Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
File: XeYTaCVSAQKY86aUoA18WQYGC5U.mft (raw, json)
Hash identifier: BFUkhquauEo/wwWmMJv4fFhzQs8Q2X2pRKQdL6KZxuQ=
Subject key identifier: 58:14:4B:39:39:DB:CE:89:D7:4E:A3:EA:3A:C5:98:81:D5:04:38:6D
Authority key identifier: 5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
Certificate issuer: /CN=5de613682552010298f3a694a00d7c5906060b95
Certificate serial: 019D9AAC478BC044979AA7DCB57B4023D1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:01:14 +0000
Manifest this update: Fri 17 Apr 2026 09:01:14 +0000
Manifest next update: Sat 18 Apr 2026 09:01:14 +0000
Files and hashes: 1: 8E85CKuNqBtAq_mQnEGUCCO3R10.roa (hash: CgmtiE0mp6q+6KobblRjrSYw7pd0zVbtE+o0y7MhUQQ=)
2: XeYTaCVSAQKY86aUoA18WQYGC5U.crl (hash: A1sin4efcF8DNBLy4ixEQ/ZjYrtRsTfwNy6Xp+1qqgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:47:8b:c0:44:97:9a:a7:dc:b5:7b:40:23:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de613682552010298f3a694a00d7c5906060b95
Validity
Not Before: Apr 17 09:01:14 2026 GMT
Not After : Apr 18 09:01:14 2026 GMT
Subject: CN=58144b3939dbce89d74ea3ea3ac59881d504386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:90:4b:1e:17:b5:b6:25:c6:41:bf:e0:35:
f6:b8:23:cc:4a:18:27:5f:21:04:5a:b4:89:45:fb:
27:2e:c6:39:05:29:9d:aa:a5:24:fb:ba:68:3b:5d:
15:69:a8:4e:4f:4b:c0:2d:2e:15:25:c4:a4:a4:c0:
f7:e6:d3:a1:db:b6:32:b7:48:c7:43:66:48:2d:2c:
c3:81:6f:f4:83:e5:a5:29:03:b1:ac:24:de:68:71:
d0:28:11:c4:2f:86:d4:fa:18:ee:44:1e:e2:45:ce:
f3:d5:89:36:6a:dd:f9:3a:ed:b6:8c:10:9f:8e:20:
c8:de:4b:8b:b8:9b:fc:aa:88:dc:51:25:a7:ee:72:
9d:4e:2e:88:39:d4:12:fb:de:cb:14:e1:e6:fe:2d:
66:00:e1:60:fb:59:e2:c1:dd:0a:33:a6:3c:1d:c9:
15:9b:b4:36:1e:c5:24:5f:6c:1c:03:b7:ca:03:71:
f2:f7:c3:8f:89:a9:b6:81:3a:d1:96:c8:cf:b1:0f:
25:d0:2a:da:76:24:2f:f6:e5:a7:c9:9e:1f:a1:f6:
bd:cb:9d:91:a3:ce:fd:65:40:cb:02:f4:c9:e4:79:
75:f8:5d:e4:5f:54:af:61:b3:eb:21:04:22:21:bb:
4f:3d:56:84:54:c2:f3:97:af:69:29:d3:27:02:c9:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:14:4B:39:39:DB:CE:89:D7:4E:A3:EA:3A:C5:98:81:D5:04:38:6D
X509v3 Authority Key Identifier:
keyid:5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:70:eb:0b:4f:e5:94:f9:6c:dd:ac:22:83:8f:2e:9c:a4:19:
61:f1:a7:76:17:c4:e7:e5:1b:22:3b:cb:c3:00:16:63:a3:89:
8d:e7:c0:01:7c:04:7c:b4:53:7e:c9:68:5e:e2:f0:9c:95:ee:
b1:3d:48:28:8e:3b:22:7f:5d:d3:fd:cc:74:a3:b8:94:46:9d:
d8:e0:73:3c:76:41:b1:e4:4f:bf:12:cd:be:b5:91:45:86:24:
50:31:41:a1:1d:7f:4d:d8:d0:b2:0c:de:78:b7:7b:5a:92:f1:
13:29:a9:19:30:4e:23:c5:1e:ae:83:f7:ec:f1:dc:99:16:b9:
71:d4:8b:ea:00:b7:db:2f:bc:b7:df:e0:17:00:76:11:73:71:
84:8b:b0:5f:b3:7f:af:f5:ad:21:d7:f8:e2:91:3f:81:41:56:
58:02:c0:49:63:ef:3c:7b:56:c1:2c:25:f7:fd:72:ae:98:04:
39:ab:da:e9:85:3e:f7:fc:34:ce:c5:39:fc:59:f6:50:82:e0:
57:a1:e3:97:ef:f0:9e:d9:cb:f1:7b:1f:53:be:5e:50:3b:19:
db:35:9c:69:86:e6:a0:0b:70:c1:16:98:5d:12:bb:4c:d4:44:
0a:d5:b8:23:9d:9e:22:55:35:ab:03:78:d9:33:8a:bd:44:a6:
18:fe:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:39 2026 by rpki-client