Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: odmOkVbQ2Xrs1Fc1D0KKvA71IQ8nAwOXCO6tecCY5mM=
Subject key identifier: 44:60:63:0D:4D:D0:28:30:25:CC:53:0D:07:72:AC:CC:21:F8:E1:8A
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 019DA41CAE380C9A84AACAE0CA73BEB79B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 17F2
Signing time: Sun 19 Apr 2026 05:00:36 +0000
Manifest this update: Sun 19 Apr 2026 05:00:36 +0000
Manifest next update: Mon 20 Apr 2026 05:00:36 +0000
Files and hashes: 1: 4DzAOv88kFIOqHCs_9bsjlv3GTE.roa (hash: caV7/tYU8DPcz0xZ4ImkoJhJu5r2VSnvWFC2mJf3l9g=)
2: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: rnUPpulavbpvIiDdVBxL/MJ+bObWKAe/R8cRPWqwVvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:ae:38:0c:9a:84:aa:ca:e0:ca:73:be:b7:9b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Apr 19 05:00:36 2026 GMT
Not After : Apr 20 05:00:36 2026 GMT
Subject: CN=4460630d4dd0283025cc530d0772accc21f8e18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:3f:f3:29:4e:43:6e:67:67:f6:59:f6:b8:
05:58:ce:57:8c:c8:86:d6:3d:f2:c4:db:ae:1b:4d:
4f:21:4d:ea:1d:41:bc:7c:54:44:b5:7c:da:c8:06:
ef:4c:e2:8a:cc:17:40:04:b3:f3:7b:93:91:54:08:
ab:81:ff:55:82:aa:09:37:f8:7e:f2:2a:8e:ed:33:
ed:da:b7:ac:c9:64:9b:6a:c3:36:58:ab:fc:63:fc:
1a:0b:a8:96:f5:ba:e1:33:a7:ed:19:34:a2:bb:e2:
e5:f3:da:8d:d7:0a:19:30:61:f7:9c:45:f7:70:06:
cf:09:cb:a3:85:49:8b:fa:46:ae:95:91:4a:29:8b:
65:c8:2b:6b:b7:f2:1a:2f:4f:97:d1:4d:54:c3:fe:
b3:ef:39:d2:7e:6b:ae:f6:2b:ac:4e:96:a5:a1:79:
44:df:f5:96:47:d9:99:56:88:22:6f:10:c1:bf:e9:
a5:de:a2:a9:d7:fc:7c:73:f6:7f:43:4c:fa:ad:25:
7d:17:c0:d4:f2:c8:1e:b7:4b:cb:a6:50:83:bd:ba:
d0:f5:43:1d:87:07:75:ce:8a:6a:29:e0:24:1e:93:
1f:c2:87:e3:6b:cd:66:69:40:13:98:99:cb:a3:40:
75:29:8b:5e:25:2f:47:15:e4:4f:09:a0:c6:17:98:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:60:63:0D:4D:D0:28:30:25:CC:53:0D:07:72:AC:CC:21:F8:E1:8A
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:e6:ce:cb:f7:0c:7c:30:47:7c:de:34:ef:9c:73:89:f1:
f4:47:fd:c8:ca:21:d7:7e:d7:45:2b:3e:f8:4f:b4:a6:3b:70:
55:3f:2a:3b:44:50:05:a7:9b:c1:1f:9a:d8:04:5c:17:c6:f6:
51:23:06:9e:90:ee:d4:3f:1d:3d:85:d6:5b:1b:bf:62:dc:9b:
5e:e0:fb:e1:aa:35:7f:9a:f7:b3:b7:c5:53:21:d0:50:7d:9a:
4c:3e:b9:67:80:09:8e:87:d8:60:05:6c:51:03:4b:73:a4:de:
c3:ef:cc:e5:ed:3c:46:d7:76:4b:51:54:3e:bd:0e:81:b5:24:
e8:a4:fa:a0:2b:43:96:fd:c2:ad:91:e2:dc:3d:01:16:fc:f4:
74:30:56:23:d5:51:62:d8:11:53:25:43:14:21:60:7a:f8:c3:
30:3f:05:89:aa:2f:61:e7:42:6a:7c:47:91:34:9c:b7:55:c2:
1e:24:7e:29:b9:a8:2e:33:3a:16:93:f0:35:d5:df:02:ad:fc:
66:ea:0f:8f:9f:b5:54:50:aa:17:76:ca:c9:25:c4:6f:2b:a1:
c8:c3:91:7f:18:37:5c:46:7c:49:b3:bf:c3:f0:36:15:8a:00:
48:b6:6b:2b:c2:67:fc:00:e6:62:96:71:14:b5:97:60:d6:f9:
b1:63:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:39:00 2026 by rpki-client