Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: xIL3UWIcyEhvOTrxoMw6i4Ha+tdgyLFyFpKxKPWCtaE=
Subject key identifier: 13:21:79:5A:0A:D0:30:27:B5:D8:0F:BD:21:E0:D8:63:47:82:73:D7
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 019D9B505C27862304F931F2754157F16CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 12:00:28 +0000
Manifest this update: Fri 17 Apr 2026 12:00:28 +0000
Manifest next update: Sat 18 Apr 2026 12:00:28 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: sWpnG4vkEF3PvblsuS98tPRcbujdOHZCw4w9O8BxXRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:5c:27:86:23:04:f9:31:f2:75:41:57:f1:6c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Apr 17 12:00:28 2026 GMT
Not After : Apr 18 12:00:28 2026 GMT
Subject: CN=1321795a0ad03027b5d80fbd21e0d863478273d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:b0:88:fb:ad:64:0a:cc:c6:86:b4:ea:4a:
5f:43:9a:89:20:ff:ad:c1:0e:0b:a3:3f:27:96:11:
76:85:2f:e8:2f:f2:09:eb:77:61:6b:de:43:71:51:
59:4e:fb:9a:51:79:7d:e2:7f:a8:63:0e:79:74:aa:
90:a5:c6:07:8a:d8:df:8c:7a:b4:f0:0b:d8:07:d1:
db:b8:01:d5:13:a7:9b:e8:20:bd:83:fa:07:df:db:
10:69:28:9b:50:ac:cf:4e:7f:69:53:bc:72:1e:61:
18:bb:0c:06:0e:7a:8b:80:80:a0:25:67:98:65:e7:
1e:b9:37:00:9a:fe:48:0a:f7:82:cb:77:90:9a:a9:
40:4b:d9:c6:eb:e9:fb:c7:82:0e:42:3b:31:5f:c9:
1c:02:38:18:20:02:e4:fc:b5:95:c6:01:21:c4:2d:
0a:a8:b7:96:91:e2:14:eb:eb:a1:b2:bc:c6:92:c3:
1a:d2:79:71:6a:41:ab:2f:04:1f:c9:f1:5b:d0:ec:
35:21:5b:08:7b:64:e5:c1:eb:9b:ef:c2:96:24:ea:
f7:24:a7:90:e5:33:d2:0f:03:5a:bf:ca:ad:3f:cc:
fe:28:61:66:2f:e5:47:eb:b8:f1:17:f2:04:56:a5:
b7:ea:c8:91:68:4b:a0:9d:56:11:6f:56:4a:d4:20:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:21:79:5A:0A:D0:30:27:B5:D8:0F:BD:21:E0:D8:63:47:82:73:D7
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8e:d3:aa:da:cd:c8:7f:52:ec:5e:c9:c6:b9:94:68:18:ca:
fd:a1:4d:80:b3:c5:9f:8e:4f:d4:2b:95:a1:97:d6:f3:69:2d:
e9:fb:32:f9:5c:82:55:0d:e4:7b:93:c8:73:fa:31:67:59:c3:
91:9f:72:15:5a:e4:f7:54:40:5b:9e:99:04:d1:27:b9:ce:a1:
aa:ad:5e:0c:7b:5d:f0:f9:78:76:78:3a:8a:58:92:e9:9f:94:
87:58:9f:8b:e2:3f:0c:b6:7e:3d:ee:18:3f:b0:01:69:bf:3e:
30:a6:09:dd:66:8e:28:a3:4b:99:e1:66:49:33:5d:b7:98:00:
31:6a:cd:17:8c:5a:88:61:c4:74:29:1f:98:8a:58:1a:98:af:
09:38:b2:1e:6b:7c:7b:1b:f8:bc:8a:fc:bb:8e:d8:18:07:19:
96:f1:67:a1:11:7b:60:4e:b3:91:29:ac:06:15:87:31:db:b5:
3b:42:be:fa:81:34:19:ea:cd:44:cb:52:19:93:a3:30:f7:5c:
d1:99:a4:9a:b7:d3:8a:ae:e3:2d:33:78:d6:6d:b3:3e:3f:c4:
df:6d:13:d9:0b:42:98:ae:37:90:f4:db:13:9f:8c:bd:8c:bb:
f1:bd:eb:9a:ae:b5:d1:53:9f:04:89:56:95:0a:8e:d1:6a:39:
ef:51:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:30 2026 by rpki-client