Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: i/4fFP1TLRHiJp8PUKCUS85uMYRG+afnQytZDaP26vY=
Subject key identifier: BB:26:B3:6C:D7:CA:0E:11:DC:D7:C3:D1:2A:6B:07:C8:1C:3B:48:94
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019D985040972C73614171A819EBDA8B5D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:29 +0000
Manifest this update: Thu 16 Apr 2026 22:01:29 +0000
Manifest next update: Fri 17 Apr 2026 22:01:29 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: wNWb5tE90lNcrReSckI4Vx2hdD1H7fXIsVO1iunb1EE=)
2: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:40:97:2c:73:61:41:71:a8:19:eb:da:8b:5d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Apr 16 22:01:29 2026 GMT
Not After : Apr 17 22:01:29 2026 GMT
Subject: CN=bb26b36cd7ca0e11dcd7c3d12a6b07c81c3b4894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:24:ce:3e:a0:8d:69:6c:f4:4c:d5:77:71:
d5:ad:24:75:ce:d2:99:16:a9:24:d7:c9:5e:63:19:
bc:98:ac:3a:ca:15:e6:6e:43:c5:4e:8b:dc:28:99:
a8:70:6b:f1:4a:aa:90:3f:8d:6d:fa:69:c5:a9:b9:
97:ed:8e:24:55:f3:89:f8:ba:64:09:35:4b:a3:02:
d3:c7:5b:44:fd:7f:ee:b3:81:6e:31:05:dd:d3:18:
f2:e2:52:0f:98:f4:e0:b7:f0:b1:1a:a3:98:85:45:
ed:08:d4:71:ab:cb:b6:90:c1:d6:42:83:b3:fb:6a:
04:ea:4c:15:49:56:d6:e5:f0:c5:2e:d0:cb:60:db:
e0:9d:ec:d5:f0:92:8f:39:19:e0:68:08:fa:85:1f:
42:09:52:6d:ea:c1:f2:f5:75:90:2a:90:54:8c:48:
6c:a0:37:8a:fc:d5:e7:40:aa:6d:97:7c:43:be:13:
6f:97:d3:e8:8c:ae:28:57:1a:d2:4b:6e:c1:40:47:
42:0b:b9:4a:bb:72:da:9f:e7:c9:95:a3:f1:fb:6c:
18:92:68:2c:4d:e0:35:6d:f8:7a:b4:61:57:94:40:
ed:54:13:e7:b5:a8:be:ce:69:d1:88:2d:98:84:01:
85:4d:ed:18:d4:ee:71:4f:9f:4b:6e:b4:42:d4:7b:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:B3:6C:D7:CA:0E:11:DC:D7:C3:D1:2A:6B:07:C8:1C:3B:48:94
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:09:37:1f:0e:ce:a9:10:a1:a2:6d:51:3c:1e:83:1e:84:8d:
d3:d6:15:12:38:9c:17:96:9c:c6:ad:f6:50:3c:c5:96:b7:ca:
fb:12:a9:38:0a:c3:f0:c4:35:6b:67:3e:50:44:a8:b0:1d:94:
82:80:74:71:0f:1d:ad:91:8e:95:ff:5a:88:35:1e:1d:88:4e:
ff:5a:af:e1:39:93:fb:25:19:f1:04:2c:05:ec:cb:e2:76:c4:
0b:4a:49:99:e8:49:83:eb:7c:73:df:37:04:af:4e:a9:1e:0d:
06:07:c9:86:36:71:5e:12:7e:ab:9c:4e:e2:df:c4:f9:5a:e3:
6d:14:d0:64:ac:4a:e5:5e:ee:f3:6d:ae:9a:f5:0a:58:ef:96:
f1:fa:2b:41:ea:da:dc:a3:f7:c3:30:16:a9:50:29:cd:aa:0d:
5c:db:02:14:05:4d:15:3c:d2:e0:73:5f:67:75:a2:de:75:ec:
ae:e2:f7:ee:e9:8a:cc:39:dd:e0:ac:e0:d5:52:15:2f:41:de:
11:09:f0:76:5e:5b:7e:6a:68:9a:61:e0:45:dd:4b:6b:2d:95:
b4:6c:6f:7c:ab:ca:84:59:b3:db:9b:9e:68:3d:16:ae:89:37:
9e:0e:c8:72:62:95:58:f3:f3:34:49:1c:88:72:58:a8:db:c9:
13:74:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:10 2026 by rpki-client