Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: B4abSfMQEYdLKdpTw1dmZz1w5JVSI5aYy3FnmrlW3y0=
Subject key identifier: 21:5C:EB:0C:B6:25:34:00:C7:61:85:65:01:74:D2:76:DC:A1:39:39
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 019D9B517D92732760E6B7B75C25377FC448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 03DA
Signing time: Fri 17 Apr 2026 12:01:42 +0000
Manifest this update: Fri 17 Apr 2026 12:01:42 +0000
Manifest next update: Sat 18 Apr 2026 12:01:42 +0000
Files and hashes: 1: m7FhPhHs11a2vSve5xnlsfFohsw.roa (hash: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: Kylqzi5jsrmCcIteqBxU0leWzQ1vCI1N9pYgenkbfrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:7d:92:73:27:60:e6:b7:b7:5c:25:37:7f:c4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Apr 17 12:01:42 2026 GMT
Not After : Apr 18 12:01:42 2026 GMT
Subject: CN=215ceb0cb6253400c76185650174d276dca13939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:37:cb:55:79:11:3f:3a:4f:0a:e8:e8:9d:
aa:0b:95:5a:fa:18:f3:c2:eb:a2:81:ca:76:80:6f:
21:7a:ef:b8:aa:c8:f9:4e:e0:48:a5:b7:ac:45:f1:
d2:ef:2a:b1:76:7d:3e:f6:a8:47:77:27:e0:29:ac:
6d:bd:1a:11:31:d1:a7:a9:bb:46:01:c4:93:39:d3:
7e:30:71:b1:4c:d0:18:7b:30:57:91:95:f8:e3:0a:
81:ae:78:ca:3d:fd:7f:4f:34:b3:09:73:1f:d1:d8:
b1:b2:c3:d5:4a:4b:b3:6c:be:78:a2:da:88:e1:cc:
4b:5e:a2:46:d5:b1:7d:45:42:5a:99:24:58:a5:d5:
bd:ae:a1:9b:85:58:f0:b8:95:f4:38:88:c1:87:5e:
3e:9c:2a:41:9b:25:1d:52:af:fa:58:12:6c:1e:eb:
03:4e:d2:ca:59:5f:05:25:5c:74:f9:35:dd:83:2b:
f5:c8:d3:a9:8e:38:96:42:f5:3a:35:9c:32:d8:0c:
09:27:12:66:18:7d:a3:56:9b:3d:f2:83:1e:2c:29:
ab:bf:35:a9:c1:9f:be:3a:34:71:6f:1f:ea:f8:de:
a3:72:2f:a5:70:61:ad:57:d7:ec:ae:ba:d6:e5:5c:
dd:77:52:1a:35:2e:62:44:e2:59:e4:1c:4e:53:ce:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:EB:0C:B6:25:34:00:C7:61:85:65:01:74:D2:76:DC:A1:39:39
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:29:52:c7:66:6e:e3:49:a0:20:00:2e:08:7f:e4:67:fe:
26:81:03:f8:36:bb:b3:95:39:2b:48:e0:c5:37:80:23:2f:21:
d5:f6:88:3d:5e:df:f0:68:5a:c5:8f:e6:9b:09:f4:6b:6b:2f:
2e:ed:87:e1:32:c7:85:23:e6:53:bb:5d:d7:a0:aa:02:3f:94:
95:85:2c:ee:6c:ba:4c:d4:ea:64:7a:c8:6a:5c:bc:70:bd:85:
09:95:db:09:9c:8e:41:39:1e:27:23:b2:3f:d5:ae:bd:98:44:
08:8b:3f:e6:b2:35:70:b9:6b:c4:ef:d6:5c:a1:d2:ab:14:93:
9e:6b:16:9b:9c:d0:f6:a9:6b:01:f7:e7:ff:2d:fd:b1:0f:dc:
dc:c8:dd:ee:26:4b:6b:fa:e6:42:09:9e:71:bb:6e:00:d6:e4:
87:57:7e:47:3a:4b:0e:86:aa:fa:2a:d0:3b:41:c5:a8:fe:11:
e2:4f:d1:10:96:50:d2:c2:62:1c:37:3b:5d:75:e5:69:e9:aa:
49:9b:ec:c3:64:9e:79:c6:2b:f9:85:63:49:36:3a:e2:4f:1a:
5f:15:2b:d8:fd:b5:b4:ad:7c:33:d7:7e:f2:1e:0e:c8:5d:8b:
8f:d1:df:89:82:9a:a4:4a:16:89:8e:68:5e:b4:96:e8:f1:5b:
69:9c:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:02 2026 by rpki-client