Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: CBy10hhpSnMxbJCh4doUVyPUGf5m5DdK3V6Wi4XAwAc=
Subject key identifier: A0:A9:14:96:5D:9A:4D:EE:B7:FD:16:FF:A9:C4:17:68:A4:03:82:CD
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 019D999910C08A1DD6EFC5B0F9F8FA3BF67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 05A9
Signing time: Fri 17 Apr 2026 04:00:38 +0000
Manifest this update: Fri 17 Apr 2026 04:00:38 +0000
Manifest next update: Sat 18 Apr 2026 04:00:38 +0000
Files and hashes: 1: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: zMMO9gyptHWNyXpZbchmErtcGdDN4QstT54KM2KZukk=)
2: d9ad6eSfGOCAtJCyfx5T80LXc84.roa (hash: l8TnxH7nYsbi9OkxC5kgX4fiX1lQ108inFjyeEj/BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:10:c0:8a:1d:d6:ef:c5:b0:f9:f8:fa:3b:f6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Apr 17 04:00:38 2026 GMT
Not After : Apr 18 04:00:38 2026 GMT
Subject: CN=a0a914965d9a4deeb7fd16ffa9c41768a40382cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:02:ed:d7:09:22:1b:dc:6a:c4:62:0a:a3:
fd:f1:d7:00:43:bb:ad:f8:f8:1d:67:ec:f3:07:79:
d2:1d:4a:f4:25:15:3f:b2:3d:19:61:37:57:10:fa:
72:e4:15:3e:b6:4f:44:21:db:df:9e:b9:22:b7:a3:
c7:ff:6b:a7:bc:cd:c6:ba:54:3c:bc:03:b6:cc:89:
35:c4:55:08:c1:24:29:0c:85:af:56:0b:ad:b4:21:
31:09:9d:78:f7:cb:05:89:19:02:9b:da:aa:b1:7b:
6c:09:54:20:f8:36:26:dc:43:f2:95:f4:a5:f5:e5:
cb:3b:3a:3c:a2:ba:9f:a1:d9:47:78:fd:63:69:fb:
71:34:4f:34:0d:4d:c6:67:d7:21:eb:c5:3b:0d:b0:
b6:52:54:b6:8f:9f:aa:b3:a2:c2:de:c9:84:f3:6c:
65:66:ef:dc:55:15:fd:69:f1:55:4d:f8:2c:11:35:
0f:09:e3:7c:82:fc:93:0f:0e:8c:1d:29:0d:e3:8f:
6f:ed:3b:5e:12:9c:06:c4:45:99:cc:52:3d:f3:86:
8f:1d:45:e2:67:ef:28:59:58:90:0a:75:b2:e1:47:
19:c3:8d:18:15:eb:f5:3a:4d:9e:54:cd:12:1b:29:
19:44:31:be:0d:15:1a:b7:f8:d1:87:bf:8c:c1:07:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:14:96:5D:9A:4D:EE:B7:FD:16:FF:A9:C4:17:68:A4:03:82:CD
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:fb:78:31:3a:52:2f:0a:40:99:1e:12:c4:9f:1d:50:f8:
69:3a:05:41:c9:50:d5:90:8a:87:29:11:fc:7d:99:98:5d:13:
79:be:93:c8:00:f1:95:6b:aa:da:e7:80:e7:67:0c:26:a9:74:
88:8c:a9:a5:fb:2b:35:46:cb:96:e2:08:a5:db:db:0b:01:79:
81:5a:3e:9e:e4:44:3b:cb:49:f5:02:9c:7b:76:9a:05:ec:6d:
b0:bf:1c:21:29:52:9f:d9:7a:d9:b1:4b:f5:af:da:b1:66:7b:
03:cf:40:a3:8f:5a:5a:9c:e5:7a:fb:0c:43:8e:86:0d:85:98:
02:6c:80:29:57:3a:5d:ac:b4:2d:a6:de:1a:4e:cd:b5:0e:03:
fd:f7:74:43:fe:4a:72:3e:67:5b:20:02:26:77:de:80:41:d8:
55:38:07:43:fa:4d:0f:6f:d1:da:7c:54:45:55:ee:7f:c9:e5:
a7:41:25:9a:97:ae:84:9b:b2:45:23:e3:64:48:67:60:a3:8c:
f3:3a:7b:31:01:cc:e6:d4:2b:e6:77:8c:4a:d7:71:3d:5f:55:
af:94:8b:a2:00:5c:2d:f7:4e:31:77:6b:5c:3a:dc:d7:4b:a3:
db:66:ab:86:a5:1f:a6:28:39:55:83:85:27:87:71:77:4c:58:
e1:a5:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:01 2026 by rpki-client