Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: i32+DaYJhke4cjlabeROUJwSf//0CGWc9V4bCwAlQGE=
Subject key identifier: 3C:98:FC:4D:F9:38:5A:4A:3E:3C:58:5D:0A:EB:BF:CA:55:A6:D6:48
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 019D9C2CA161DC7EDCDCE6E27155A8E37DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 06F3
Signing time: Fri 17 Apr 2026 16:01:03 +0000
Manifest this update: Fri 17 Apr 2026 16:01:03 +0000
Manifest next update: Sat 18 Apr 2026 16:01:03 +0000
Files and hashes: 1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: IftO6ARWPPi45u1SeSpaeS2GQYqCWZCYqhWfleWPsbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:a1:61:dc:7e:dc:dc:e6:e2:71:55:a8:e3:7d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Apr 17 16:01:03 2026 GMT
Not After : Apr 18 16:01:03 2026 GMT
Subject: CN=3c98fc4df9385a4a3e3c585d0aebbfca55a6d648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:9c:44:4b:cc:3d:c9:02:2a:e0:fb:8a:34:
2d:24:1c:0b:73:65:9b:57:70:c3:8b:70:e7:01:d6:
9b:3e:9e:55:7c:1d:19:de:58:b9:31:ba:48:dc:7c:
bf:3c:79:b1:7a:66:6b:99:c5:3e:d6:b1:a2:9f:05:
5d:37:5b:ae:36:15:6c:f2:06:63:9d:ef:2a:23:70:
02:74:66:3a:fd:5e:cb:8a:bb:97:b3:aa:52:9d:74:
2c:82:37:5d:69:34:c2:a4:60:58:4a:76:70:f9:73:
08:ff:fa:05:21:94:35:1f:78:6b:91:30:34:14:e5:
56:f1:a5:9b:e4:92:86:66:ac:6f:e2:51:e4:10:17:
50:72:19:dc:60:df:e9:24:54:40:e5:87:df:6d:b0:
cc:a4:86:c8:31:8d:53:45:1c:20:8b:93:9b:1b:f7:
25:92:5d:c1:1d:9a:c4:71:7f:0b:b5:51:b1:b7:9f:
77:1c:42:3e:c6:c8:1c:10:a5:54:c2:3b:8f:f5:3f:
98:da:89:08:1b:a2:31:34:8a:68:02:a4:ca:81:44:
27:77:52:72:9e:56:ef:8d:69:60:ea:08:e3:4c:76:
8d:01:6a:e7:4e:7e:be:fc:bd:16:e1:02:47:49:b6:
28:42:4d:5a:3b:11:29:aa:41:7c:a3:c4:ed:24:43:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:98:FC:4D:F9:38:5A:4A:3E:3C:58:5D:0A:EB:BF:CA:55:A6:D6:48
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6f:28:71:e3:39:30:f6:04:f2:61:df:e5:af:30:7d:28:bc:
d0:c3:83:12:af:8a:c7:cf:51:6b:18:3d:67:a8:4b:55:f3:83:
66:91:9d:d4:38:9b:30:ea:a6:92:de:4b:ea:13:c7:1c:47:4a:
d3:70:7c:93:f6:14:36:6a:7c:b5:96:43:41:a0:f3:64:07:48:
e9:54:d4:39:8d:13:73:58:5a:54:4a:74:a7:f6:98:fb:93:eb:
3a:7d:7b:01:56:b6:63:dc:04:83:c6:0f:6b:38:a2:63:02:ad:
e9:e9:9f:66:cd:25:5e:ee:3b:75:0e:04:8f:21:68:fe:99:77:
c9:b7:fa:ff:cb:25:5b:fb:44:2c:42:a7:df:e4:ad:cd:11:ca:
94:ab:40:60:0d:79:ed:d2:ee:ed:0b:13:23:5d:d8:bf:61:ff:
e9:a4:09:26:ec:1c:b6:6e:c4:d0:55:20:9a:34:d1:7f:4f:20:
db:f5:84:ef:06:fd:4e:41:f5:db:e1:71:65:05:09:46:9a:5e:
aa:fc:06:a2:37:50:fb:46:41:9b:88:f1:74:58:0c:95:6b:fe:
b7:9a:8e:78:c0:2d:b7:15:57:71:51:41:8e:a4:cf:0e:c1:94:
fa:c4:86:53:04:29:9f:b5:69:76:be:e5:94:fd:68:f2:86:45:
5f:6c:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:32 2026 by rpki-client