Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: kZWbWlR4QZk8yxTDDc6ErWWHOF5LJxqh4f42QIDPqN4=
Subject key identifier: D7:53:92:2E:E5:A3:9F:39:56:2D:32:EA:84:21:B9:3E:F8:41:8A:90
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 019D996259DD5FBDB9BABE31FB07E167B324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 182E
Signing time: Fri 17 Apr 2026 03:00:52 +0000
Manifest this update: Fri 17 Apr 2026 03:00:52 +0000
Manifest next update: Sat 18 Apr 2026 03:00:52 +0000
Files and hashes: 1: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: eFfb0KXkeW9YKXM7LCCQu6kX9i46I0c4CbkEn3IfnXo=)
2: sR6--VSf1TJg6XBqIQJFjdqQwjk.roa (hash: +a/LmYhJ6hoUTDiKTmsqLp0iqelM6C3OOFZARtNpILA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:59:dd:5f:bd:b9:ba:be:31:fb:07:e1:67:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Apr 17 03:00:52 2026 GMT
Not After : Apr 18 03:00:52 2026 GMT
Subject: CN=d753922ee5a39f39562d32ea8421b93ef8418a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:c0:65:53:a9:bb:ff:69:f6:36:c0:45:5c:
38:1e:5a:fd:6d:1b:8d:b2:71:b6:1c:0c:06:3c:a0:
f9:f4:e6:f3:f4:27:76:88:48:a9:7f:41:b5:d2:f1:
3f:9a:bb:e4:6a:9c:9a:16:76:6d:3b:28:ea:5a:2b:
64:7f:dd:f3:6b:5b:fa:81:92:d9:b5:ff:12:2f:65:
b2:74:fe:a2:09:c7:9c:aa:99:6f:91:92:d8:20:04:
95:b7:e1:e6:cb:7e:e7:18:3d:1a:df:0e:3e:2e:78:
a9:88:68:92:31:b0:0f:01:fa:ed:61:af:27:b4:62:
3e:5e:94:da:e2:52:0c:ad:a0:60:0f:a6:b9:83:d3:
3e:c0:8c:6f:39:0a:99:f1:89:a2:ef:07:c3:80:8e:
23:44:67:15:a4:4e:c8:e1:f0:62:6a:cf:bc:09:ab:
97:7e:fb:d7:26:2f:74:ad:57:08:10:5c:68:86:b2:
1c:c1:fd:0f:9e:cb:e6:53:0e:e1:c5:af:98:44:3d:
e9:59:a3:82:5f:3d:26:c7:ef:12:9c:cb:a9:63:fd:
8f:3b:8c:fd:2b:c8:51:5b:da:50:b8:63:e6:c3:06:
99:99:4b:b6:f1:67:fe:78:19:8c:d3:d8:3e:81:5b:
c6:24:6c:19:41:ed:58:5d:bc:7d:c3:7b:e9:92:cf:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:53:92:2E:E5:A3:9F:39:56:2D:32:EA:84:21:B9:3E:F8:41:8A:90
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e8:2c:90:25:cd:e0:60:c3:67:1f:b7:07:b7:c5:f8:e6:9c:
bd:28:2b:e3:27:d4:98:28:a5:8b:7d:4d:95:ae:f8:4d:fe:58:
47:22:28:a8:f3:20:05:4d:31:fd:ff:e6:43:0f:6e:20:35:00:
09:24:c4:94:e6:6f:67:97:3c:83:c5:8b:4b:4f:6a:65:1e:0a:
97:15:8f:d3:36:c5:c9:1c:31:26:eb:02:81:5b:c7:71:c4:30:
3e:44:07:49:9f:fd:38:2c:c7:0b:23:3b:65:8b:90:c2:b4:f4:
ee:f6:58:2d:e6:46:2a:a8:92:53:1d:45:5a:13:4b:9c:a4:d7:
a6:63:9f:d6:01:c4:d7:51:fe:a9:39:ad:eb:81:ed:99:a9:14:
b3:c7:39:e4:08:7f:de:78:d2:96:9e:7b:69:df:2c:bf:ac:ea:
76:0a:38:73:b1:67:47:74:02:c5:95:92:22:0b:63:83:f3:13:
c4:4d:32:9e:01:86:70:ee:a8:a6:ee:7d:86:e4:2d:2c:f8:47:
1d:2a:ef:aa:a4:a7:4e:6c:eb:db:9c:9d:43:c6:31:39:cc:fa:
69:e8:ea:59:1d:13:a6:8c:6a:be:9f:c0:90:96:4f:15:06:13:
28:25:f9:3d:47:8e:fb:2b:c6:5f:b3:43:ac:4e:8e:a9:d0:cb:
29:df:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:49 2026 by rpki-client