Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: Docrp6Rwi8ecml7ZL9kTGObFKWRjNbeUJAviKWIfNUU=
Subject key identifier: D8:EC:88:BE:4C:D1:5A:9F:6C:23:BF:00:20:60:D7:14:14:07:88:E8
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 019D98BD2D64894F5BBB4B26ECAE60EBD3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0DD1
Signing time: Fri 17 Apr 2026 00:00:27 +0000
Manifest this update: Fri 17 Apr 2026 00:00:27 +0000
Manifest next update: Sat 18 Apr 2026 00:00:27 +0000
Files and hashes: 1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: yZD8hNZlNRFyXLi8Sgfb8NSL4T0tJInvYg+FsvKDk08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:2d:64:89:4f:5b:bb:4b:26:ec:ae:60:eb:d3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Apr 17 00:00:27 2026 GMT
Not After : Apr 18 00:00:27 2026 GMT
Subject: CN=d8ec88be4cd15a9f6c23bf002060d714140788e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:65:af:86:65:f3:ef:37:5d:e9:81:da:27:
45:da:72:9a:42:33:d3:91:c0:58:ae:bf:6c:67:31:
bc:1e:2a:d7:1e:3f:be:ce:c3:55:7c:bd:30:eb:9b:
65:1c:47:49:40:15:23:b0:84:f7:81:33:cf:e2:ce:
49:24:16:ce:0b:bf:47:d9:63:10:b5:78:cb:ba:97:
da:ff:53:c1:d4:f9:51:5a:b4:b2:2f:bd:13:d3:57:
c7:35:34:d9:32:b4:11:e5:5c:ec:58:bc:a8:c8:66:
1e:2f:84:fc:85:a6:b2:9a:07:97:7b:dd:fa:d7:ff:
da:bf:0d:a9:15:24:b6:dd:d4:68:ae:2f:94:87:98:
73:82:cc:ae:34:96:ab:f0:10:7e:0a:b0:ea:fd:08:
29:6f:22:0d:de:79:81:60:58:58:5e:24:2b:ca:93:
38:bb:c9:44:ee:45:78:d8:d5:59:63:df:ab:ed:84:
d6:87:ed:3b:5b:57:63:fc:7a:71:eb:fb:69:0d:29:
2e:b4:82:a1:0d:80:a8:8b:c5:32:94:49:2e:fe:0a:
fb:20:24:1b:0f:c2:95:26:cf:2b:53:bc:2b:8c:7b:
f9:8d:66:f6:8d:fe:c5:ec:65:da:55:f4:1c:c5:30:
ce:b4:82:68:33:85:7d:5e:79:2e:35:02:35:a8:53:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:88:BE:4C:D1:5A:9F:6C:23:BF:00:20:60:D7:14:14:07:88:E8
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6d:f2:5a:db:02:db:92:e2:c4:d3:0e:bd:b6:b6:b8:c3:ac:
7c:56:cb:7b:7e:51:ad:07:d1:a3:b0:d2:35:a3:50:f6:0e:78:
b9:44:71:37:b9:13:14:92:82:30:29:a6:88:1d:6c:1d:ce:5a:
c1:f8:30:85:66:19:12:e4:ff:85:e9:b8:d9:d3:c6:7a:65:57:
c8:07:4e:34:04:cd:2c:00:e2:7d:34:7a:b2:16:9e:fd:b1:05:
53:b7:b5:7e:2b:09:ab:ad:b6:f5:a0:d1:cf:9d:35:69:f2:3b:
00:a1:a7:28:a6:64:a8:b8:f1:92:a3:ff:38:e6:53:c1:a3:58:
87:70:05:64:03:7c:38:4b:a9:e6:e3:f7:5b:7e:d0:d4:fa:a2:
96:d3:1a:00:c2:5c:f2:8b:bd:f3:f4:4c:88:6b:13:44:49:78:
5a:2d:19:00:a2:64:2a:48:d0:b2:e6:8a:2c:a3:a8:1d:6d:1d:
12:c2:0d:93:a8:86:c5:9e:25:b3:7f:1c:9c:e5:05:a6:3d:cc:
0e:f6:7a:22:26:ae:a8:6b:18:05:3b:05:8b:9b:97:43:f4:20:
0d:60:47:c6:7a:01:7f:4c:6b:3b:b9:b1:57:06:c7:8e:03:9e:
9a:e4:2d:e0:29:ab:96:ac:7f:4e:9d:3a:c1:ba:de:ac:0c:30:
c6:ef:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:20 2026 by rpki-client