Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
File: XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json)
Hash identifier: BljLKeARtEFcj3OlO8bZE7dSTvdnM7bCsMdH7czchZs=
Subject key identifier: B2:D1:51:89:C2:60:87:3D:04:F8:E0:98:AF:8D:96:01:4F:24:0D:5D
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 019D9AAC457E3DD3EBABAB807210AD4F9F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
Manifest number: 10F9
Signing time: Fri 17 Apr 2026 09:01:14 +0000
Manifest this update: Fri 17 Apr 2026 09:01:14 +0000
Manifest next update: Sat 18 Apr 2026 09:01:14 +0000
Files and hashes: 1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: 7/Eb4HEGsaXXzRiq4KmCnJ0wV5K6HNCRB+JSa7/mXOU=)
2: _YZBO3azDWzDB7ElIM22F0xnwLk.roa (hash: 4qcIMPGCjL8+gfTaAVV6FW+AJO4ktZWbZTXBgVeKur0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:45:7e:3d:d3:eb:ab:ab:80:72:10:ad:4f:9f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Apr 17 09:01:14 2026 GMT
Not After : Apr 18 09:01:14 2026 GMT
Subject: CN=b2d15189c260873d04f8e098af8d96014f240d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:33:e6:d7:81:05:66:56:76:b1:3a:5a:69:
35:38:42:82:8f:25:cd:03:81:89:6a:b3:63:30:46:
cb:de:ac:ad:2c:f6:32:49:46:c1:c9:8b:b3:4d:5b:
b3:5b:79:3c:6e:cd:3d:7f:fe:c4:f8:8b:d2:3b:62:
39:16:5c:cd:cf:c5:b9:07:11:6a:99:9b:12:98:ad:
f1:5a:40:96:5d:d0:c9:7f:15:b5:2a:ef:ef:e7:90:
e0:18:b5:df:ff:f6:d5:de:e5:1e:f4:c8:bf:85:e3:
be:9c:82:9d:66:3a:76:b3:ce:4a:c8:77:b4:3d:c4:
2b:6c:88:aa:f7:50:52:f1:d8:94:30:c5:34:a6:2f:
e4:03:ad:56:90:89:c3:e9:0b:ee:98:cc:8f:7e:fb:
22:19:97:d8:74:da:62:f3:bd:38:39:56:26:4b:32:
47:da:d0:17:81:e1:73:1f:6f:77:c4:3b:7e:40:50:
dc:bf:b2:87:83:42:e2:95:46:23:a7:d9:fd:96:f1:
f4:c9:fc:b7:37:0a:bf:f6:87:cf:cc:cb:2f:0f:df:
f9:35:a8:c2:9c:d7:0b:8a:63:4c:27:48:3c:08:97:
ed:3e:a4:ce:83:c8:58:9d:86:ea:2c:ad:67:a8:5e:
95:8b:23:e8:9a:4a:34:9e:e8:4f:aa:64:a8:2f:12:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D1:51:89:C2:60:87:3D:04:F8:E0:98:AF:8D:96:01:4F:24:0D:5D
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8b:72:6f:46:d9:70:4b:1d:bf:b4:04:9f:40:c7:af:fd:9a:
45:80:8c:35:de:05:32:86:b4:6e:9a:36:d6:48:c0:eb:23:5e:
22:b9:ba:9f:b4:d6:98:4e:51:dc:61:a4:fa:1a:a0:fb:fa:04:
31:93:8c:f0:a9:dc:94:4b:a0:08:7e:ab:f2:c9:c5:90:20:73:
04:62:37:e2:91:b3:99:f6:d3:4d:c4:71:e0:ac:a2:fc:4e:79:
6b:3d:2b:32:93:8a:6b:eb:07:ad:b8:7f:ae:59:c9:03:8e:77:
d8:f6:3c:c4:1d:b6:b9:ed:5e:21:ac:6d:20:37:24:ef:86:1b:
6b:f9:58:0a:77:93:76:02:d8:72:ae:02:09:65:90:02:21:70:
74:5c:c7:84:52:fd:27:88:8e:cb:1c:da:60:3c:f2:60:0b:63:
29:7b:f3:2a:65:c9:da:c9:b6:92:37:fa:e6:56:19:ec:b6:55:
c2:97:d9:be:ba:31:e2:29:77:7c:4d:3d:f4:ac:75:ea:61:1a:
6d:50:8d:31:fe:f1:ca:77:c4:23:0a:e6:d8:31:d5:c8:7c:3a:
03:43:57:c4:9f:47:eb:ad:a1:08:7e:3c:a7:59:42:a2:5c:2d:
39:2c:e0:8f:b2:53:be:99:fd:8c:ca:8d:cb:0c:13:d8:67:e8:
ef:87:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:51 2026 by rpki-client