Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: SffmEULaKNmanXgxIQ0lNpjZVvr8qT16HyEjJiP0TTw=
Subject key identifier: C3:D4:A9:97:57:AF:26:34:3C:28:A7:EE:AF:2D:B1:52:5B:41:EC:09
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019DA377FD0737170EC22D25FE94B7E5C130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 08B8
Signing time: Sun 19 Apr 2026 02:00:42 +0000
Manifest this update: Sun 19 Apr 2026 02:00:42 +0000
Manifest next update: Mon 20 Apr 2026 02:00:42 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: 41NoTQuIkua9NN9Urz2OuVL5BptPQVKXI91qHi2TZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:77:fd:07:37:17:0e:c2:2d:25:fe:94:b7:e5:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Apr 19 02:00:42 2026 GMT
Not After : Apr 20 02:00:42 2026 GMT
Subject: CN=c3d4a99757af26343c28a7eeaf2db1525b41ec09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:06:3a:44:1a:2f:6a:56:95:26:e6:19:68:
a7:df:38:19:c8:0a:59:0b:bd:a4:b5:f6:77:a1:4d:
10:c4:46:25:29:bd:64:56:b0:9c:44:35:2e:cc:7f:
92:36:66:35:9e:ac:fb:0a:63:7d:26:bf:0e:43:25:
07:a2:a3:c6:84:7b:e0:e3:aa:88:00:2b:15:fd:4e:
ba:c1:19:ae:ee:33:9b:d8:9f:9b:dd:95:b9:04:76:
ec:85:10:0b:09:ca:48:49:6a:e7:e5:c5:c8:e8:aa:
bb:53:dc:5a:84:c2:4c:94:eb:37:52:8d:df:82:e2:
e4:c9:ec:50:30:51:b6:23:cf:fb:3e:75:ea:07:e1:
63:a7:79:cf:98:6a:ab:23:03:ad:4f:40:eb:bf:f7:
87:40:a4:ce:14:2f:ec:e9:05:3e:e4:51:6d:da:98:
a2:a6:0c:5e:01:7b:78:39:f3:a9:be:cd:19:92:19:
50:cd:6a:8b:8b:cf:de:48:c6:48:70:e1:02:c8:24:
f2:c6:cb:27:5d:fb:3d:1c:4b:18:10:7d:5c:2d:3a:
ec:2a:fd:e7:6a:50:65:cf:ac:6f:80:5f:7e:07:4f:
ec:0a:5c:b9:a5:ab:76:7e:f7:0f:b2:f4:e7:24:e5:
0b:e6:db:14:c6:c4:76:2b:d4:53:6a:e7:83:2e:14:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:A9:97:57:AF:26:34:3C:28:A7:EE:AF:2D:B1:52:5B:41:EC:09
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fe:34:19:16:90:d0:12:e4:04:3f:80:73:20:a7:fb:ed:67:
20:b3:1f:20:bc:9d:dc:1f:0b:62:3d:5b:b1:4d:2e:d2:9f:c4:
89:c9:97:e9:44:34:36:16:88:81:5f:69:6f:21:4c:79:15:d2:
5b:d6:06:74:cb:5f:90:14:fd:d3:25:64:07:09:c4:2b:e9:39:
d4:e9:e2:0d:a0:06:f5:a0:72:93:37:00:7e:bb:fa:80:7e:24:
0f:04:a0:35:8a:60:7b:8a:81:cc:76:27:08:34:1d:23:f2:ff:
88:ab:1a:a8:a9:b9:e9:d7:24:d4:ab:b5:86:fc:03:92:16:36:
61:8c:09:6e:bd:40:9b:ad:5a:1e:a5:e2:eb:bd:b4:f3:bc:fb:
b2:2a:70:31:9c:6d:8a:ea:89:69:2e:8b:7e:88:59:53:ae:8b:
20:b8:d2:f9:f4:84:ea:1f:79:fa:ed:1b:7c:ee:f9:e8:e7:12:
c7:be:f8:ec:59:57:76:02:34:71:a9:85:b6:44:91:9d:a7:d6:
1e:df:7b:c0:b8:05:43:6c:91:12:c6:30:3f:ec:e7:77:63:57:
82:9d:6e:22:8f:cc:ce:e4:fe:5d:36:42:ac:e0:2b:e0:a2:e9:
27:01:2e:7d:63:3c:dd:22:6f:f2:e0:25:57:f3:11:3d:b6:b1:
7c:6c:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:21:38 2026 by rpki-client