Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: SYsWDkAhnuUpqrIpA9OXvE0rFsnRDAioZyzZktZhyWw=
Subject key identifier: CD:56:52:56:33:E3:9A:19:7F:61:D8:E0:F0:C5:30:C3:E4:ED:24:1F
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019D9C9A30B915B2D8FF00F04B2AED797E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0DB5
Signing time: Fri 17 Apr 2026 18:00:43 +0000
Manifest this update: Fri 17 Apr 2026 18:00:43 +0000
Manifest next update: Sat 18 Apr 2026 18:00:43 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: 9yHvJMZrRRbQVylhfN9Bcl6tpMIVewN6PR1v6NOxOzs=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:30:b9:15:b2:d8:ff:00:f0:4b:2a:ed:79:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Apr 17 18:00:43 2026 GMT
Not After : Apr 18 18:00:43 2026 GMT
Subject: CN=cd56525633e39a197f61d8e0f0c530c3e4ed241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:fe:b7:a3:d4:92:f4:66:7d:62:0b:16:56:
25:0f:de:58:28:59:d5:84:dd:ea:3c:72:00:9c:74:
8d:b2:0a:f3:32:14:18:df:ae:d6:b1:b9:f5:0b:ef:
c4:8a:a4:34:e8:dd:76:1d:32:bc:4a:5f:8b:ca:92:
b7:ae:11:5b:ee:4b:eb:35:15:eb:1c:5d:84:d6:bd:
de:dd:2d:f7:c1:8e:6d:63:23:8a:57:10:4a:05:a9:
d3:1d:2c:cc:34:80:99:2a:85:af:e9:4b:46:86:af:
fa:75:eb:3b:e6:ce:24:55:f8:b1:56:b8:aa:20:12:
f5:15:51:c9:22:af:d4:c9:a0:e2:27:0b:d9:f5:69:
2f:63:02:cd:ff:ad:98:07:b0:57:c8:60:68:2d:28:
68:cf:fc:35:71:5b:3b:50:e5:c9:2c:09:a7:73:15:
d4:8c:66:13:65:0c:4e:38:d1:5a:3d:cb:f8:d6:06:
8a:aa:4e:fd:e0:df:1c:5e:d5:d4:c3:80:15:54:2a:
f1:23:e7:46:d6:14:56:ea:b6:29:52:bb:b2:8e:e8:
51:4e:0a:67:cd:c3:d1:d9:5d:ce:fe:e9:da:54:b8:
1b:97:ff:52:d4:e3:4d:c5:fe:4c:8c:91:1a:6b:4f:
33:b6:bf:9d:21:47:b5:76:5f:d5:1c:3b:16:68:4d:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:52:56:33:E3:9A:19:7F:61:D8:E0:F0:C5:30:C3:E4:ED:24:1F
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:37:ed:9b:da:19:23:02:5e:73:f1:f3:76:09:c6:10:ac:74:
f3:fd:22:1c:ef:d3:57:7d:1f:05:b5:a5:fe:64:a8:e5:56:ae:
f3:3b:3d:8d:53:0d:e5:d9:3f:39:cc:94:3d:ce:02:28:11:60:
05:db:0f:7b:5a:96:70:08:34:3d:de:cf:cf:8d:91:a7:70:30:
90:62:8b:24:ab:26:15:24:5b:92:ac:24:c8:57:28:56:50:39:
b6:05:95:98:3a:c8:c7:90:aa:1d:0b:46:e0:91:13:2c:66:0c:
20:aa:8f:b9:ba:59:78:be:c1:84:26:d0:ff:19:28:81:54:a1:
0a:b8:ff:a3:b2:a5:bb:ba:cb:1d:8c:48:5f:11:f0:3d:11:f1:
b1:6a:97:e7:f0:14:da:57:80:e2:4e:83:db:3f:2b:0a:61:e0:
ee:b6:9c:77:88:a1:3e:2a:91:3c:d1:1f:85:ad:67:17:61:13:
fc:b9:70:d4:c5:89:e3:79:f7:ef:c0:7b:21:1d:2a:c6:a2:64:
a6:e6:dd:9d:76:2b:42:f4:7c:2b:0c:db:f2:1a:7c:c3:3a:c7:
14:2c:16:e0:eb:29:57:c4:c3:f4:c8:5c:38:b2:30:4a:a1:1e:
9e:34:27:93:77:60:4b:c9:2e:ed:b2:ef:f0:9b:73:db:dc:0c:
d2:2b:57:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:04 2026 by rpki-client