Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: kii0cUSUL+ebQyHkApgR8Wuaif15mdLwonuKg1K/Llo=
Subject key identifier: FB:00:01:D2:A1:C6:F4:DD:9C:8F:8F:EF:D0:B3:30:F5:F0:87:D1:DF
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019D9A0777DDFE7E9AFFD51AE0C945801297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 06:01:13 +0000
Manifest this update: Fri 17 Apr 2026 06:01:13 +0000
Manifest next update: Sat 18 Apr 2026 06:01:13 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: Srx2YqvoCM9ZiXEoE5mYHR0+GZLmGeYtii0jRADAQaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:77:dd:fe:7e:9a:ff:d5:1a:e0:c9:45:80:12:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Apr 17 06:01:13 2026 GMT
Not After : Apr 18 06:01:13 2026 GMT
Subject: CN=fb0001d2a1c6f4dd9c8f8fefd0b330f5f087d1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:ee:14:62:01:69:3a:f2:01:e0:01:36:c7:
a7:0b:6d:11:d6:ac:c3:c8:13:66:cb:04:ea:f2:23:
d9:10:c0:a3:13:27:42:80:9b:8b:b8:22:9e:9d:b7:
33:23:1d:c7:4b:b3:08:ae:cd:32:31:81:d0:08:b5:
06:27:47:55:8e:e5:a8:6c:4f:6c:df:a9:7d:51:29:
9a:da:ed:c6:08:08:de:98:fb:65:4b:0b:1e:6b:c8:
6d:68:d1:98:25:fd:65:2b:ef:0c:f3:61:85:a2:0a:
d4:1c:23:77:81:be:a3:0f:5c:6b:fe:35:46:ab:a2:
34:96:41:46:62:c7:16:d8:8c:e0:20:aa:ee:cf:80:
2d:80:df:2d:90:bf:7d:6e:98:db:11:a8:f8:6a:6c:
f2:9a:8c:36:6f:cb:26:53:b7:2c:f7:bc:3b:96:1c:
c3:67:ff:2a:fe:7d:09:ba:eb:58:ce:eb:8f:7e:5c:
4c:a0:a7:f9:48:71:a3:1f:22:83:af:af:c4:a9:e4:
ca:3c:e7:bd:58:6f:2a:14:36:09:a8:11:13:99:9d:
98:cc:10:38:81:d1:1c:eb:44:ad:71:7f:89:05:e0:
84:c6:6a:b8:b7:55:d8:ad:68:e4:0f:80:1b:d4:17:
39:39:f0:f8:7a:e8:45:a8:69:30:64:31:f6:9f:d6:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:01:D2:A1:C6:F4:DD:9C:8F:8F:EF:D0:B3:30:F5:F0:87:D1:DF
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:be:6a:5c:5c:50:14:03:f6:9b:1b:6b:ce:51:61:09:e4:c0:
40:ca:b3:3b:e5:43:d4:b1:22:c5:9e:46:af:65:6e:78:d4:44:
6c:e2:a5:4c:b0:04:41:ca:9b:c6:b5:84:74:7b:85:45:24:c2:
87:83:0e:99:b0:e2:98:ae:81:da:23:d9:0b:16:b6:b4:2b:44:
fe:ff:bf:83:3a:0d:94:20:97:96:7a:93:81:51:39:f7:2c:b5:
58:6d:78:0b:17:1c:46:ea:fa:af:17:2d:27:bb:c6:d9:85:59:
1a:e8:a8:76:0d:c0:08:85:5a:ca:87:81:32:b9:22:c8:05:ec:
b1:56:c7:70:07:ae:34:4c:5f:82:9d:a5:44:76:38:85:35:71:
24:83:5d:06:81:d1:54:6f:f7:16:db:26:a7:c9:ab:ef:cd:84:
04:3c:9e:43:9a:d9:d3:69:87:ff:96:df:ef:f0:0d:7f:73:67:
07:14:6b:54:99:e3:b8:59:ac:98:83:e0:3c:5f:20:c4:1b:cb:
06:3d:78:bc:1b:99:71:0c:39:62:c3:e0:4f:98:f4:c9:c6:cc:
b1:bf:b6:8d:d9:b3:87:65:52:77:69:7d:02:dc:32:86:fc:11:
bb:ea:b3:85:d3:33:78:a2:00:19:13:57:85:8e:bc:1d:c0:ab:
0c:6a:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:05 2026 by rpki-client