Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: HGSp++85qRVjzPWJdxF9dpSkIwi7Zjr//Zto1vt6ykI=
Subject key identifier: 0B:F4:26:75:A2:A2:7D:B0:14:A1:DE:E7:B4:E0:73:F6:28:3E:BB:F3
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 019D9AE39DAE9346A84D0254864485B43AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 10:01:41 +0000
Manifest this update: Fri 17 Apr 2026 10:01:41 +0000
Manifest next update: Sat 18 Apr 2026 10:01:41 +0000
Files and hashes: 1: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: uU0iVqMkQANkAlKelkrWVzzrdv/tGZCFUvSUk+Idy4Q=)
2: uSf8YpQ-0ch8yPbVC8hW_1UaI7E.roa (hash: TdBQBjgQL2vkXRlnvGccZPDz+o0AOBvhUDV7Uw/d7z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:9d:ae:93:46:a8:4d:02:54:86:44:85:b4:3a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Apr 17 10:01:41 2026 GMT
Not After : Apr 18 10:01:41 2026 GMT
Subject: CN=0bf42675a2a27db014a1dee7b4e073f6283ebbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:2d:8c:b2:7a:27:77:76:64:75:1f:e8:61:
73:b5:68:dc:76:7d:73:17:69:2c:6c:a2:df:3e:c1:
c6:6a:85:24:47:ef:19:02:b4:33:55:a4:1b:3b:19:
04:a7:4c:f4:06:7e:90:ad:f3:30:97:15:06:ef:4d:
e4:de:93:21:ba:76:5b:1e:fe:24:5a:ac:73:d9:10:
ee:f7:ca:30:ed:4f:60:b6:bd:da:d7:9a:78:ad:0a:
40:48:b1:f8:ab:82:58:c6:39:05:ae:ed:8f:54:4d:
7e:a5:2a:60:c6:06:c7:c8:fb:8b:5f:6e:d5:65:11:
9b:f3:c0:2c:46:ec:46:f1:d9:d1:10:9f:88:2d:83:
0e:f2:d9:6c:ee:6b:03:0c:4c:83:ec:9f:c5:a9:ca:
6a:68:d0:87:09:0d:54:22:aa:58:e3:ee:01:43:dc:
a3:e3:ca:c2:34:79:f0:21:db:2d:36:1a:a3:fb:c7:
e7:b3:b7:e6:c1:87:09:a0:ea:ca:00:44:ad:09:3f:
79:86:16:08:05:61:6f:c1:ea:d2:41:08:b1:a8:24:
e8:93:f3:39:ba:7d:77:cf:c3:6e:96:61:80:de:24:
1c:e4:fd:01:aa:23:86:5c:70:3e:c6:43:d7:8d:a1:
93:98:dd:fc:56:71:ba:e3:5d:b7:c9:a4:b5:8d:ff:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:26:75:A2:A2:7D:B0:14:A1:DE:E7:B4:E0:73:F6:28:3E:BB:F3
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:74:9d:0c:4c:69:d5:92:69:90:68:c7:b8:ba:d4:e3:3b:
08:50:a9:93:b7:94:e1:0d:1f:e7:69:a9:94:7d:9a:58:33:68:
67:b8:9b:bb:11:51:2e:1c:bf:93:d9:80:6d:59:02:01:2a:d4:
41:ce:f9:9c:c6:60:79:78:91:cb:87:a1:cd:5c:33:89:fb:e3:
67:75:e0:0d:0b:dc:a4:97:a5:62:80:9b:a4:07:ee:2d:ab:73:
76:c1:1a:e6:a2:44:c7:d3:af:f9:c4:83:2a:26:90:1e:b0:63:
9a:aa:0f:ca:a4:5d:c9:84:39:28:42:12:ec:0f:83:7c:53:2f:
ae:ae:58:6f:d9:28:a4:e3:06:c7:ad:11:3b:a0:01:7a:2c:c4:
5c:9c:0b:ce:2d:da:65:8c:af:72:d2:11:37:ba:c3:70:03:60:
ea:ed:9c:c4:c3:d3:87:20:36:8d:df:d9:3a:f3:06:84:1e:b0:
71:a3:5a:63:f6:d9:09:49:95:1f:62:95:47:46:a3:cf:dd:8e:
68:68:74:65:16:47:c5:07:1c:f4:e0:eb:ad:c9:5c:00:30:b7:
df:13:1c:cf:5e:b9:ba:4a:34:37:32:9e:27:02:de:de:45:f6:
e5:e5:7a:41:d0:4e:a4:a5:1d:80:3d:3d:47:28:bf:d9:d3:25:
de:1f:50:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:48 2026 by rpki-client