Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: UH5DfPjCW7J0efagUAG3Rdzspkx447nltuBePRwjFAY=
Subject key identifier: 3B:A2:AD:92:99:AF:54:4C:1C:ED:4C:7A:4D:3D:47:96:43:5B:86:63
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 019D9BBE62DDDEF972F3B4AD5CDBB5CEACA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 14:00:38 +0000
Manifest this update: Fri 17 Apr 2026 14:00:38 +0000
Manifest next update: Sat 18 Apr 2026 14:00:38 +0000
Files and hashes: 1: 9hnY7Mi-DWWNXT8zxPWlDMpFkVY.roa (hash: KmgeWMyp8Cb4dRrZsFfQDYyQitlhpxsyGtinqL7w4YI=)
2: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: 982v9enxMx3KfQK5W59mswKqCL7uO61UIKANTjXjVG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:62:dd:de:f9:72:f3:b4:ad:5c:db:b5:ce:ac:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Apr 17 14:00:38 2026 GMT
Not After : Apr 18 14:00:38 2026 GMT
Subject: CN=3ba2ad9299af544c1ced4c7a4d3d4796435b8663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:55:33:94:01:f1:63:0f:14:05:c6:ba:87:
be:18:97:76:15:cc:24:f3:3f:7e:2a:27:07:87:44:
9a:09:db:e8:98:e7:7d:5d:1f:03:e1:1d:08:c0:96:
07:bc:97:f5:9d:70:59:fe:52:4c:57:85:b6:db:8c:
88:26:70:aa:46:d5:e2:d3:dd:84:b0:ba:87:d8:24:
34:51:83:76:6b:49:ea:27:db:31:81:b2:04:f5:41:
12:19:0d:97:60:ff:07:88:1e:05:59:b6:ed:60:ac:
b3:56:0c:d2:a3:1f:28:10:92:ec:d5:8f:5f:d2:cb:
71:b1:b2:2d:59:d9:f5:bb:c1:a8:6b:c3:f5:31:95:
22:24:55:27:31:e6:90:da:59:1a:dd:78:8f:67:6e:
c2:9f:a0:5d:8b:7a:08:fa:69:27:97:ba:aa:c5:96:
31:69:8e:d1:e5:3a:40:9e:34:e3:a2:67:78:a0:a8:
7d:cd:6c:17:c6:2b:44:7c:a6:58:59:d8:2d:24:92:
39:d8:40:1a:24:ea:43:ea:21:25:50:65:46:63:f1:
7f:3d:11:1f:e6:ef:a6:ac:39:13:11:05:34:05:50:
94:66:66:e2:67:4c:df:b7:de:e3:75:0d:df:2c:e5:
d8:a7:c1:47:b5:1a:f3:5d:fb:c0:ca:17:d2:47:3a:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:AD:92:99:AF:54:4C:1C:ED:4C:7A:4D:3D:47:96:43:5B:86:63
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f8:12:5f:14:15:ea:3b:5c:20:8b:8f:39:0a:21:b3:be:8c:
2e:fc:3b:f1:01:56:ae:98:b5:25:27:f6:05:7e:f6:cf:85:39:
0c:5f:c1:f9:1a:cd:cc:40:f7:f7:8f:d3:40:7a:27:94:41:97:
70:74:15:73:a6:bf:c9:46:ba:53:05:a0:e4:d5:c7:1f:fd:e3:
01:0a:53:48:38:1b:ba:7c:7c:94:af:5d:84:df:3c:86:b7:fa:
ec:59:e3:c2:82:ca:bd:70:18:b7:ec:67:89:b5:84:73:e1:3d:
78:ba:7f:fe:66:5b:e6:02:ba:20:25:24:4c:21:51:f8:23:e8:
53:ee:6d:99:8a:a4:4f:bd:17:13:37:26:75:e2:76:b3:48:23:
38:24:3b:e0:58:a7:5e:52:0a:90:35:71:96:63:42:c5:23:f8:
53:c8:de:0e:d7:bf:91:ac:c1:6a:f8:81:fd:f7:31:52:9f:80:
b3:41:2d:15:79:eb:99:28:eb:dc:ca:50:fc:7f:c5:10:0f:c1:
57:71:29:17:9b:62:9b:d2:07:af:50:fc:fc:f0:ba:71:75:f4:
5f:11:13:c6:cc:d5:89:e2:42:cb:8c:51:ec:ef:03:a2:90:89:
9a:18:93:1e:c9:28:12:6b:68:da:67:cd:6d:87:eb:75:6b:45:
79:b5:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:29 2026 by rpki-client