Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
File: xdXOafzPDGu44rJmfh44-5QPPSY.mft (raw, json)
Hash identifier: vtkpCmfu6cVCbQAfSmfE+e8qMFuGrwObTft7HZpxYoE=
Subject key identifier: 16:7B:A3:03:EC:5E:50:33:7A:AB:EE:C4:F8:06:0D:B8:EC:ED:72:9F
Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
Certificate issuer: /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Certificate serial: 019DA30AEB48E4EE0BEC48874A08C576AD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
Manifest number: 0D32
Signing time: Sun 19 Apr 2026 00:01:34 +0000
Manifest this update: Sun 19 Apr 2026 00:01:34 +0000
Manifest next update: Mon 20 Apr 2026 00:01:34 +0000
Files and hashes: 1: 1-pMzy3XW1_dYsnUwH5bbwkr_jQA.roa (hash: bK9K2skyngCiWtdJ+6ql0BuVrZBCPHHAO74b5mBhnYY=)
2: xdXOafzPDGu44rJmfh44-5QPPSY.crl (hash: uRZRRlbYaMZ9ltmvkp8SPlkSSLRnVWHPy50y+mQf/EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:eb:48:e4:ee:0b:ec:48:87:4a:08:c5:76:ad:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Validity
Not Before: Apr 19 00:01:34 2026 GMT
Not After : Apr 20 00:01:34 2026 GMT
Subject: CN=167ba303ec5e50337aabeec4f8060db8eced729f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:ea:20:0b:c5:eb:8e:2b:a6:1b:7a:f3:bb:
a9:ac:4f:af:4d:77:63:e1:9c:6f:42:6e:a4:e8:da:
d3:97:5d:bf:6b:27:f6:61:52:1f:4b:9d:14:fb:c9:
26:d8:23:c8:7f:ec:6f:83:f5:42:87:b6:b8:86:26:
f9:09:56:95:8b:2d:28:33:4a:de:51:e5:50:c1:ce:
81:c9:50:ae:59:f4:14:6c:ce:f7:d7:91:9c:26:6e:
bb:5b:3d:25:bd:7f:f7:91:3c:53:7b:0a:a3:1e:fc:
ff:66:f1:4e:2e:f9:58:bf:f3:de:db:14:3d:a3:f6:
0f:52:3c:30:26:64:8e:e9:3e:a4:15:0d:99:19:30:
fc:86:dc:15:c1:e3:18:fb:aa:db:6d:fe:5f:98:ca:
10:98:19:3c:e1:9c:ee:ed:51:8d:d4:f2:01:8b:ae:
07:a5:e3:f8:39:54:d9:cf:7f:15:80:14:c6:3c:90:
18:8b:2d:9c:ec:9a:3e:4f:24:8f:37:40:69:4a:0c:
7b:d8:ae:2c:77:e3:8c:c4:dd:20:b2:49:32:89:1e:
d8:d5:41:82:ad:87:63:83:f5:cd:03:ad:b8:e3:56:
52:dc:82:9f:ad:e3:f6:3c:13:c4:74:10:07:44:8e:
b0:2f:1b:c0:3f:a5:c9:25:81:b7:06:ef:19:d9:18:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:A3:03:EC:5E:50:33:7A:AB:EE:C4:F8:06:0D:B8:EC:ED:72:9F
X509v3 Authority Key Identifier:
keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a9:e3:79:6e:0b:d0:78:01:8e:b1:09:18:0b:23:c7:61:7d:
bd:1f:e4:11:33:b7:49:02:ae:4e:72:0c:1a:96:62:6e:2f:81:
a5:a2:07:41:6c:7b:72:f0:2d:65:e1:5f:9f:36:ba:7a:36:58:
9a:2d:7d:a7:0b:52:46:fe:a8:bc:64:ba:47:d5:5e:cf:7e:d2:
5f:ab:87:d9:cb:9c:c5:9f:33:e8:e9:9d:f9:a8:76:06:8a:91:
df:8e:6a:93:f2:68:df:64:09:62:32:f9:61:aa:14:e3:f5:a6:
06:91:f6:f7:66:3e:c6:1b:26:54:a6:41:84:67:61:21:2f:de:
82:61:ea:b1:94:a3:22:23:3c:6c:1b:c4:3c:8c:28:b9:d2:87:
c9:5d:39:33:c3:26:45:5f:ba:e6:af:da:06:e9:3f:22:73:3d:
04:07:b1:a1:b0:1b:e5:e8:16:24:c8:a8:bd:29:63:4d:38:7c:
b4:18:0f:4d:00:26:21:60:c5:d3:ef:7a:3f:c2:e3:bc:64:2a:
59:b1:81:6c:9e:ef:13:cb:ce:c6:69:ce:6a:27:a7:2d:a2:aa:
9e:a9:10:f2:12:64:9b:87:03:9e:4f:f0:77:bc:df:ad:8e:c1:
a7:e9:69:d5:c1:cd:e1:c8:6e:ae:cb:a1:25:70:02:5d:e9:3d:
c6:9d:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:38 2026 by rpki-client