Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier: p9jYA+OcINA0Om8daZp0MFnJI5d+hL4CSiJ5Vkn40ms=
Subject key identifier: B4:7C:1A:A3:F7:25:37:16:EB:E0:E9:B0:29:48:D5:9F:BF:31:BB:B1
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial: 019D992AF0EF1548BE71D915621898B43FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number: 0D67
Signing time: Fri 17 Apr 2026 02:00:21 +0000
Manifest this update: Fri 17 Apr 2026 02:00:21 +0000
Manifest next update: Sat 18 Apr 2026 02:00:21 +0000
Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: 5FejBYDhJodYDo7l/T4JMNqBN5uKCMBxgD1+u8qOb0Q=)
2: c0i8991UJCOly_bGDSBQG4Aot8k.roa (hash: fe/DfYOp9gMMpbSc+SphBLp4DkHzqjeSNzT9WK5FYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f0:ef:15:48:be:71:d9:15:62:18:98:b4:3f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Validity
Not Before: Apr 17 02:00:21 2026 GMT
Not After : Apr 18 02:00:21 2026 GMT
Subject: CN=b47c1aa3f7253716ebe0e9b02948d59fbf31bbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:27:5a:9e:08:ad:93:78:69:e1:c0:d2:ec:
56:18:d8:bd:1a:b2:0e:48:31:2a:2b:37:62:4d:b7:
8c:9d:1f:bc:98:61:59:b7:68:f9:bc:4d:c4:6a:24:
ff:cb:6b:0e:dc:6e:bf:cf:9a:99:66:29:ef:dc:39:
ba:64:eb:cf:70:5b:b8:8f:8d:c9:7f:33:ee:d2:d7:
fe:94:59:68:91:d6:a1:8d:e6:e1:fe:54:b2:95:6a:
f8:b7:1f:66:86:fb:da:a3:70:15:43:e4:ac:87:95:
b0:56:b2:1b:9d:55:24:fa:3a:2e:72:d4:15:46:30:
e4:28:48:d8:20:42:a8:bc:97:6c:6e:77:76:30:36:
0d:95:ab:2b:93:e9:c7:16:c5:93:84:74:3f:39:0b:
3d:06:d1:15:df:d3:95:78:86:12:b4:5a:e0:4f:8e:
8d:77:1b:81:5b:97:9d:06:46:39:4d:db:5d:49:dc:
44:13:57:20:e7:d2:f6:97:db:f8:56:84:ca:bd:c3:
77:17:6c:c5:6b:29:92:0c:aa:da:89:1b:e0:81:91:
a2:24:82:ee:96:32:41:45:b2:4c:98:c2:15:05:ab:
98:49:28:12:43:6f:ad:97:8f:dc:93:ad:92:9d:9b:
eb:ea:4e:64:86:ab:c1:60:12:04:83:9e:9b:5d:1d:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:1A:A3:F7:25:37:16:EB:E0:E9:B0:29:48:D5:9F:BF:31:BB:B1
X509v3 Authority Key Identifier:
keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9f:aa:e3:37:d0:bb:9e:ce:67:83:bf:d1:51:64:51:fd:99:
53:5e:c7:fa:3f:94:f1:99:9a:2c:13:dc:4b:71:96:9e:01:3e:
a1:28:95:de:0a:a1:44:fa:97:ac:0d:b2:e6:fb:a6:80:43:18:
b6:56:85:90:4c:29:9e:8d:72:c4:26:12:b0:b3:ce:ea:77:76:
be:55:20:96:30:ec:04:96:99:90:5c:3a:75:ab:5c:5e:0f:3f:
37:61:e0:33:a7:ab:af:3d:43:bc:91:28:d3:ab:a8:99:1d:70:
f4:f0:26:6f:74:79:3e:5e:4e:7a:8a:df:9e:c5:26:ef:05:4b:
ff:48:ba:fd:88:b8:d3:4f:eb:77:44:8c:27:78:6d:9a:45:15:
42:57:a8:3c:d9:aa:5f:2f:4d:65:fe:4a:0d:ee:23:4d:bd:5a:
2a:6e:f7:9c:03:9a:53:02:98:a9:9d:04:43:68:9a:42:39:7e:
85:d6:ed:08:b7:d3:98:58:44:e3:ba:c9:97:b8:e2:2c:59:9a:
8a:00:8f:18:75:77:10:0e:7c:dd:70:83:6d:8f:bc:d6:c2:da:
64:b8:a5:eb:65:68:78:06:d8:21:54:81:3b:54:15:18:02:11:
f8:1d:8d:df:6d:13:85:8f:3d:5a:fe:e3:23:86:60:57:0f:b2:
9b:af:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:53 2026 by rpki-client