Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: GZULo16bGA/Vm4DD55EPNRqPO8QzMcN2DWgAZ5kUJ6Q=
Subject key identifier: 42:28:2B:25:98:A8:86:EC:26:06:B5:E5:89:46:D6:7E:22:50:EA:A3
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 019D9AABB0FDE0BEA5ABEEFB14F0DCA8D73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 17B3
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: Oanj9HZBO6pjmAia4pctaEcwILk.roa (hash: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: QADezGLyE8xScgxl/I/pBoWYGxZ3+BTeHHR8NDPXCaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b0:fd:e0:be:a5:ab:ee:fb:14:f0:dc:a8:d7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=42282b2598a886ec2606b5e58946d67e2250eaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:9f:8b:52:25:35:49:ec:49:f3:90:8c:66:
8d:46:cb:64:a6:62:53:53:de:ee:96:ce:f7:35:e9:
00:08:28:8b:7d:11:7e:76:6e:71:0e:b6:df:4f:89:
4e:3c:41:58:19:b5:f3:e9:f2:73:df:4d:71:be:d9:
fa:2c:86:1f:e4:05:1c:77:03:92:c2:7b:8d:b5:2c:
49:dc:8b:bf:79:c7:e5:50:a5:e2:05:2c:17:de:bd:
7c:63:e8:17:d0:d7:c0:5c:bb:3b:b5:39:91:7c:f2:
01:16:57:da:b1:71:96:8a:a5:dc:1c:de:56:07:d6:
b7:a7:04:9c:ab:7c:a1:f6:02:a0:f9:43:2c:e4:bd:
73:e0:4a:bc:4e:2f:6e:df:b7:17:78:00:35:a6:2d:
35:a4:cc:62:93:c0:36:aa:32:1b:f7:9e:73:a7:56:
7f:b1:4a:bb:81:00:98:b4:db:f9:44:50:5f:2c:4d:
b6:65:69:b5:66:5c:7b:8f:6f:6d:ce:73:e5:50:67:
ac:a0:c6:23:1f:bb:c1:10:50:56:29:3c:a2:af:ed:
31:69:0b:3d:c0:71:eb:dc:43:18:40:57:f8:60:93:
ea:fd:7d:b7:2c:56:8d:0e:bc:22:31:c2:53:0b:50:
11:a9:24:8a:6f:a1:9b:0d:cb:72:21:bf:b2:08:90:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:2B:25:98:A8:86:EC:26:06:B5:E5:89:46:D6:7E:22:50:EA:A3
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1b:58:52:0b:7c:bf:70:76:a9:c0:45:63:d6:d2:d3:4c:3c:
12:eb:7b:c3:e8:20:1f:16:1e:6c:35:2d:05:56:41:3e:23:93:
ca:ec:0b:76:60:1a:2a:69:de:54:58:b5:6f:86:30:13:88:38:
8b:51:cc:01:69:5e:9d:20:db:00:3c:e1:e9:39:df:4e:0f:8c:
30:5b:ff:58:f9:01:3e:8d:a4:7d:ec:56:cd:81:36:5e:43:37:
94:b3:6c:b5:a2:f5:07:0c:42:92:d6:a6:50:8f:0c:7f:0f:d1:
b6:d8:82:03:03:ab:f0:d9:f8:8a:18:92:28:4a:dd:07:e0:95:
de:c6:38:d8:51:2c:00:d8:84:14:50:88:67:b4:72:2a:84:a0:
65:1d:9f:2a:df:5f:6f:1d:ab:dd:38:3b:9a:f6:62:e1:63:27:
b5:d4:da:d7:83:34:eb:ca:1e:85:ac:bc:46:bb:79:4c:b8:52:
e9:30:0b:31:ff:0f:51:08:12:b7:e7:75:9d:f6:99:d8:02:1e:
4f:ba:1c:f4:98:cb:8c:66:d1:3c:42:3b:81:33:f9:8a:cf:78:
f2:8d:a0:1c:0c:5e:4a:f8:4c:7a:e1:f4:07:39:32:ab:c2:1c:
26:09:88:d7:0f:30:9a:97:03:55:12:42:14:2f:fa:8b:84:fa:
d2:ee:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:33 2026 by rpki-client