Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: LKialg30BaheGMpQ5QdJ5jOTxBw5S5+Uw9HzddqyHjw=
Subject key identifier: B7:8B:54:50:D5:94:BA:09:81:5C:D3:A2:5F:EC:0B:24:A6:B2:05:A3
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 019D9B19E3392205D6DA098656C1FCBC5A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 17C1
Signing time: Fri 17 Apr 2026 11:00:58 +0000
Manifest this update: Fri 17 Apr 2026 11:00:58 +0000
Manifest next update: Sat 18 Apr 2026 11:00:58 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: /Kjq8KoC8VPoQ0gf4IhWNcfDqh67vFEcxvPU3V3302w=)
2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:e3:39:22:05:d6:da:09:86:56:c1:fc:bc:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Apr 17 11:00:58 2026 GMT
Not After : Apr 18 11:00:58 2026 GMT
Subject: CN=b78b5450d594ba09815cd3a25fec0b24a6b205a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:88:5a:15:9f:aa:02:f4:fb:83:a1:9d:5b:
d0:83:dd:f9:c1:37:83:c4:a3:97:f3:63:28:8b:fc:
87:e2:da:97:3a:01:2b:a6:ce:dd:38:30:75:00:5b:
e5:4a:ff:4d:ff:89:39:e7:85:c3:27:1a:b9:3d:a9:
f1:8e:ed:c9:25:bb:95:43:75:e3:3b:b1:7a:a1:fd:
29:ff:70:6f:73:f4:db:b6:c7:df:43:c8:84:bf:b2:
f4:f4:53:66:6d:9e:15:43:37:cd:4a:4c:02:9a:68:
cc:12:a9:13:44:41:ab:6b:83:7b:5e:07:95:1a:74:
fa:23:f2:e0:d7:e5:53:67:64:c4:74:9f:4a:a8:2d:
b7:a6:76:f7:82:57:e4:95:90:86:6a:f7:55:71:72:
1b:40:da:b9:30:08:7c:b6:99:ca:f0:ca:21:95:95:
69:62:b2:f8:99:4b:f0:2f:94:cf:36:80:49:cc:2b:
2a:13:a6:18:24:c2:a9:76:a3:bb:0a:d9:ab:1c:04:
3a:8a:05:65:2a:d6:2f:33:ea:fe:0d:8a:6f:5e:b8:
d3:c0:7c:91:fc:69:5c:ad:5e:35:eb:42:4a:13:fd:
43:64:d2:80:0d:cd:f8:86:3f:27:d9:3c:c5:61:f6:
6a:6b:38:9b:0c:e6:d2:81:9e:73:3f:e2:82:96:95:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8B:54:50:D5:94:BA:09:81:5C:D3:A2:5F:EC:0B:24:A6:B2:05:A3
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:95:1b:d0:c7:3d:6e:4e:dd:93:e4:f8:a8:e1:74:ac:6c:21:
ec:d6:7e:e9:da:f4:75:a0:99:e9:b9:a9:7f:50:6c:99:1e:62:
2d:b9:62:4c:e2:25:ed:06:21:95:d6:83:7d:d3:36:cd:65:a9:
d9:95:34:23:bd:f4:6b:fd:f6:94:aa:6c:5e:24:00:26:4c:8d:
e3:a2:d2:8b:52:78:fe:f2:3d:6c:7f:af:0d:5d:c8:9a:79:5e:
00:9d:d5:82:e8:da:f6:41:47:54:64:76:e1:3e:74:2c:ab:eb:
6e:4e:c4:c4:2c:b3:ba:5d:34:51:ff:c0:8e:4f:04:5f:b0:a0:
21:22:d4:1a:76:3c:af:6e:79:18:60:69:19:e2:ef:c8:12:42:
41:8c:aa:93:7f:c8:1f:3d:3b:f1:25:f2:7e:35:16:0e:72:26:
d7:d5:0b:80:f8:6d:5e:67:31:9e:ee:01:49:fa:1c:fc:11:66:
9c:f0:60:69:af:07:88:34:40:8b:eb:f8:33:4a:de:fe:ab:ad:
ec:89:e9:30:2f:4d:fc:99:4b:c8:d2:7b:54:95:4a:df:7f:9a:
2c:f0:09:68:53:11:2c:09:53:10:2d:ea:ce:27:c1:2e:d4:26:
9d:ca:08:36:20:0d:c8:54:ab:f1:31:63:b3:ed:b9:41:78:95:
e1:82:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:59 2026 by rpki-client