Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: rqElhD0vRfN0Xkk2Zti4UwGle/kOZaXNeZkXO+dhXcY=
Subject key identifier: F4:05:4A:09:A8:0D:D3:E1:1B:EC:F9:15:07:21:C6:B7:18:AC:3B:3D
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 019D9A3EA5748906B27DDCB10ADA5B4B336E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 0880
Signing time: Fri 17 Apr 2026 07:01:29 +0000
Manifest this update: Fri 17 Apr 2026 07:01:29 +0000
Manifest next update: Sat 18 Apr 2026 07:01:29 +0000
Files and hashes: 1: LI8mfoguQg_wE6aQfHZYVjBGEwA.roa (hash: ZNCQmm2JmdPCyWjwNoC7wMjJStghkA3kdN5AbD7KwIA=)
2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: WVRKLsnJ4MKIrBm5szJz6KJYT7KDB9GKp3nQqfnFBsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a5:74:89:06:b2:7d:dc:b1:0a:da:5b:4b:33:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Apr 17 07:01:29 2026 GMT
Not After : Apr 18 07:01:29 2026 GMT
Subject: CN=f4054a09a80dd3e11becf9150721c6b718ac3b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:2a:32:c5:81:e7:ce:3a:ec:ee:5e:ad:48:
c7:9a:40:a8:6c:9c:d5:f7:b8:ef:4b:e6:f3:fe:c3:
2d:bc:b8:59:4d:d6:2c:e9:76:61:77:a4:1b:ae:e1:
a7:59:bf:66:ed:bd:b2:53:1f:77:ad:51:2c:c6:d2:
b0:7f:f6:94:24:4e:32:f2:a2:c8:03:cf:a2:02:ab:
41:77:7d:af:66:50:fd:d2:ba:4c:5d:e0:c0:93:7d:
46:e2:ca:3a:2c:9a:1b:26:88:6d:55:90:77:31:5a:
43:37:a7:a1:b7:c6:ff:64:6e:e1:5f:6c:6c:59:08:
42:1c:87:e5:c4:b3:b0:9c:62:10:04:8b:5d:c7:de:
3c:5d:8b:24:35:2d:50:a5:a9:cb:e6:d0:54:8c:85:
2d:16:b5:3a:78:70:1d:c7:03:86:0e:c3:fe:6c:5b:
61:27:69:18:fe:0c:67:5b:e2:2a:c0:02:ac:61:ed:
b1:e5:be:d1:a5:0e:fa:a2:b9:52:f5:25:80:3d:d9:
2f:5d:7f:44:11:79:6d:be:c9:14:d9:ba:e6:9f:2f:
b3:4e:2d:fc:06:8f:05:c5:e3:3d:bf:43:22:47:51:
1f:c7:9d:38:34:08:8c:d3:8c:0d:0f:c3:0b:93:3c:
53:c5:2c:c2:ff:3d:e9:58:ce:cd:67:36:3c:75:77:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:4A:09:A8:0D:D3:E1:1B:EC:F9:15:07:21:C6:B7:18:AC:3B:3D
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:59:6b:d3:3c:5d:c0:ae:27:31:f6:de:d2:7e:67:e0:17:57:
7a:38:fd:4c:39:2a:42:cd:ca:f3:80:6a:28:e0:fd:4e:bf:29:
58:1a:a9:40:22:33:de:61:f8:80:5b:ee:50:d2:85:3b:4c:67:
3b:6c:1b:19:5d:a6:d8:1e:8b:88:80:21:f8:16:f1:ce:80:a8:
80:8a:58:ef:04:d5:46:bc:c5:52:0c:fa:5b:64:9b:42:9e:64:
ca:88:0d:80:aa:39:4f:d1:f3:e3:a1:1f:a2:8a:bf:04:69:00:
79:72:18:c5:55:88:b6:9d:e3:e7:8b:1b:d7:af:ca:b5:12:5a:
c8:ce:77:18:be:e2:67:14:66:da:47:e4:9a:9f:de:85:e7:b0:
9a:9f:3f:00:eb:1d:bd:cd:48:1a:5d:55:16:4b:d7:5e:c3:cf:
51:4a:a2:b7:fb:fd:02:eb:de:c0:f5:ce:33:74:35:c7:ea:80:
aa:2c:ec:b2:38:23:9e:e4:c1:d3:d6:a9:27:fb:bc:b3:27:ad:
e6:5b:1d:ea:a8:e5:7f:5e:3e:2b:fe:00:f5:0f:b6:c6:63:0c:
eb:2a:47:48:ed:3f:cd:b2:47:1b:23:03:64:da:95:47:79:5a:
70:d5:45:4c:08:de:86:2b:a4:86:5a:04:2d:d6:66:a0:ef:bd:
08:67:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:20 2026 by rpki-client