Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: q/zbnH43JDh84JL5Mz4RBcrwNJlkBEqqlokS3Mm5Hao=
Subject key identifier: D2:19:E9:54:47:04:35:94:69:1B:BF:BA:2B:92:28:52:C1:52:18:61
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019D9998DAD50EE079ACB4642ACA444FC60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 06B5
Signing time: Fri 17 Apr 2026 04:00:24 +0000
Manifest this update: Fri 17 Apr 2026 04:00:24 +0000
Manifest next update: Sat 18 Apr 2026 04:00:24 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: /m/2OjOtalytTPEJ5rB7mTWO1hB4ou93k+s6UWuhUts=)
3: bo5WfapXlg-B8bHycWZVlbYa0_E.roa (hash: zgeOYcSCXR5A+F5TcrL2+OPIXguhUzoA2nj4CspJY/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:da:d5:0e:e0:79:ac:b4:64:2a:ca:44:4f:c6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Apr 17 04:00:24 2026 GMT
Not After : Apr 18 04:00:24 2026 GMT
Subject: CN=d219e95447043594691bbfba2b922852c1521861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:19:4c:cf:a3:83:bd:9e:4f:ea:1e:d5:6a:
66:af:05:df:26:9e:6d:62:26:9c:8c:d4:32:2b:8f:
1e:bb:74:f1:2e:92:74:34:e3:3b:b6:9d:1f:f8:39:
80:ab:f5:89:35:19:34:a9:7f:d1:61:1b:d5:bc:b0:
11:7d:a3:82:e9:5a:50:14:1a:b3:ae:f2:85:d0:7a:
ba:d0:14:f9:34:17:24:af:78:7d:ce:af:87:7f:2a:
a6:81:19:4d:75:18:f3:38:b9:d7:3c:06:e9:c9:ac:
d5:ac:a2:04:01:f9:10:6a:7f:4b:34:cd:31:53:dc:
6b:35:32:01:f7:55:50:25:e0:2f:a2:f8:31:a7:92:
69:96:2d:b0:15:07:75:d7:7d:dd:5c:90:ca:37:54:
74:29:3d:8c:1b:72:4c:e0:d8:00:ae:dc:41:c4:44:
5c:c6:df:13:39:ab:51:45:35:c3:ce:86:4b:84:16:
13:2f:61:26:15:4e:19:39:a8:6f:5c:e8:5a:52:5a:
d4:a2:64:bd:4c:6d:32:31:80:7e:69:81:2b:64:c7:
ea:f7:76:77:4b:f6:fd:51:2f:fd:f1:57:e4:e9:20:
4a:cc:68:a9:05:f1:8e:60:13:39:24:bf:71:0e:db:
f3:1e:83:ad:0f:ca:8d:6d:5e:16:83:43:32:99:0d:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:19:E9:54:47:04:35:94:69:1B:BF:BA:2B:92:28:52:C1:52:18:61
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3e:82:c8:55:0e:e6:dc:97:c4:e6:ca:b7:e4:56:f2:74:66:
a5:f3:8c:3a:6c:c1:ba:6f:29:d9:ca:39:93:58:37:77:8c:71:
54:78:83:95:f0:f2:22:ed:43:16:a4:4d:cf:ba:54:c6:8b:a7:
e4:d0:4b:c6:72:96:0b:4f:4e:65:02:65:bf:40:b2:ee:63:da:
f3:88:8b:cc:0f:ec:3b:3e:b9:e4:c7:b8:b8:df:e5:1f:c5:56:
f5:65:c9:d8:5e:c3:43:89:27:37:2d:7a:fc:9e:fa:66:cc:0f:
dc:f6:de:4f:e1:cd:98:19:22:fa:55:89:c6:47:79:b1:06:46:
c9:4e:fa:82:c4:00:fe:05:9e:b0:6d:74:4d:64:2f:f8:1d:d3:
ab:e3:07:72:75:d3:06:ae:56:76:7d:58:41:a1:f8:3b:fc:60:
45:51:83:6c:91:5e:9d:f6:ce:ae:a8:53:2a:fa:28:0b:78:23:
19:1c:b5:be:2e:f4:b7:cf:11:9b:64:63:be:36:88:6f:e8:ca:
5b:cf:91:b8:2c:b4:7b:69:b2:3c:18:52:e1:b9:6c:ba:c8:33:
5b:4f:1f:aa:c6:af:fd:1d:2f:5b:a4:43:e6:04:0c:68:e9:b5:
87:7f:84:27:48:7b:a3:f6:af:cd:03:36:4f:cc:16:13:77:9f:
7b:41:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:52 2026 by rpki-client