Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: THp8HRDRQlG+GQQpeVVRcANEV3FouYEmq0nzQwNyI2c=
Subject key identifier: F5:F5:4B:06:0A:36:97:24:6B:AE:82:BD:91:F3:7E:5B:F8:01:82:A7
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019D9962325EFA3919D3B4BC5E48122DF86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 03:00:42 +0000
Manifest this update: Fri 17 Apr 2026 03:00:42 +0000
Manifest next update: Sat 18 Apr 2026 03:00:42 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: M6nrPGx8DnqzSQTguk8120qvj6lXIyHE8CgCbv02PMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:32:5e:fa:39:19:d3:b4:bc:5e:48:12:2d:f8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Apr 17 03:00:42 2026 GMT
Not After : Apr 18 03:00:42 2026 GMT
Subject: CN=f5f54b060a3697246bae82bd91f37e5bf80182a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:40:97:ea:a5:4f:70:4b:f3:15:1f:23:5f:
17:73:c9:0f:a4:ec:d6:77:c5:8b:7f:47:7a:44:2c:
47:62:c0:f7:5a:37:9d:fc:be:91:77:09:b1:42:82:
33:1a:1a:f7:06:51:03:a9:10:a0:7b:b1:b4:d2:c0:
f9:a7:f6:03:97:17:3b:ca:06:7b:86:9f:d0:43:86:
54:d1:7c:0d:7f:d9:e7:77:a4:54:fc:21:85:27:fd:
b0:f7:d2:8f:66:44:d6:78:7e:03:67:5d:ad:94:13:
cf:cf:52:74:45:3f:e7:be:07:41:28:17:a7:1e:9b:
9d:64:23:d9:70:f1:42:de:7f:53:e3:bd:f0:40:a3:
16:d1:c5:50:52:a2:e0:49:c8:0d:51:05:69:01:ca:
f5:6f:b4:c2:00:c0:b3:d2:af:e7:23:0f:d3:dc:9f:
f5:a4:f0:8a:60:b1:8d:70:07:58:23:73:82:34:53:
fc:33:1f:da:5f:a5:ec:41:a2:7d:bc:e7:08:38:2e:
e6:2a:b6:0a:0b:cf:1a:52:d0:0a:bf:c2:dd:d2:cf:
91:ef:7f:62:b8:92:ef:90:6f:9c:31:4a:79:af:b7:
13:a6:56:52:cd:e7:fa:e0:1d:cc:fa:18:c4:84:93:
1a:c5:23:28:3a:45:a7:24:a1:47:6b:83:ca:94:0b:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:4B:06:0A:36:97:24:6B:AE:82:BD:91:F3:7E:5B:F8:01:82:A7
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9a:cb:41:d5:47:a4:25:03:ec:af:09:36:a5:14:d0:44:a1:
91:9a:b7:8a:f5:1b:56:77:d4:71:4d:ce:1c:4c:d0:03:51:39:
47:15:d9:b3:f9:c9:71:3a:48:4f:06:5c:64:a8:3b:f1:b8:31:
03:3f:56:bb:13:66:40:fe:c9:d7:e5:d9:c6:0f:09:f0:d6:5f:
5a:af:85:79:c4:39:99:1a:ab:d2:b7:2c:24:c5:5a:a1:40:24:
f7:3f:de:5c:fc:a0:ca:72:74:bd:4e:7d:1b:d6:e4:4b:ec:7c:
07:5c:a2:e8:74:5b:d0:fd:0c:f7:2a:8b:3f:84:40:1b:12:77:
25:8d:2a:79:50:20:33:90:44:16:af:58:e0:66:9c:e5:3e:15:
2c:83:07:39:58:55:bf:b4:c3:62:92:04:99:f4:ec:7e:92:3f:
3e:ac:65:39:63:1b:c3:ac:e4:a0:e4:15:ba:1e:fc:ba:5f:e1:
1f:f7:23:53:e8:b2:6d:25:92:ac:3f:c0:e7:e1:72:7f:02:f5:
9f:d1:83:96:44:54:6d:eb:31:73:ef:ab:70:fd:61:f4:62:94:
82:47:0b:a4:5e:a1:23:04:f6:95:0f:08:bf:25:b4:6b:ee:d9:
77:f6:45:6e:30:94:c1:26:b3:ed:bf:2c:80:e5:ec:b1:9f:c2:
bb:2f:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:16 2026 by rpki-client