Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: OQBWxyNTeI3nLuq5U7QNcTiJrsM0lbiliVVhGAYou/Q=
Subject key identifier: 22:BD:CC:A9:B7:7E:20:CE:CB:46:92:D8:FF:6C:5D:E3:B0:57:9E:2B
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019D98BD8EDF4538E060C1EFE566F9404543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 15FC
Signing time: Fri 17 Apr 2026 00:00:52 +0000
Manifest this update: Fri 17 Apr 2026 00:00:52 +0000
Manifest next update: Sat 18 Apr 2026 00:00:52 +0000
Files and hashes: 1: HIhz8pdIXgjK-XvqEHJKRiDVUZU.roa (hash: 9IgTkOouc4NOjiZYiPyRk/fd3ULM88kb+ZAbPFTN9oU=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: RFt3/DSpDJPZDjBNjrR02INy6CzMDq4rLUrlOq1Anqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8e:df:45:38:e0:60:c1:ef:e5:66:f9:40:45:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Apr 17 00:00:52 2026 GMT
Not After : Apr 18 00:00:52 2026 GMT
Subject: CN=22bdcca9b77e20cecb4692d8ff6c5de3b0579e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:26:ed:71:dc:9a:6c:6d:88:c4:02:1b:95:
c4:31:63:78:39:8e:df:db:16:43:9c:ed:a3:10:ce:
f4:00:fa:5f:4a:d9:05:d8:46:46:ca:f2:1e:5d:05:
31:1c:a1:ab:73:3a:bd:93:dc:09:e8:b5:48:f8:b4:
2b:b2:aa:a5:3a:87:e3:1c:d8:82:eb:57:e1:3c:4b:
95:6e:b3:b7:53:8b:ba:07:09:ed:98:08:3a:4d:95:
ff:4f:19:1e:d8:f0:7c:ab:da:2d:79:69:a1:94:68:
40:e7:0e:09:01:18:70:0e:88:4b:8a:88:c6:42:08:
2e:7d:26:1b:cc:07:2b:09:00:4d:34:b2:d2:6b:e0:
a9:a9:8e:b3:38:47:d0:2e:32:28:0b:20:fb:b2:8b:
1d:36:2f:40:32:29:2b:d2:c6:69:28:2e:82:b6:c2:
ba:a2:30:8b:bc:61:e1:9d:d5:b3:2c:8c:51:6e:db:
92:04:2d:b3:12:e5:b7:ec:f9:df:89:5b:5c:d0:a4:
a9:75:05:82:e2:68:7a:bf:1d:b8:42:df:5c:d4:6e:
6a:a7:3b:79:74:bc:76:73:91:b4:a5:c6:de:de:9f:
97:48:88:6b:00:fa:b2:85:17:ab:71:2f:35:aa:64:
88:92:1d:21:f8:b9:0d:f7:e1:8c:7d:f0:52:4a:dd:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BD:CC:A9:B7:7E:20:CE:CB:46:92:D8:FF:6C:5D:E3:B0:57:9E:2B
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9a:49:1d:ee:be:76:51:9b:49:56:3f:02:ab:18:fc:2c:f2:
c8:7c:01:58:41:9a:d5:0d:40:61:4c:33:97:f0:2b:9f:66:ba:
76:09:33:5f:91:4f:8d:ed:db:2a:28:fe:6d:f5:73:bc:d5:7c:
2b:42:a0:66:bf:ea:06:13:69:5f:64:08:7b:8d:6c:7e:09:f5:
f9:f4:f1:00:12:8a:4f:7b:d1:99:82:9a:a6:23:3d:5f:d1:d6:
b2:52:5f:7f:10:a0:17:5d:f2:1f:d8:03:5b:ce:ca:db:a2:d8:
35:98:ad:ad:6f:51:c5:ad:51:3b:6a:5b:33:a8:17:c8:d2:49:
ac:21:f0:04:06:fa:00:44:64:73:dd:b3:fa:f9:62:b1:70:8e:
58:a6:cd:7e:96:4a:2a:b2:a0:92:2a:0a:ef:2d:a4:f6:27:67:
80:22:69:dd:b1:8e:29:48:65:1c:1b:9d:05:e5:70:29:dc:86:
72:89:c3:0f:4c:91:6a:be:ba:c3:ff:16:54:d7:8d:9e:e4:6e:
59:d9:5a:18:94:0c:09:54:8e:9e:36:42:ec:ac:a5:01:18:88:
32:70:87:80:07:6f:b9:a4:85:16:29:31:08:5a:e1:8c:33:1f:
e9:62:89:6d:a0:d8:e4:b0:8b:76:af:fa:05:0c:d9:29:c5:4c:
58:d5:2b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:36 2026 by rpki-client