Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: 8RN/3HVEqd0RIb3EKZcn0nSK191VDs+aQ0Ta3tDlOyc=
Subject key identifier: AA:1D:3E:B7:40:40:C0:42:75:54:63:44:6E:72:A7:01:FE:BE:0E:5C
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 019D9CD15846E2119754E194108E2CDC81A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 07C4
Signing time: Fri 17 Apr 2026 19:00:58 +0000
Manifest this update: Fri 17 Apr 2026 19:00:58 +0000
Manifest next update: Sat 18 Apr 2026 19:00:58 +0000
Files and hashes: 1: Sp-Rp44m3Zt8RuuF6n5097S4ock.roa (hash: Lz4ywdxNN6CBi6o+N2fbgHtT/99fDk01I1Om7/73lR4=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: W3/Bcc4cLvO343rrhBIvmVqfjJvvKgUjv6RPWjA55r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:58:46:e2:11:97:54:e1:94:10:8e:2c:dc:81:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Apr 17 19:00:58 2026 GMT
Not After : Apr 18 19:00:58 2026 GMT
Subject: CN=aa1d3eb74040c042755463446e72a701febe0e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:b3:73:77:ab:db:f7:bf:ed:14:f5:17:8f:
6e:00:72:fd:58:ae:c1:b1:1e:10:98:6b:39:1d:87:
23:65:c3:0b:f8:0a:8e:3a:e1:42:b0:0a:6b:44:1a:
e5:7c:16:34:65:91:6c:33:a1:dd:e4:b1:d4:ea:5a:
d7:d4:04:f9:ed:7b:8f:66:e4:aa:b1:77:ee:ab:0f:
d8:b9:46:cf:6f:fc:7a:0e:e3:a4:84:36:fa:48:da:
49:12:dc:8d:df:c3:77:83:50:27:74:56:7d:34:64:
e2:19:2c:05:68:52:dc:d5:c4:2e:15:4a:12:9d:b8:
cc:47:37:e1:18:80:06:c9:00:a6:d2:50:00:c6:b2:
3b:fb:81:84:5b:32:0c:86:9d:83:e0:1a:be:b9:ca:
ac:b3:f4:5a:f9:6c:64:3e:58:9f:fa:75:bc:31:5d:
7c:b8:be:69:0c:f2:12:9d:ab:a9:46:78:25:f9:27:
f2:64:14:ab:b6:95:59:11:c4:4f:4a:5f:e5:8d:24:
6a:f7:42:34:9f:c7:44:21:82:ad:b0:7c:75:98:ca:
4b:a7:0d:16:0d:fc:89:10:6e:5a:e0:3a:3d:ef:d9:
c6:9e:50:db:2c:e5:c0:9d:aa:cd:36:a1:97:79:d7:
bf:1e:a6:be:22:7c:99:72:9e:7a:2d:f0:e8:28:5e:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:3E:B7:40:40:C0:42:75:54:63:44:6E:72:A7:01:FE:BE:0E:5C
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:ee:34:d4:42:98:94:5d:6f:5a:f2:43:5a:94:9f:24:34:
04:b5:ba:e1:37:6d:6d:c3:0e:d1:ab:dc:99:10:ae:d3:f7:52:
87:b5:41:08:10:0a:c3:47:b9:92:a8:8f:91:6c:20:15:27:4c:
67:60:5a:c9:4f:70:39:f6:ab:df:4f:bc:a5:26:e5:4e:41:89:
34:5b:4d:e2:f2:0e:d5:a8:40:47:04:fa:3e:0a:af:00:b9:80:
f2:1f:83:36:bf:19:c8:20:ce:ad:e6:c9:f8:7e:30:08:6e:e5:
6c:fe:2e:ec:a7:b3:34:b1:1d:1a:5c:18:78:1b:04:37:41:4d:
05:c1:67:e7:38:85:e2:69:e6:4f:20:d6:66:6f:b4:cf:dc:53:
93:0b:01:8d:2f:97:68:f6:88:53:00:3d:18:d0:e1:8d:7a:95:
b2:57:c8:d6:89:49:5e:a8:8c:fc:b0:20:70:f7:db:aa:70:ea:
48:44:aa:89:da:2d:27:ab:86:53:03:1f:01:3f:78:c2:1f:87:
f7:61:13:4f:55:b4:60:bc:cf:6c:df:97:21:b2:4d:3f:7b:7f:
0b:71:af:5d:e9:2c:94:bc:91:2a:17:8a:d9:0f:1d:76:61:5c:
af:30:67:7d:e0:ee:ba:94:57:ce:1f:ff:ff:49:79:e5:f8:40:
57:49:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:54 2026 by rpki-client