Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File: X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier: 4qEyTxQn8ExgzXBKYR9WoYnuvo4+TjEa7xfyOMVJEDw=
Subject key identifier: 42:83:B0:59:F1:F8:2E:14:03:35:C8:52:84:D7:67:49:C1:A7:A1:83
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 019D992B968438D10E6CB99E6B45371173A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number: 177A
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: +S7d4MxIrAqE+WgJ2dKXp+ULmRC6+nXUkHGBqgUNqqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:96:84:38:d1:0e:6c:b9:9e:6b:45:37:11:73:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=4283b059f1f82e140335c85284d76749c1a7a183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:8a:0c:3a:4a:10:82:73:17:50:50:d6:7f:
45:c0:e4:a7:a0:dd:f1:83:9f:31:a9:58:d4:37:1b:
38:af:8d:e7:75:53:36:49:d8:b3:d9:35:b1:ff:d0:
7b:bd:dd:aa:a4:fc:90:29:aa:a4:54:a0:5f:60:f4:
73:35:4d:1e:36:51:0a:bc:0b:bb:8f:6b:4a:b8:91:
08:7d:d7:9c:dc:c5:47:7a:37:c8:cf:b4:99:6f:e3:
03:b4:0e:8f:80:07:c4:e8:3c:48:ab:6d:d0:4e:e0:
e3:67:d8:c2:0c:ba:0b:a0:de:ce:6a:d9:e8:8f:9e:
e9:0e:8b:a3:51:f4:eb:b6:f4:34:4d:94:ea:c8:9e:
e4:02:d5:54:55:be:7e:e4:cb:b2:10:ab:d0:64:a8:
41:c2:c3:bb:67:cb:80:ee:b4:08:fd:bc:20:43:e1:
01:1b:5a:9e:b6:c9:86:fe:63:9d:4b:aa:57:96:a0:
8f:9b:83:66:e3:23:dd:1e:d3:81:26:ac:89:1a:db:
d9:ca:b4:3c:08:c3:ee:84:0d:bd:5c:27:8b:bd:7e:
51:1c:53:02:f9:28:d5:29:5e:ce:69:00:67:8b:e3:
3e:17:3e:61:75:32:9c:34:2b:de:d2:85:88:41:34:
2f:f9:1c:d9:f5:b7:c0:7c:b9:bc:f3:62:5a:62:0a:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:B0:59:F1:F8:2E:14:03:35:C8:52:84:D7:67:49:C1:A7:A1:83
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b6:df:7b:9c:38:58:a4:4c:25:9b:41:da:82:f7:bc:2f:79:
dc:49:6d:d1:03:e2:16:b1:5e:c5:a5:b4:3a:2a:0b:7d:92:b9:
06:b6:35:16:3f:01:87:28:d7:3f:d9:fe:88:0e:b0:bd:8b:fd:
d6:dc:9f:09:2f:9a:f3:8d:e1:8c:6b:56:6d:f1:b4:da:30:b3:
08:3c:1b:91:c1:e5:06:e9:55:73:18:f5:0f:9b:63:39:28:f6:
7d:2f:43:ab:05:0d:7d:57:e4:8a:df:b9:33:9f:57:22:55:d5:
d6:6f:23:22:0b:ff:aa:9a:3c:b3:50:af:09:79:33:3c:58:76:
b4:16:1f:50:c7:9c:ef:f4:61:4c:a6:5f:62:3f:31:ae:7c:56:
32:a1:a0:ca:91:07:ce:b0:53:25:a2:34:84:a8:54:57:2d:32:
30:21:44:29:01:21:a3:01:f8:b0:69:5e:f3:69:89:96:d9:10:
65:15:f1:a8:c7:38:a8:8d:6d:a2:90:c5:c4:38:21:d4:e1:22:
69:5f:e6:c5:ab:4d:98:c0:3e:a0:91:09:21:ac:80:be:e3:74:
cb:21:ca:ed:64:3b:32:80:65:0c:62:23:8a:1d:84:9c:b2:21:
2b:fa:94:1c:81:13:95:f2:9b:02:ca:ef:8f:d0:70:f9:02:48:
20:b2:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:37 2026 by rpki-client