Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: 975+oeeP5UnrFxvUjSJRLcti2gYfls424/bHKJ27Ik0=
Subject key identifier: 6E:06:32:A7:85:FB:30:50:4D:89:FE:52:D0:D5:E2:62:E6:C8:2F:C7
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019D9C632EE33944CF4C93D101AC6D966E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 17:00:38 +0000
Manifest this update: Fri 17 Apr 2026 17:00:38 +0000
Manifest next update: Sat 18 Apr 2026 17:00:38 +0000
Files and hashes: 1: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: aCJuAxRiRT0dGlTSPHrxTkR8jy6mkHBM8/i1Mm/24UE=)
2: cF9T-jxoP9kV3otKbs6wprWqe14.roa (hash: By9z72uPVXpGvtlPCEnMJBu0BtKh3WPCweFaBQSyntA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:2e:e3:39:44:cf:4c:93:d1:01:ac:6d:96:6e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Apr 17 17:00:38 2026 GMT
Not After : Apr 18 17:00:38 2026 GMT
Subject: CN=6e0632a785fb30504d89fe52d0d5e262e6c82fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:fe:7e:a9:72:0f:62:3b:fe:db:38:56:ad:
6e:47:2c:70:fd:8b:b1:7a:a4:3a:8a:80:e8:52:3a:
45:3b:2f:18:ec:c9:5d:41:ba:b2:18:50:8c:f9:34:
b9:08:f6:56:01:e7:46:d2:bd:a9:aa:ec:b9:d3:cf:
3c:bb:bd:32:d4:e9:68:c7:ef:0a:5e:e4:6d:c4:a4:
e0:9f:a0:b3:c5:4c:8c:a1:37:8c:6c:e3:44:c5:ae:
87:4d:79:4a:e4:0f:59:c0:1b:98:56:aa:c1:27:a9:
88:da:34:64:76:87:42:ee:e3:3f:8d:f0:17:9e:d4:
ee:35:58:49:9e:e0:2b:c0:53:90:b2:df:cf:01:c2:
0b:f4:b8:cc:8f:80:ce:64:4d:72:52:57:03:15:c2:
73:47:bc:05:2e:28:37:7d:36:37:04:2b:d8:32:37:
28:2b:42:d9:b5:2e:66:64:4f:88:f8:1d:a9:c5:40:
31:81:f2:f9:54:fc:b1:49:e8:c1:f2:af:3e:c7:c4:
7c:40:c1:55:f0:a3:04:bb:af:ff:2c:89:48:4e:54:
25:da:b3:a3:4e:8b:84:a6:06:8c:55:64:de:85:e1:
a0:90:10:3e:2c:82:11:31:47:80:d2:62:e2:3f:db:
cc:45:ad:a2:86:98:00:70:c6:e3:f9:05:18:6f:75:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:32:A7:85:FB:30:50:4D:89:FE:52:D0:D5:E2:62:E6:C8:2F:C7
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7d:f3:e6:12:18:f7:c3:29:7e:1b:13:75:4f:a0:08:32:6e:
ea:86:0e:89:49:c0:c2:f2:b9:97:4c:79:18:19:4f:13:e1:4b:
6b:3e:0e:e1:cf:9f:cf:f2:9e:9c:b8:79:d1:9b:c0:59:47:d9:
a3:0b:02:22:29:f5:e2:67:5c:c4:61:9f:79:b2:cd:ec:c9:11:
b0:a7:d9:97:46:2f:8c:ba:9b:44:b6:e3:56:9e:73:ec:09:1e:
7d:38:9a:e7:b6:cd:3a:d2:c1:04:64:49:e4:6c:7f:77:2f:52:
6e:79:4d:c2:d5:34:4d:c1:88:b0:89:f4:72:40:a6:44:e4:f9:
62:11:b1:3f:65:e9:3f:f8:ab:56:1b:bd:77:a5:f7:aa:9c:4f:
5e:77:e5:6b:4d:8b:23:14:a6:11:36:7c:ab:55:50:82:dc:91:
e3:05:82:6b:ca:26:0f:d2:0f:6b:c8:ed:cf:43:63:ae:ef:9a:
5d:eb:63:8e:35:7a:0a:dd:fe:ba:6d:49:ec:c4:a9:66:65:09:
d1:2b:34:b0:d9:65:c7:5e:e7:ac:05:67:78:77:49:bb:07:7f:
ee:d9:da:f2:89:79:4e:30:ef:a9:6a:2a:e8:b2:00:e1:30:0a:
7b:6b:b3:4c:4d:c7:fe:b1:57:ab:f9:25:a6:2f:27:95:e2:eb:
95:12:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:32 2026 by rpki-client