Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: +3rJUE0S2G0s9y9ekApgzkYqxi6ZZXTmfjSXa++L3rg=
Subject key identifier: 5C:6A:73:7C:EC:C2:91:54:AF:3A:B1:7B:84:B5:90:B4:8C:07:1E:89
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 019D9A06E08ECF7B80ED35B3522F8ECB3B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0F59
Signing time: Fri 17 Apr 2026 06:00:35 +0000
Manifest this update: Fri 17 Apr 2026 06:00:35 +0000
Manifest next update: Sat 18 Apr 2026 06:00:35 +0000
Files and hashes: 1: IJctrhezjfWjiA84ZaayWYeZh1k.roa (hash: VetyKsjNSyH6fNCp1k97xHgv6Vja8yJIQbMcO2qIjkU=)
2: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: PWLldW386xxQOiQnjC34P0vR0RDa9yjfTNh4KAi5Beo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e0:8e:cf:7b:80:ed:35:b3:52:2f:8e:cb:3b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Apr 17 06:00:35 2026 GMT
Not After : Apr 18 06:00:35 2026 GMT
Subject: CN=5c6a737cecc29154af3ab17b84b590b48c071e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:9f:b9:2d:38:16:0a:79:51:00:1d:18:e8:
69:c4:53:49:78:bd:cc:d5:dd:16:a3:f5:24:bf:51:
d4:ec:b5:27:ca:1d:df:ce:f2:44:d4:a4:82:8a:cb:
7a:57:7b:00:b5:47:75:4e:90:13:10:ba:2f:a7:69:
ef:c2:0d:5a:bc:60:14:dc:c6:dd:2d:90:e9:5a:f5:
de:07:b9:9f:8e:e9:95:e0:3d:ec:6c:9d:b9:fe:9f:
6e:33:08:c9:b4:71:d5:ca:a6:97:18:55:01:3d:16:
c2:2c:49:c6:56:09:41:77:fa:d4:0f:36:f1:36:42:
1d:e7:1f:83:9f:97:59:a7:eb:9e:e6:da:98:1d:d9:
b9:a7:4c:09:20:55:8e:a5:c0:3e:7a:fe:53:28:12:
31:4e:97:50:36:87:a6:3c:e3:df:99:65:6e:61:b7:
e1:12:76:08:7c:0d:e6:71:5e:61:1b:64:02:f5:0f:
a3:19:9f:ab:ea:3b:42:bb:ba:95:07:f5:2d:41:cf:
c6:37:15:15:db:33:d2:57:ec:d1:1f:6a:40:66:25:
cd:2e:ec:4f:d2:73:31:1b:ed:3d:68:d2:02:b8:63:
46:2f:ed:dd:c4:67:ef:f1:96:df:d6:b2:84:44:69:
99:34:08:aa:b4:44:98:4c:1a:27:9a:e8:ba:8b:9d:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6A:73:7C:EC:C2:91:54:AF:3A:B1:7B:84:B5:90:B4:8C:07:1E:89
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e7:78:b0:ce:21:1a:64:95:0a:dd:58:95:c9:92:11:db:fb:
12:bd:44:6a:31:6d:9a:59:04:27:27:d7:96:57:22:b0:7d:dc:
10:1b:61:b1:62:18:41:1c:94:c9:c9:9c:3c:79:f6:61:7e:f5:
73:05:1b:6e:9d:92:b8:1a:4d:5f:cb:4a:ce:b5:20:66:dd:49:
3a:dd:24:88:d9:c9:5b:40:0d:72:61:9f:3e:9a:30:9c:cd:25:
74:13:9b:46:c3:4d:e6:d7:1c:65:9e:c4:cc:1e:6a:a9:0c:c2:
41:dd:91:1f:8b:a1:79:78:cf:d8:5c:0f:f5:79:be:ab:79:b7:
07:24:d1:90:73:a6:90:58:50:5a:7d:06:22:d4:d5:38:81:ff:
9c:a8:58:79:ee:df:dc:23:da:b0:65:a1:f8:5f:3d:64:b6:5d:
89:d3:04:2c:99:25:68:b3:38:17:f7:75:00:35:44:09:5f:c3:
4b:e1:46:b2:45:ee:64:0d:a0:11:9a:8f:b3:77:7c:13:7b:e7:
c8:d6:ed:91:2c:7c:34:1a:a7:8f:c4:8e:3f:6f:5a:78:d4:4d:
61:13:10:d5:31:f9:3a:a4:44:0f:f8:6b:7e:da:a1:46:36:6b:
3e:44:0b:2b:85:e5:75:5c:45:c1:4a:af:a7:a0:76:04:bf:95:
54:1a:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:14 2026 by rpki-client