Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
File: X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json)
Hash identifier: Tmq1YlcA3q27twlHDchHOHHntJ6eSUNsF/UM6JOPaVA=
Subject key identifier: D3:B6:75:C9:D1:BC:A9:5A:30:86:A8:83:5B:F4:39:76:30:69:A7:77
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 019D9AE317326470A84A88926ADA86C7A963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 10:01:07 +0000
Manifest this update: Fri 17 Apr 2026 10:01:07 +0000
Manifest next update: Sat 18 Apr 2026 10:01:07 +0000
Files and hashes: 1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: gigJSW6X+Iu1CsRkw3b33OGhw7cW8C2H1zRiW5MZlrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:17:32:64:70:a8:4a:88:92:6a:da:86:c7:a9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: Apr 17 10:01:07 2026 GMT
Not After : Apr 18 10:01:07 2026 GMT
Subject: CN=d3b675c9d1bca95a3086a8835bf439763069a777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:63:b2:ef:7d:43:db:b2:b9:6f:77:69:28:16:
70:43:45:0b:9f:8d:c9:5e:5a:57:2f:d6:47:21:2b:
f9:dc:1e:82:a4:1b:f3:ef:c6:aa:c4:cf:d2:b3:4b:
36:50:bb:47:ee:d3:23:72:48:d5:fc:30:64:54:9d:
5d:d2:75:49:48:21:3a:8a:09:74:04:81:9f:d5:09:
36:ff:7e:13:71:21:0b:3a:d3:df:75:5c:fc:1f:2d:
57:7f:4a:16:39:4b:e8:a9:02:5d:59:da:bf:96:c5:
c2:be:d0:15:91:5f:12:ed:5e:5f:15:c8:ec:76:c1:
db:9c:71:80:3d:9c:58:2e:37:10:91:0d:7b:28:7f:
7e:3e:12:1e:05:73:82:ca:6d:14:db:02:62:00:93:
b9:be:97:86:7f:ee:ae:cf:b3:b3:e4:54:77:e0:80:
fa:b3:da:36:16:6d:c1:c7:ce:08:42:e7:b0:3e:32:
e6:80:6f:95:22:4d:a2:50:d1:03:d8:2b:03:01:40:
8e:af:c1:81:74:ed:b1:ae:f1:ee:ca:92:a3:a0:6e:
c1:39:b8:fa:5b:89:94:0c:e5:f9:98:f9:52:b0:4d:
fd:b0:11:2c:29:6c:d8:6d:00:5c:0e:d6:fa:7c:22:
36:0d:ed:0a:95:4c:91:ca:24:4d:cd:b7:85:42:ae:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:75:C9:D1:BC:A9:5A:30:86:A8:83:5B:F4:39:76:30:69:A7:77
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8f:14:96:72:e7:a9:ea:78:18:4d:9b:32:62:ed:65:d4:ff:
ff:29:1b:94:46:65:60:f7:16:e8:6d:b9:6e:ee:92:9d:d0:95:
26:86:50:6f:db:69:8a:de:82:bd:c1:49:38:b8:a0:f3:ff:33:
d7:23:3d:c2:d4:ca:ba:6b:2d:8d:fe:42:b6:3b:8f:76:6b:a4:
53:e3:0c:0f:47:e9:01:5c:70:b9:e3:3a:3f:76:8f:32:93:89:
49:9d:1b:d1:6a:96:1f:66:d6:10:87:28:ee:4f:bd:80:f7:24:
aa:f8:2b:8a:5b:f2:12:fc:19:ef:1c:50:52:92:4f:26:ae:21:
83:3c:c2:e3:3f:c0:5c:d2:92:ba:06:0b:26:de:46:a4:3e:2f:
0e:a8:9a:2f:ed:12:dc:27:66:91:29:76:82:7d:ba:0d:14:78:
ca:dd:aa:a7:58:af:e1:1c:f3:c4:d7:55:36:f9:e0:f8:46:a8:
26:6c:f2:fb:d8:76:41:b4:5f:19:96:40:4e:31:29:31:c1:a1:
3e:ff:f2:c0:ad:50:d6:18:0d:01:c0:c6:1d:ee:5b:c3:52:96:
c8:73:f1:fe:3c:c2:79:8e:96:8c:c6:fc:4a:a7:ea:8c:06:a2:
b1:81:ce:41:38:f9:18:8d:4c:ab:db:2f:91:ec:8d:bb:5f:d9:
a9:f3:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:52 2026 by rpki-client