Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: jMWr2+OdwXT0l6RPt1PuTUT3coaMuPokT+Ylc6hDmiQ=
Subject key identifier: 12:00:74:25:85:E2:CF:7A:86:C8:0C:F2:52:D5:7B:F9:59:35:6C:1F
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019D992B30B94DCCC5FFB573217C23B7A76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: 4rvshvDLbl32TBQqRs0LybhBL1hvXXo9EkcRwwXPG70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:30:b9:4d:cc:c5:ff:b5:73:21:7c:23:b7:a7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=1200742585e2cf7a86c80cf252d57bf959356c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:9b:08:46:30:14:7f:7a:a9:bb:30:15:02:
f8:c6:8e:a2:68:c7:c1:2a:ec:10:f0:f1:d5:78:2f:
58:56:5d:b3:f0:bc:4c:ae:21:45:a4:82:62:a3:ff:
85:34:12:7c:fa:78:1c:80:8d:2c:3f:ef:9b:b6:61:
32:de:da:e2:57:56:07:f4:ff:b8:cc:ab:32:d0:29:
6a:f4:c5:39:14:88:9e:10:5b:36:08:2c:bc:a9:ec:
25:8b:2e:7e:51:46:db:bd:a7:14:54:3c:74:7f:9e:
43:cb:24:21:39:93:48:8a:3d:4b:73:6d:56:06:a3:
18:9d:26:5e:99:2b:65:25:03:b6:1d:1e:14:cc:84:
e9:97:c6:01:d4:b5:b1:56:33:5a:b5:df:56:e9:73:
55:f9:fc:83:ea:44:c2:5c:dd:c7:3b:31:63:24:58:
d7:36:ba:80:3b:c0:4c:cf:c7:f6:b1:10:64:8b:3c:
5c:34:38:c0:9b:a0:ca:0e:1a:aa:83:46:db:33:a5:
7e:ff:5a:41:dc:3d:3d:59:5d:11:7e:81:2c:01:9b:
f5:52:f2:fe:a9:c7:e1:3c:53:5a:22:88:0c:e4:33:
9d:de:07:5c:8b:ca:87:0d:26:8c:10:a9:29:7c:69:
64:5d:e1:8c:4d:e8:5b:f0:ee:90:b7:bb:aa:21:45:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:74:25:85:E2:CF:7A:86:C8:0C:F2:52:D5:7B:F9:59:35:6C:1F
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fe:eb:71:20:26:1f:0a:e1:3f:46:f9:14:79:05:de:f4:05:
23:d6:5e:68:07:a6:ed:90:4f:b1:48:78:30:6b:68:86:8d:60:
fe:a0:75:24:e7:82:c5:6d:28:c6:fd:a9:c3:ee:b1:92:c1:5a:
47:b4:19:47:1e:72:cf:d4:7b:79:5f:4d:c8:c3:16:3f:2f:dc:
2c:5d:62:f0:01:38:12:60:a5:3d:d7:5b:fc:db:77:54:69:27:
7f:6b:60:84:d4:13:17:cb:d7:d4:46:d4:b2:57:f9:ae:ef:47:
d1:ae:67:e4:37:76:14:9e:37:3a:f4:82:7d:1a:4d:db:89:64:
bf:1a:a4:6c:e9:25:ae:a2:cb:8c:a9:e6:83:e6:04:35:62:96:
74:64:8a:2b:ad:93:f8:c6:17:71:14:90:37:0b:0e:92:bf:2c:
0f:d5:bc:ba:63:73:1b:34:94:93:4d:da:f6:f3:02:b6:69:72:
d5:c6:fb:06:13:a3:23:ea:70:96:c0:ee:4f:7c:cc:b7:ba:ff:
10:fa:2c:a9:1d:12:17:00:8c:27:e0:94:1c:0c:1e:5f:60:37:
3e:3b:1f:ea:c5:9d:3e:67:a2:5e:40:06:3e:93:8f:8a:81:09:
8c:18:d7:67:2d:2c:f4:8e:a6:fd:83:86:33:82:15:8a:5c:9d:
20:d3:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:49 2026 by rpki-client