Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: 7wQN3eeEaFw8qbQqzxVGHf5vJBgyr+65O58tOBz8zs0=
Subject key identifier: A7:F0:96:43:C1:6D:80:5F:EE:AB:C2:54:B7:0A:00:B3:DB:57:01:7E
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 019D99626E82948DE579B2FC044C8B0B6C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0FA6
Signing time: Fri 17 Apr 2026 03:00:57 +0000
Manifest this update: Fri 17 Apr 2026 03:00:57 +0000
Manifest next update: Sat 18 Apr 2026 03:00:57 +0000
Files and hashes: 1: 7eeo5JU3juiQ8OvLCUlUNcZKztE.roa (hash: JrzW0ZclqW95xnASoAIpiYFf6Rp0SBoASsXXNEQq9kc=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: wI1OmzApFrEqWhDCBxEvvmcuuUewPrH2YPU4qO4SAvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6e:82:94:8d:e5:79:b2:fc:04:4c:8b:0b:6c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Apr 17 03:00:57 2026 GMT
Not After : Apr 18 03:00:57 2026 GMT
Subject: CN=a7f09643c16d805feeabc254b70a00b3db57017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:bb:54:17:ad:50:a0:f6:ea:c5:21:af:40:
77:a5:53:6f:9e:7e:f7:3c:1b:3c:5f:28:5d:02:63:
ce:18:60:7d:27:df:b1:64:c3:4d:68:7a:c2:38:ac:
ba:97:fc:2a:f2:5f:31:e5:4c:12:84:e8:31:4e:f9:
36:77:4a:21:28:f0:f9:fc:dd:64:ba:36:88:d4:d9:
63:36:b3:cd:8c:e8:d6:bf:c5:ac:59:97:a6:9b:c3:
54:38:d3:3c:5b:90:e4:4e:35:2a:5b:70:9e:ea:5a:
19:9a:9d:1c:2d:94:49:87:bf:39:6a:10:14:08:88:
2e:b0:ee:2a:17:e8:d9:1e:08:b7:bc:de:e1:07:fc:
3c:9f:f6:95:91:93:38:78:71:02:ee:58:5d:e3:64:
54:4d:06:ea:8d:48:94:a2:ef:29:6e:2d:f3:94:a7:
f9:f8:88:fc:30:ad:41:24:1a:b2:df:e6:25:f4:ce:
c6:3a:72:57:85:ac:06:4c:78:fc:93:e2:85:aa:5d:
c7:f5:48:07:92:e5:f6:23:0f:a7:36:bb:9d:0c:41:
05:c5:d2:ef:fb:67:b5:b1:8b:b6:49:3c:bf:da:c2:
4b:d9:bf:00:c4:be:f0:f3:a8:9c:94:71:16:a0:f3:
6a:60:90:9a:86:cd:9c:76:45:fc:6e:b9:da:e5:85:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:96:43:C1:6D:80:5F:EE:AB:C2:54:B7:0A:00:B3:DB:57:01:7E
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a4:1c:7b:2c:83:21:9b:b1:1d:c9:29:a7:32:8b:db:cf:47:
08:48:af:ee:0b:d4:a8:98:2c:fb:70:1d:ce:06:88:e0:90:34:
25:a2:48:3d:05:58:83:05:be:aa:55:d9:88:9a:5b:9c:8f:12:
cc:51:ce:7b:8e:d7:3b:c8:97:d6:b1:0f:1b:06:fb:83:17:a2:
00:53:dc:30:c6:7c:2e:a3:8f:38:ad:0e:61:2b:8d:b3:fa:99:
4e:ba:4c:af:2d:2d:28:8d:10:b1:26:01:7a:bb:0d:5d:75:54:
e7:77:7f:d3:56:bc:2b:6e:48:be:51:df:54:d1:a3:e8:f5:10:
09:aa:75:0e:a9:b5:57:31:13:e9:db:43:93:06:e3:86:3a:6b:
81:82:8b:72:4c:c3:78:8f:f8:d0:60:3e:48:4b:99:2b:01:e7:
11:d5:a0:41:54:88:83:f7:40:ad:b0:8d:50:81:0b:f5:e0:dc:
52:b8:93:4d:70:ec:d1:10:64:6b:a4:b8:6a:0f:45:7f:c3:57:
18:d3:f7:8c:47:82:69:5a:30:bf:f7:33:ee:11:e7:d8:82:e9:
1b:d7:53:db:aa:e8:7f:d2:b1:ba:2f:58:83:35:ad:e2:c7:b6:
9c:ee:48:d4:c6:58:6d:ba:14:ad:1b:f6:4f:53:4d:97:6f:98:
77:04:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:45 2026 by rpki-client