb:ed:dd:b9:28:a4:34:64:c8:
03:97:94:39:93:34:06:a1:4d:a8:13:8d:0b:42:b8:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CA:E3:03:54:33:8C:BF:F0:2F:29:C8:65:35:DA:E2:EA:D8:BA:83
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1e:4a:8e:6b:52:d5:fe:bd:49:42:f8:6f:17:70:b1:e2:8a:
c1:49:61:77:6f:21:c8:28:4e:70:42:3f:a1:ad:b1:1c:88:04:
32:da:6a:ed:f1:12:01:3e:3b:08:75:8e:f7:96:44:a6:d0:d4:
93:06:07:c7:7b:12:2c:76:54:bd:95:e4:30:69:15:64:50:1e:
c3:3d:8f:69:61:6d:a4:0a:cd:72:3a:3c:42:36:c8:62:7b:72:
71:53:28:ae:f1:f2:ed:83:92:20:65:50:70:40:a2:47:c7:a8:
25:8b:79:e5:52:94:6d:1f:da:79:fb:58:16:59:2f:ad:f2:8b:
d9:32:41:c4:ee:09:84:1f:49:14:db:61:e5:d2:38:c3:a5:95:
e2:79:46:d1:41:c8:66:32:3c:20:ad:2d:77:10:48:98:6c:04:
ac:6d:38:d2:86:3b:d6:13:78:87:b8:51:c5:3e:29:83:b5:63:
65:91:83:86:7f:db:86:af:5d:c6:e1:4a:79:3f:76:3b:a8:12:
66:b9:6c:15:d5:94:91:cb:35:ee:1b:d2:84:59:72:f1:67:36:
57:ab:c4:e3:87:2b:38:eb:b1:fc:27:e9:21:cb:4b:7b:c6:8f:
63:5f:7e:5d:e3:19:19:e1:d8:d9:bd:52:c1:9d:bf:40:d5:73:
c1:17:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:49 2026 by rpki-client