Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: hFuxPhqIGx3gUjR9F6UYoEuuyurGZkCgDHCjAiW864M=
Subject key identifier: 06:6D:A8:42:82:A7:8D:7E:62:D7:4A:31:A8:D2:ED:92:12:09:0E:62
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 019DA4C13E0D994741F62C9BF2714023EF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 08:00:20 +0000
Manifest this update: Sun 19 Apr 2026 08:00:20 +0000
Manifest next update: Mon 20 Apr 2026 08:00:20 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: SBVYhCfg6MFQw3sTym9iwLfb9Z2u8WDGZpiQOOCs/kU=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:3e:0d:99:47:41:f6:2c:9b:f2:71:40:23:ef:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Apr 19 08:00:20 2026 GMT
Not After : Apr 20 08:00:20 2026 GMT
Subject: CN=066da84282a78d7e62d74a31a8d2ed9212090e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:54:5f:ca:38:3d:ed:5c:de:8d:e0:55:74:
7b:83:8c:7f:fd:9d:7e:3c:88:05:88:73:21:f6:93:
4e:3c:e5:24:47:ef:00:0c:81:d7:4d:53:89:86:97:
87:d9:fc:55:9f:b6:19:9b:61:42:17:d6:e6:e2:10:
a8:6a:03:33:bc:63:f8:47:20:7c:09:9e:21:d3:26:
48:d0:6e:de:3a:c1:d3:ad:97:23:90:f7:f3:27:e0:
76:54:d4:e1:7c:5e:aa:2f:ac:9e:07:e7:88:32:c5:
e7:bc:23:0b:d3:75:2c:c5:7a:20:10:19:d0:aa:91:
d2:17:55:4b:61:6e:ea:33:45:8b:16:c8:b3:25:a1:
13:23:8c:89:93:ef:1c:ae:f2:13:93:76:a5:89:97:
da:46:53:42:a2:3e:72:5e:1c:64:c1:26:24:02:85:
41:a1:b0:26:80:39:bf:b2:a2:85:46:39:10:37:7e:
e9:c2:2e:3d:82:af:f6:2e:b5:65:fc:8c:61:d9:ab:
ea:0c:f1:4c:2a:68:e6:41:84:00:bd:dd:a2:cd:c7:
0a:7e:1d:1c:7e:9e:0c:93:4f:9f:56:b9:5d:55:3a:
0a:b8:58:3c:cc:89:ff:f1:d2:b1:f0:d1:2a:58:bf:
e6:db:d8:f2:47:67:ee:7c:d9:e2:c0:b2:51:f6:0d:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6D:A8:42:82:A7:8D:7E:62:D7:4A:31:A8:D2:ED:92:12:09:0E:62
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6a:6a:b4:6d:b0:06:98:d3:6d:98:04:66:5f:b0:4a:c7:8c:
9f:46:26:3e:7d:19:d4:f9:3a:32:3b:ea:6a:2b:77:7a:6d:0a:
72:b3:95:24:c8:e7:60:43:c0:f0:5c:5b:ca:18:90:0b:c4:a6:
b1:86:64:09:0d:a0:c1:9a:b1:fe:eb:8f:dc:7c:37:dc:35:1a:
91:a7:ad:ef:ff:1b:0d:83:63:20:a3:00:2f:22:7a:14:ed:c9:
34:4e:7f:36:07:5e:bd:83:9b:a4:05:90:12:4e:8f:1a:64:92:
db:fb:ea:72:55:e5:f1:20:58:b0:41:64:1d:45:38:76:5b:65:
0b:4c:a1:13:79:9d:77:01:a0:66:57:14:43:45:ff:d4:e2:5a:
c9:35:30:e7:b2:95:24:be:91:6b:17:49:89:16:64:0b:0c:6a:
2a:8b:60:01:0f:63:4e:8b:87:86:b5:0e:cf:df:2f:8b:19:f2:
14:8f:78:92:14:21:30:4f:e3:ae:37:6c:f0:4a:cf:3a:c0:51:
03:d8:34:a2:be:c3:63:95:bb:98:ae:b5:5d:0d:b8:28:5f:5d:
fd:90:16:38:8e:2e:5f:29:53:27:ea:2f:f8:95:84:39:68:52:
eb:78:ad:9d:5f:c0:e2:4e:6d:df:11:35:b6:a3:2a:e9:4a:12:
1f:1f:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:50 2026 by rpki-client