Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: 6FvBa79bUkoajCBG5fNiM4bh6rtj91E+15K+x0mMMaE=
Subject key identifier: 27:55:2B:47:6A:E8:07:F9:4E:94:27:30:C7:0A:43:59:A8:9A:64:D5
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 019D9AE2B2C211B6C33D2C6B899078058E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 119B
Signing time: Fri 17 Apr 2026 10:00:41 +0000
Manifest this update: Fri 17 Apr 2026 10:00:41 +0000
Manifest next update: Sat 18 Apr 2026 10:00:41 +0000
Files and hashes: 1: K35Qk63t7ia59ZiyjBPd0aONq6w.roa (hash: RSMZMIxkJ+qSFhNJD5N1wDzv0Dfcy2i+GoGDC38UiF4=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: ztGbEQqyr7+1GOADBoKbJEyd/5rd8HQMp2Xr+9Jn5tQ=)
3: w64U2JVyJqPP2rvHkE8stE6IvUw.roa (hash: zV7R8amjUZNnFr9X6KjTQkvlAu8o3fOcCNG2KYhv44I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b2:c2:11:b6:c3:3d:2c:6b:89:90:78:05:8e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Apr 17 10:00:41 2026 GMT
Not After : Apr 18 10:00:41 2026 GMT
Subject: CN=27552b476ae807f94e942730c70a4359a89a64d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:dd:5e:0a:ef:3d:1d:30:a7:6a:d3:3b:b8:
25:03:f4:16:10:64:67:00:4f:c3:c5:e2:8a:65:d8:
92:e4:b2:bb:9a:1f:d9:ca:ea:ab:2d:85:9d:18:e7:
0f:02:26:a4:e7:55:d4:5e:34:98:b5:ca:79:d3:dd:
f3:bf:85:18:bc:8a:3d:23:a5:26:4a:70:e8:a5:79:
a4:65:39:5f:df:35:17:a1:2c:b7:9a:17:d2:6e:d6:
92:ac:75:d5:bc:cb:cb:5e:71:69:f3:e7:89:3a:0c:
05:e9:88:44:9f:ff:86:bd:e2:0d:48:08:c3:2e:8e:
a6:6d:9c:a4:92:19:fb:2e:fb:83:d7:08:15:b9:b2:
dc:05:d2:37:6f:88:9c:8b:72:f4:bd:00:30:5d:e8:
4d:2f:1b:20:27:a8:7f:c1:89:6d:be:e2:39:93:bb:
de:22:af:95:19:2c:02:3b:50:d5:74:c3:93:7e:c6:
30:c9:8c:db:c3:b1:03:03:3f:ff:29:4d:b4:c6:28:
ac:da:c8:ce:ec:7b:26:64:f8:bb:6a:2a:86:37:c5:
7f:43:47:18:a5:18:86:8a:a6:a5:33:85:83:04:fe:
b9:4a:1a:6d:bf:74:83:b1:53:c7:89:ee:2d:4d:ca:
44:20:5e:9e:4b:fb:df:07:b9:7e:9f:d8:49:4b:55:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:2B:47:6A:E8:07:F9:4E:94:27:30:C7:0A:43:59:A8:9A:64:D5
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1d:ba:6a:59:b7:b1:49:bb:72:62:11:69:04:59:ce:90:35:
ba:b5:46:6c:f0:7d:31:64:78:16:21:fc:d3:e0:98:92:48:a3:
13:f4:14:c4:d8:f5:3f:46:60:1f:c7:06:bd:5f:09:b8:7d:79:
3d:8d:ba:e0:75:4f:b5:e6:c0:bc:e9:0e:ed:3e:fd:24:2a:68:
9e:06:4a:ed:a0:6c:dd:bc:9d:9e:ff:06:79:51:49:07:d0:e8:
74:74:a2:6f:74:1d:c0:55:ba:81:6c:79:81:4e:b7:2c:2b:bd:
ea:45:b4:fd:87:d2:25:9e:9b:de:6e:a0:dc:c8:23:8c:23:c2:
66:08:c3:e8:35:d1:57:f2:a5:10:8d:73:0a:6e:26:24:a6:43:
a1:c2:57:cb:ed:26:94:34:3e:3b:ea:ba:67:6c:79:06:5c:49:
1c:72:e4:3c:ab:e8:47:75:b1:a1:b5:25:9b:07:03:33:03:0b:
e1:35:9d:24:b8:db:0f:db:90:fe:60:4e:01:6d:de:1f:90:fa:
51:b9:cd:fc:88:8a:a7:04:19:b1:dd:23:4b:4b:4b:5a:89:27:
f8:d3:e9:f5:77:fd:d7:aa:fa:d3:ed:1a:f0:c6:3a:72:84:70:
cb:17:cc:20:c8:0e:f5:ad:7a:df:56:7c:d5:52:af:c6:05:0d:
00:46:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:56 2026 by rpki-client