Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: 0gz1c+k+uvtY9EQc7bgZZXluZ2K0XKZpVAhKYHuZRQw=
Subject key identifier: 89:0B:F9:F2:87:BC:55:E9:21:4E:6F:B8:46:6A:53:2D:1A:B2:A9:D7
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 019DA4F8F5B2324D31982147743FEE522D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 138C
Signing time: Sun 19 Apr 2026 09:01:12 +0000
Manifest this update: Sun 19 Apr 2026 09:01:12 +0000
Manifest next update: Mon 20 Apr 2026 09:01:12 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: gQ0U/0kjQZqc0lcesjQnYXokTpGDiBpSMzFEr8SV5L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:f5:b2:32:4d:31:98:21:47:74:3f:ee:52:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Apr 19 09:01:12 2026 GMT
Not After : Apr 20 09:01:12 2026 GMT
Subject: CN=890bf9f287bc55e9214e6fb8466a532d1ab2a9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:d6:5c:02:49:43:61:ee:da:8c:34:74:8e:
85:53:02:d3:1e:db:c4:a1:87:6e:71:d1:6f:8a:6d:
9d:3b:b5:dc:cf:0a:4e:f3:19:84:5a:d7:1b:b7:38:
77:d0:d3:d3:73:f8:a0:8d:0e:31:5a:8b:44:64:94:
68:b3:88:f5:56:fb:d1:53:3c:c7:bd:78:74:be:23:
52:4e:21:6a:7a:44:3d:c9:05:c9:bf:25:9b:58:8d:
4e:e0:09:60:22:b9:a3:6d:f3:4a:1e:c4:e5:fc:1e:
99:c2:22:69:dc:97:98:af:84:3c:42:f3:db:85:e6:
70:eb:86:a3:93:f9:20:53:f5:93:51:31:20:37:ea:
ae:60:6b:c6:7e:73:b8:3c:26:b1:dd:06:72:5d:e5:
2b:9c:1b:e6:99:8a:cc:c1:16:55:bb:51:df:d2:e5:
87:a6:e6:b9:cb:f0:fa:4e:1b:be:16:87:5e:30:bc:
31:70:7d:19:b8:28:65:86:6b:32:4e:1c:c4:d3:64:
f8:96:d2:e7:78:22:7f:b3:45:be:97:8e:93:3f:fb:
ae:c3:48:20:52:26:12:31:ab:ef:72:de:8d:f1:de:
60:9f:ff:a4:a7:dd:5d:84:c7:11:d5:b4:e2:e6:64:
c6:6a:e5:c3:3e:40:59:66:09:07:f4:98:32:ce:5b:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0B:F9:F2:87:BC:55:E9:21:4E:6F:B8:46:6A:53:2D:1A:B2:A9:D7
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:52:9e:88:2d:b5:03:01:84:5e:bf:f4:10:e6:8e:c0:4e:
3f:fe:21:55:ed:71:c7:28:d4:d1:f5:61:e6:c0:bf:a1:0a:25:
3d:f1:9a:85:1c:a5:69:36:77:37:c9:37:61:0c:21:74:e6:f5:
b7:5a:81:1d:6b:dd:a7:97:3e:50:55:04:2c:e1:dd:d3:67:88:
20:d2:b5:fd:2f:23:ec:94:32:33:69:47:69:8c:df:00:f6:3b:
a7:6e:6c:d0:83:6e:8a:b8:ad:70:32:cf:0a:07:5b:19:89:42:
91:88:8a:39:98:23:2d:70:58:4f:bd:48:2a:2a:a6:3a:5b:51:
d2:67:9b:66:9e:bc:bc:2f:a7:22:95:9e:0a:8d:4c:33:c3:ab:
b0:f6:b4:37:5b:d6:48:ae:c2:47:2d:d1:a6:e3:0b:df:77:06:
01:2b:ef:58:57:90:26:87:32:66:74:2b:27:9e:0e:cf:a6:b4:
2c:9a:c9:3a:5c:6b:c9:01:9b:3b:a4:22:4f:57:84:bc:2d:86:
d7:fe:28:05:d3:d8:4a:50:16:9b:a0:64:43:1c:a4:c6:de:b7:
47:5c:4b:c4:c7:71:d0:5d:5f:61:11:56:a9:a5:ed:7a:d7:18:
6e:c9:61:bf:1e:90:b4:ec:56:f8:b3:be:cf:88:38:2e:44:c3:
08:51:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:24 2026 by rpki-client