Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: PtEUJ8dZlrMEXqgose5BHnvX8jY43E5q3eVYhei4kaU=
Subject key identifier: 11:31:6E:48:CB:D1:6E:4B:06:AD:BC:37:58:53:86:43:F8:5D:73:9D
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019D98BD8E7F14DF2DA67125F8A82FD15BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 00:00:52 +0000
Manifest this update: Fri 17 Apr 2026 00:00:52 +0000
Manifest next update: Sat 18 Apr 2026 00:00:52 +0000
Files and hashes: 1: 4PuIVLEIj4zZmZW-uUpD3PaA49w.roa (hash: ywwR6jVCoJoX2GD3atJ7KKAi8JK9J3yhYoAwj8Jfgz4=)
2: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: zFeMkCjFBSWFJkCpq3J3qAIZiUiXtT4Zr+EPazuv+fU=)
3: rVLmDTrtM8fRD2YrBcUhwt9PtiE.roa (hash: qzKX309DgizvFnW/1CNilCV4HRwfLRrE8VOSlsECFro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8e:7f:14:df:2d:a6:71:25:f8:a8:2f:d1:5b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Apr 17 00:00:52 2026 GMT
Not After : Apr 18 00:00:52 2026 GMT
Subject: CN=11316e48cbd16e4b06adbc3758538643f85d739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:50:eb:0e:1c:58:c4:a2:86:65:ea:20:97:
d1:44:d4:88:a0:ad:d0:f4:ee:48:9a:10:ee:2a:fa:
7c:2f:b7:c5:b8:10:0e:b5:18:13:cf:98:ae:52:09:
7a:e0:46:7f:71:37:ec:bb:9f:75:03:bf:05:a8:05:
f3:44:78:4b:a9:3e:b9:ac:0b:92:ef:7e:c4:39:7b:
99:21:eb:3e:72:86:31:72:32:ce:e3:44:ac:80:be:
f5:6a:84:aa:f0:3d:1b:d9:96:3b:46:de:3f:2e:19:
ca:f5:88:0b:38:9f:ae:73:81:d1:d2:9a:2c:9d:6c:
58:66:df:73:cd:50:99:10:9a:a5:54:ea:40:bb:e3:
0c:1a:20:4a:46:24:c6:f1:79:c2:b3:f4:d6:c5:f1:
f1:d7:67:f6:92:0e:2b:f5:42:53:72:50:96:29:69:
ae:05:0c:ce:a1:f2:6b:1d:5c:cb:ff:f3:98:e9:99:
56:9c:9d:4c:d8:db:9c:f4:43:f6:ee:ef:f0:e8:74:
5e:47:95:bf:72:8c:fe:ad:14:4a:33:e0:4f:a3:4d:
e7:2c:6e:af:1f:53:73:8a:a2:6a:d9:fa:b5:50:ef:
fe:3c:f1:58:c1:74:77:5e:da:be:01:70:15:cb:80:
b2:73:61:d7:d3:e1:1f:4d:48:9a:8e:5f:a3:96:c3:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:6E:48:CB:D1:6E:4B:06:AD:BC:37:58:53:86:43:F8:5D:73:9D
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2d:d7:a7:bb:44:2b:66:bb:c9:1c:85:5b:e8:87:56:9f:68:
17:06:60:b6:60:a9:f8:6a:a7:00:d0:a4:49:40:35:3e:1b:32:
50:ae:3c:b8:35:e6:84:79:52:2a:6d:ee:63:af:9a:fd:06:1a:
4a:02:64:6c:ca:20:f7:08:23:22:ae:11:14:d8:5c:0d:80:79:
0b:cc:91:87:65:98:96:64:43:92:d2:21:d3:0b:1a:5d:59:6f:
43:07:13:82:7a:76:37:32:99:72:61:cc:fc:5b:99:46:9c:9b:
8c:a6:77:3d:8b:03:83:3a:0a:02:0e:4b:8a:30:dc:6c:b0:c8:
24:6a:cd:72:e0:9e:ab:60:63:4a:4e:31:3c:2f:db:5e:3a:25:
cd:28:5b:0e:c3:13:b7:fa:f1:9e:23:86:aa:f6:aa:49:f3:87:
5a:91:30:18:0d:4f:23:f7:96:4b:1a:7f:7c:52:8b:f9:ea:26:
4a:d7:17:e0:74:d6:1b:f7:43:85:b5:25:14:e3:48:d9:ff:d9:
41:1e:b0:4e:32:63:e8:f6:fc:db:56:b0:7b:64:01:8a:5b:2f:
ae:52:e2:9a:36:80:3a:5b:64:0b:1f:aa:90:d1:b1:ff:ff:cc:
aa:38:fc:35:9e:ee:51:81:22:0c:39:6e:65:d9:83:fb:08:10:
6b:6d:44:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:28 2026 by rpki-client