Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: Sxu9za1x+960b22QGyzj0upS1xu10aK8UPXnnPGes8s=
Subject key identifier: DD:F6:57:0E:96:EE:B6:FA:2E:1C:F9:0D:DA:3D:E7:10:63:81:85:48
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 019D98F464B7B72C2CDDF5851D77230D2665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 1892
Signing time: Fri 17 Apr 2026 01:00:46 +0000
Manifest this update: Fri 17 Apr 2026 01:00:46 +0000
Manifest next update: Sat 18 Apr 2026 01:00:46 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: Q3sDTZNfW7RwjuEc4XwDJjLkO2YRZjO8DDJnCZzFi7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:64:b7:b7:2c:2c:dd:f5:85:1d:77:23:0d:26:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Apr 17 01:00:46 2026 GMT
Not After : Apr 18 01:00:46 2026 GMT
Subject: CN=ddf6570e96eeb6fa2e1cf90dda3de71063818548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:ec:01:41:b0:81:5b:f8:f1:46:14:3f:ee:
1f:8b:75:93:d8:8c:30:21:13:1e:3c:61:86:ef:6a:
1a:33:72:4d:0d:d6:2e:78:e6:06:ec:96:0a:7c:48:
d2:7c:d9:eb:1d:ff:b1:41:f4:47:cd:eb:df:a5:10:
35:b3:50:4f:b9:c6:a8:40:56:4c:3c:95:76:df:47:
c2:7d:4e:df:9e:58:67:d8:27:90:fd:21:89:10:17:
f5:9a:94:17:b9:5d:7c:c2:23:a0:7f:f4:13:ed:10:
73:e9:4a:2a:88:e6:a7:8f:8c:06:06:22:03:0e:41:
02:18:74:1b:15:e9:24:7b:aa:7e:b6:07:58:50:ed:
25:69:0f:c6:19:b7:a1:df:fe:91:47:3a:96:c0:04:
cf:66:6a:7a:54:01:0b:0d:52:2e:17:25:38:4a:37:
c3:28:cb:4b:00:55:75:ce:23:d6:aa:a4:de:f5:6f:
fa:9e:ba:f1:11:9c:ce:66:92:af:e9:78:fb:c2:67:
d4:1f:13:9d:e7:08:20:97:91:f3:2a:d4:57:cf:4e:
b4:2a:df:00:14:38:be:fc:74:c5:e5:cf:00:b5:08:
7c:ca:09:7d:5a:d4:d6:12:4b:eb:0c:dd:e8:5b:57:
d7:6e:d0:5d:c9:11:65:44:11:cc:32:5f:38:18:5f:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:57:0E:96:EE:B6:FA:2E:1C:F9:0D:DA:3D:E7:10:63:81:85:48
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ab:6b:c1:5a:ad:37:12:f1:8d:55:c6:d8:ff:9f:28:4f:52:
85:ef:58:7a:6a:81:97:db:bf:21:3c:38:25:7e:a6:5c:e6:b3:
bc:46:b5:6c:f3:2a:25:58:bd:8a:68:51:4c:04:15:b0:ac:94:
df:83:6c:b8:c0:5c:d1:a0:88:2e:36:87:27:5b:a5:fc:3b:9d:
30:c3:04:c0:4d:76:d7:7a:27:25:81:a5:6c:97:02:6f:1f:36:
16:4f:79:9c:01:58:cc:4a:42:e7:1b:55:e0:63:db:83:8b:ce:
3b:62:17:dd:71:ee:8a:18:0c:0a:bb:4d:f6:d2:72:19:8b:db:
33:cc:7f:81:73:ad:59:19:4c:18:75:a5:80:d0:ef:b6:3b:93:
80:b2:b5:d0:74:00:e2:f0:bb:cc:2a:ed:7e:d3:b1:04:84:d9:
12:fd:58:d9:27:39:8b:56:bd:40:4e:b3:46:e9:9a:88:f6:f7:
bb:64:ee:db:dd:c0:09:3e:ef:ef:74:b8:51:35:80:4e:9b:9b:
b5:a7:7b:92:82:48:23:53:ab:e1:19:09:ef:ed:6f:5a:f9:5c:
7d:fc:a5:71:d2:e9:5b:5e:ed:7e:bf:e4:17:22:ef:f8:10:ae:
e4:cd:db:c6:db:89:ac:96:67:f7:b0:46:ea:15:57:2e:fd:bd:
c9:02:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:33 2026 by rpki-client