Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: gY5ojeqm87Xn0xnhHFBbH8VuHFZaUod8wSB4CICBItY=
Subject key identifier: 09:F6:CD:C7:BA:85:20:32:B6:6A:C2:54:47:18:BA:3C:85:4A:D0:9F
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 019D9A0738FC436FD1F7A592FC66C9FCEFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 06:00:57 +0000
Manifest this update: Fri 17 Apr 2026 06:00:57 +0000
Manifest next update: Sat 18 Apr 2026 06:00:57 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: HBtOEE9XNbXXntLVilDeh9pFtFPBjoYY8sp5Otodhto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:38:fc:43:6f:d1:f7:a5:92:fc:66:c9:fc:ef:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Apr 17 06:00:57 2026 GMT
Not After : Apr 18 06:00:57 2026 GMT
Subject: CN=09f6cdc7ba852032b66ac2544718ba3c854ad09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:40:cc:6f:39:ba:c5:97:bd:3b:3b:1d:c0:
b8:1a:36:18:d6:dd:84:f4:42:c4:18:c8:27:23:a3:
b4:96:6b:ff:10:4e:bf:a1:6f:1f:92:53:cb:8a:67:
2b:e5:98:e7:ad:32:e3:44:24:36:cc:3f:b9:ee:9b:
db:f1:c2:83:cf:97:17:2f:de:70:39:c9:33:11:f0:
f9:56:24:5c:f2:8d:2f:c5:c9:1f:62:a3:72:c0:1c:
3d:3f:55:64:13:82:50:09:3a:d7:e8:1c:d0:8c:c8:
c0:a5:fc:59:88:e4:09:60:0b:18:fa:6e:98:0e:bf:
38:1c:2d:74:26:8a:0d:ce:00:78:c3:bf:44:7a:5b:
f6:1f:6f:3c:40:af:cc:17:a6:b1:88:36:4b:9a:2c:
3c:69:e1:be:2b:0c:ef:4b:69:16:b8:3f:01:87:1a:
c1:51:72:43:49:a8:4a:48:fd:0f:71:64:23:7f:28:
1a:ff:12:52:4a:1e:d0:83:9b:5b:5c:68:27:f9:b8:
b2:fe:12:38:4a:ba:52:61:0f:7c:f6:5b:44:65:3e:
b6:e5:f6:5e:a7:4a:08:64:b1:bf:79:47:9d:ef:83:
be:b3:71:7c:48:46:28:3a:01:e3:ba:83:d6:de:96:
8c:d9:0f:e3:1a:d8:45:65:e9:9c:35:e9:ea:16:89:
ee:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F6:CD:C7:BA:85:20:32:B6:6A:C2:54:47:18:BA:3C:85:4A:D0:9F
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:06:2f:b9:48:80:47:ee:60:4b:9c:26:e6:47:bc:f9:64:98:
13:05:fb:66:ad:4f:32:60:e0:15:5c:08:e5:e9:94:f1:77:74:
7b:59:bb:47:0f:70:a0:06:a0:89:dd:ed:74:b7:b9:91:25:0e:
0c:08:09:3b:b2:cb:f5:65:7d:33:b2:24:8f:3c:d1:2e:0b:3e:
12:1f:9c:fd:01:59:fe:92:d2:6e:fc:a3:03:82:26:df:2c:84:
f5:c1:d6:1a:96:90:78:06:0b:06:21:83:f7:21:04:b2:3a:5f:
7b:37:cf:a6:92:2e:2e:55:d2:38:24:03:c7:a7:04:49:46:74:
8e:39:e1:11:d5:d1:bc:a5:63:12:35:13:c0:e8:bb:94:b1:4e:
51:05:e5:86:bb:d2:29:3d:7c:df:ee:92:d7:76:0d:48:7e:e2:
a8:84:8c:f9:42:63:c2:b2:c7:8b:91:d5:9a:c7:f3:38:33:73:
80:17:c0:8d:73:db:02:a7:78:4a:fe:5c:d8:8d:24:e2:6b:82:
17:56:32:89:0d:ab:26:5c:f9:6c:1f:16:6d:6a:81:fc:fd:eb:
95:be:08:65:b5:6e:0e:5c:e5:1d:14:55:4e:7d:fc:fc:4f:bf:
4a:81:17:99:94:37:19:b6:2f:29:14:2a:05:28:ee:54:ef:be:
4e:05:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:17 2026 by rpki-client