Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: pLNVUT4uDrWnk2wkCWrK6M7m9Yxi89ZmM0vt8kWAchk=
Subject key identifier: 51:AF:A4:AD:D3:E8:00:CD:5D:2D:2E:D8:E1:D1:81:61:33:71:60:A4
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 019D9BBF6AB0947F46A06EA0E589C6894B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 0811
Signing time: Fri 17 Apr 2026 14:01:46 +0000
Manifest this update: Fri 17 Apr 2026 14:01:46 +0000
Manifest next update: Sat 18 Apr 2026 14:01:46 +0000
Files and hashes: 1: CQU1i8i4vqvuY4KqJGZlaSLhz1o.roa (hash: CuYb2a2XddVX7SxALr1d1KIhl+UGwYzhtlyXuVxbI4M=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: rGzdt9YhtQOGcg5x/oHYfFY37aOg6T21MPOocNdbR7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:6a:b0:94:7f:46:a0:6e:a0:e5:89:c6:89:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Apr 17 14:01:46 2026 GMT
Not After : Apr 18 14:01:46 2026 GMT
Subject: CN=51afa4add3e800cd5d2d2ed8e1d18161337160a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:a0:55:85:de:41:2a:2e:0a:a1:17:0e:a5:
f6:5c:bc:9d:17:ce:7c:b6:f3:e4:7e:3a:21:31:86:
78:0a:ef:09:53:d3:89:e3:ab:90:e4:05:3f:44:1d:
22:44:4c:62:3b:51:4a:87:a5:9b:8b:1f:e0:0b:4c:
3f:e0:8a:29:84:e3:8a:cb:8d:07:41:af:be:02:30:
c1:50:af:91:a5:7c:16:08:48:8c:92:d1:de:2a:32:
56:26:78:c8:3e:30:95:2c:ae:5d:a5:88:8a:2e:35:
58:73:a5:9c:5f:79:6e:e7:a8:85:27:ac:32:9b:34:
0d:fe:24:5c:4a:f6:1a:1a:63:1c:28:32:a6:c9:ff:
9f:b8:78:97:28:36:87:bb:b8:ae:79:4e:b1:a5:43:
71:36:0c:19:c9:04:c2:a3:7b:86:9d:12:9b:27:18:
52:bd:fe:2d:81:69:78:49:5d:67:eb:4b:f1:65:24:
83:0a:b4:2e:f4:30:b6:c3:54:dc:3c:c3:92:a2:7d:
9b:0e:0a:94:be:b4:5d:c8:5b:61:fa:c2:a6:d0:b1:
18:db:3c:28:9c:2c:a8:7c:41:7e:ec:bc:e0:05:ac:
e2:19:3e:5c:0a:7d:24:55:10:8f:ef:dd:9f:4e:3a:
1d:1a:92:e3:bf:f6:25:9e:5c:1a:11:ad:3a:8e:65:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AF:A4:AD:D3:E8:00:CD:5D:2D:2E:D8:E1:D1:81:61:33:71:60:A4
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:79:aa:24:11:81:7b:11:17:e6:fb:b8:b6:6a:4e:4f:9b:ab:
78:97:59:bc:d2:05:3a:63:1e:eb:94:9e:68:2a:17:46:09:34:
79:58:f1:cf:d5:47:80:71:cf:ee:d9:cb:e2:3f:06:0b:a0:57:
b7:a6:06:14:e8:c9:3f:e3:ef:05:c2:c8:f7:61:cf:84:18:2e:
55:f6:85:c2:2f:3a:f4:80:4a:d2:75:0a:2e:a9:c2:26:7d:00:
d7:96:49:be:06:26:9e:a8:a6:0a:cd:c9:0d:4f:65:45:34:48:
6c:29:90:19:32:90:60:65:e7:56:05:0c:49:ae:e5:65:64:3f:
df:d5:8a:aa:a6:c1:29:93:6e:22:3a:06:a3:0a:d1:96:d2:f0:
1b:24:14:30:88:0e:64:ab:ff:c2:ef:00:ad:a3:70:86:48:80:
f3:4c:62:46:45:9b:d8:92:44:4d:f0:88:e8:b5:e8:36:a3:c9:
1e:64:0d:df:5a:fc:dc:cf:fe:20:5e:50:d6:ef:bd:21:c4:99:
0e:db:14:7e:ab:c5:31:e1:54:49:96:bb:0b:2d:19:f0:9e:a8:
fb:d8:f8:49:3b:48:83:ea:28:73:ba:3b:ba:d7:20:52:9f:d3:
b4:29:18:e2:d7:84:e6:d8:4a:e1:26:d3:f1:b3:47:01:5f:2f:
79:87:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:22 2026 by rpki-client