Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: 3gTB/KbxTowwkrVrJVT56gljveZovR58ugiwyBNG1uU=
Subject key identifier: 93:B4:57:1B:B0:F4:75:BA:00:C3:BB:74:DE:18:17:F9:8E:98:36:AB
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019D9B87EA2D0F09A98789E0BB02D5927B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: B4
Signing time: Fri 17 Apr 2026 13:01:08 +0000
Manifest this update: Fri 17 Apr 2026 13:01:08 +0000
Manifest next update: Sat 18 Apr 2026 13:01:08 +0000
Files and hashes: 1: PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa (hash: 4mulaDEjjaiJyNExN4M0awWM7+bcCqHjl7wFr6Imm1M=)
2: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: OWksisUJuep0MNYzG0WS9LTIqFo4M1vlTDhfttw+zrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ea:2d:0f:09:a9:87:89:e0:bb:02:d5:92:7b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Apr 17 13:01:08 2026 GMT
Not After : Apr 18 13:01:08 2026 GMT
Subject: CN=93b4571bb0f475ba00c3bb74de1817f98e9836ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:80:12:5a:7d:6f:b5:c7:1b:f1:59:53:d1:
4e:80:e9:ae:27:87:4c:27:cf:71:73:44:75:d6:fa:
c7:31:88:2b:69:20:92:ac:43:0c:c9:1f:c4:0a:62:
1b:ca:9e:2a:82:e8:c2:54:49:af:50:52:f1:9a:87:
84:b2:88:00:bc:da:cd:f3:9f:60:3f:c0:51:07:b3:
6d:af:5a:b8:b2:10:ed:9d:12:40:2a:f4:4c:7e:e9:
ab:6f:1e:0d:26:ad:ba:62:5e:72:2e:bf:95:0b:ff:
a9:8d:0f:34:9c:6d:aa:18:c9:02:ad:a0:ea:af:09:
a7:3d:73:b6:68:5b:d7:d3:be:62:b0:00:4a:73:43:
9d:67:a7:62:77:32:93:09:e0:ea:29:2e:d6:11:a0:
7b:1a:fa:7f:e5:e0:d8:4c:7f:50:06:c7:4a:2e:59:
c2:d9:20:f5:15:60:5b:01:5b:45:b5:09:20:dd:99:
0d:f9:3d:db:9c:45:8c:4c:80:d7:3b:af:47:86:48:
9e:0e:d0:ce:8d:65:34:d6:29:01:fa:6f:30:a1:8c:
8d:cf:ef:19:91:a2:89:4d:bb:d4:ee:d6:43:fe:3f:
c0:6a:0d:5c:be:90:f4:d9:a6:ea:03:a9:20:d0:c9:
60:4f:b3:0e:5b:d1:48:54:25:7d:97:54:f3:0b:4e:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:57:1B:B0:F4:75:BA:00:C3:BB:74:DE:18:17:F9:8E:98:36:AB
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d3:80:a2:56:d8:aa:6c:f1:11:dc:d3:4b:45:43:74:49:53:
b3:fa:5e:c6:31:27:a0:6a:ae:ec:08:d7:16:13:64:92:c7:76:
9f:ef:11:82:f5:01:9d:38:95:15:f4:a0:a3:a4:cc:8b:2d:a3:
0a:8f:70:38:bc:b5:26:b5:22:29:1d:14:6d:f7:34:85:1d:a2:
56:a1:f7:e3:fb:f8:8e:2c:ee:12:a3:20:8e:f7:54:66:f4:d9:
75:59:56:b2:94:a7:31:ff:57:8e:1d:18:4b:9a:62:7c:b9:ca:
53:bf:d8:13:6b:2b:22:76:16:68:34:50:88:a1:15:d7:d8:5c:
15:93:a2:ba:ba:4a:7c:12:e4:31:2d:bd:88:95:97:95:b2:12:
e3:af:4d:32:11:9c:7e:bd:cb:32:bb:58:e9:57:6b:99:88:6f:
4a:d9:8f:ff:8d:d0:02:5e:1c:29:cf:52:e1:a7:c7:1c:0a:6c:
48:27:9a:70:8c:af:00:93:14:c7:3b:cf:a4:26:46:d7:d2:e9:
80:b5:1d:6e:43:41:79:92:1c:e0:9b:d9:e0:24:d7:55:93:76:
1b:ec:ed:d4:75:ef:12:3a:e2:75:4e:27:91:7a:79:36:89:86:
24:78:4a:1a:d2:07:4c:3e:ac:14:a1:36:3f:f1:91:04:2b:ae:
8b:69:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:12:31 2026 by rpki-client