Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier: FVqbffRefiHeWQ7oInCjMylOHRoGQ6dd3bKfP5MiC9k=
Subject key identifier: A8:72:54:80:5D:09:B2:F4:6B:88:1F:DF:74:03:3B:73:F4:73:55:A0
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 019D9A3E4347AEA43642B7A3D8E720882D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number: 0A7F
Signing time: Fri 17 Apr 2026 07:01:04 +0000
Manifest this update: Fri 17 Apr 2026 07:01:04 +0000
Manifest next update: Sat 18 Apr 2026 07:01:04 +0000
Files and hashes: 1: V6ybFfc4rzpu3NrH9kaqGbFeKqk.roa (hash: CmcBK0JbdCkq9SyfG/xpgWBN+pvjaz0MINnXMk2x50o=)
2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: ZU9JWb011+Gyuk+6q1A/C0955mL/DtTehFBJY/8wQ2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:43:47:ae:a4:36:42:b7:a3:d8:e7:20:88:2d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Apr 17 07:01:04 2026 GMT
Not After : Apr 18 07:01:04 2026 GMT
Subject: CN=a87254805d09b2f46b881fdf74033b73f47355a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:0b:d7:23:37:af:a2:1e:5d:16:1a:a1:c7:
f8:27:92:cc:16:3d:6e:1a:b3:0b:94:4a:d8:d1:30:
80:3e:2d:16:60:c8:75:d8:ad:06:bf:ae:77:ed:20:
1e:75:a2:6f:30:50:bc:a4:b1:e6:87:90:49:39:e4:
e3:69:90:a0:22:e2:64:bd:78:8b:39:e8:7f:f7:5c:
5a:ba:ba:11:80:20:56:b8:e2:6e:04:6c:c5:4f:1f:
59:2a:72:45:ad:0e:d6:9c:0f:b6:36:7f:fc:33:5c:
dc:f5:b4:a0:ca:1a:09:6f:21:b0:f0:40:9d:bc:d6:
14:1f:e6:38:ec:31:df:a9:80:a3:b4:6b:5a:d2:82:
a0:70:e1:33:eb:08:d1:4e:ba:79:4b:81:b8:ff:0b:
61:3d:0c:b3:f0:3f:ac:81:f9:de:27:5f:28:8b:2f:
cf:ac:ba:87:52:87:02:52:aa:56:2a:7d:85:82:06:
72:c6:ad:3a:66:9d:43:0b:ee:47:dd:a2:ae:76:44:
96:6e:2f:ff:34:d8:59:6b:5e:93:f0:64:0b:98:54:
e2:af:e4:22:a1:1d:5c:72:37:b3:a1:8d:88:ea:22:
86:c2:74:b9:e9:f4:99:8e:73:28:29:18:0e:8c:cd:
46:62:90:4e:b8:0d:57:e3:74:3e:fb:22:c8:78:41:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:54:80:5D:09:B2:F4:6B:88:1F:DF:74:03:3B:73:F4:73:55:A0
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:54:13:d1:a2:d1:23:bd:48:ac:20:88:75:a1:5b:b9:c7:50:
c6:d1:4e:c3:cd:89:08:ff:f4:2d:f1:10:2f:f9:b4:90:4d:91:
96:53:1c:4b:f2:1d:2f:d7:e6:8a:97:fb:29:df:cf:9d:4d:0c:
9c:82:3e:c7:44:f5:1e:1a:51:ac:ec:3e:f1:0c:76:56:b9:d4:
d3:2a:ea:d9:0e:40:48:cc:0f:c9:6a:26:8a:1b:c4:61:53:60:
7c:2f:43:5b:91:26:00:be:7e:15:ae:9f:0d:51:e6:38:c1:3e:
71:88:99:df:c3:14:c6:89:6a:90:87:0c:28:9b:7f:51:c6:4c:
9e:82:40:db:72:ee:2b:47:2d:fe:63:2f:fe:8c:5b:c9:f4:8d:
49:bb:7d:23:e6:00:2b:4a:14:5e:4b:03:05:bb:42:9c:a4:1f:
1e:1a:0e:51:26:6a:53:e0:c2:6a:5b:86:3d:40:fe:c5:ef:09:
13:f5:3f:5a:48:c3:2b:28:07:2d:59:03:65:e3:31:10:e1:76:
98:b0:20:85:7b:80:c3:56:72:77:2b:59:38:fc:87:76:9e:18:
ca:d3:64:d7:ff:71:5c:86:08:f5:29:c6:8b:c2:7c:ea:a8:c1:
d4:80:ab:9e:ad:78:32:d9:00:0a:28:dc:74:25:9c:e8:19:18:
f4:37:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:15 2026 by rpki-client