Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
File: XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft (raw, json)
Hash identifier: HLxqjxmddD1ceFMoiDPm+Up+BdEH/MAvItt5yUwTio0=
Subject key identifier: EE:6F:2D:10:02:D9:CF:2A:F7:BD:2A:2D:4A:68:7D:29:0F:C7:6D:8C
Authority key identifier: 5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
Certificate issuer: /CN=5de458f21d406466bdf68240f505eefd197ba936
Certificate serial: 019D98F46E491FCB416D6E286FDDF24732EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl (hash: Ka5fqX5Eipqq44kXZuywQK6wYkHvRH2nQdlabvk8pcU=)
2: i4eEi_MJmmYfUqfd7JjdOwAtBfc.roa (hash: GUYHjtH4qDoS+nBA7gPOzvHqwLi2k+v4VmAAo9jm4uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6e:49:1f:cb:41:6d:6e:28:6f:dd:f2:47:32:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de458f21d406466bdf68240f505eefd197ba936
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=ee6f2d1002d9cf2af7bd2a2d4a687d290fc76d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:08:0b:c3:64:f0:4c:1c:96:c2:2f:57:36:
17:6e:86:b9:c1:d2:58:cb:cc:07:e2:50:93:85:f6:
ea:be:50:dc:b0:4e:91:52:cc:41:79:0e:e7:06:c7:
c2:0d:74:de:8e:2c:32:4a:71:4e:8f:3e:34:9a:92:
c4:0d:b6:2a:23:81:49:bc:ce:ef:96:2e:d1:85:0f:
39:8d:e4:c8:9c:e1:5a:00:3a:f0:73:39:02:c0:ec:
e3:6f:99:9a:9a:97:71:ac:a8:fa:c1:57:a1:3a:d0:
df:c8:ce:30:fe:87:2d:4c:52:71:6f:9d:f9:52:d6:
eb:3c:e2:ff:98:71:0d:41:cf:81:15:4c:d7:0a:4e:
8d:cc:56:9a:c6:a7:b5:ac:75:d6:2a:6c:5f:f6:28:
bc:ba:bb:ef:ed:c7:e6:83:a4:a2:ec:1b:ba:2f:d2:
ac:31:16:81:9c:94:b9:72:29:f1:b4:6a:00:2d:c7:
1b:44:7b:0f:c6:69:d7:62:75:f1:41:4a:9e:dd:7d:
6b:1b:1c:b6:3d:24:18:8a:fb:75:61:21:80:c6:dc:
26:90:34:5a:55:40:f5:31:75:db:7c:5e:a4:c3:2b:
30:72:9c:e1:be:80:d2:23:91:e1:d5:a4:1c:42:bb:
fc:92:40:38:ed:ab:da:a8:30:dd:04:6c:83:90:9e:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:2D:10:02:D9:CF:2A:F7:BD:2A:2D:4A:68:7D:29:0F:C7:6D:8C
X509v3 Authority Key Identifier:
keyid:5D:E4:58:F2:1D:40:64:66:BD:F6:82:40:F5:05:EE:FD:19:7B:A9:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeRY8h1AZGa99oJA9QXu_Rl7qTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e155ea-88cd-4414-aab6-23ab58d6415a/1/XeRY8h1AZGa99oJA9QXu_Rl7qTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:40:e8:d6:e5:8b:93:15:10:36:2a:4e:3c:9c:be:ce:b1:a8:
e0:eb:65:33:a8:45:29:87:b7:1f:53:d8:ba:f1:8d:89:3e:69:
55:af:17:53:96:de:03:19:90:05:20:7e:03:db:f5:5c:8c:ef:
c2:8e:cb:ed:8c:be:a2:36:30:e4:e1:7b:cc:d1:e6:89:57:70:
9f:93:b7:ff:f5:57:00:3b:5b:de:0d:4e:23:8f:f3:15:71:70:
3d:c8:86:b9:ac:80:44:39:21:3b:91:73:92:f8:a8:14:52:3e:
13:55:a0:24:d7:1c:f7:3e:5a:9a:e0:e7:71:65:95:9a:9b:42:
d2:cb:af:95:d7:7a:e0:83:4a:97:d3:d7:ab:c3:99:12:c5:16:
8b:b0:c9:e5:6e:ed:c6:7c:b0:3e:4c:35:63:6e:15:4e:75:c9:
ad:b3:74:31:ee:a6:0b:c8:45:c0:be:0a:01:4e:81:cc:95:89:
ad:99:72:14:b8:80:89:4d:ff:ed:79:50:7b:9d:81:7f:3e:b4:
98:85:64:e0:37:32:53:e6:5c:93:64:56:d2:04:61:02:f9:1d:
4b:fc:be:c8:41:0e:db:99:e6:e5:1b:5f:f1:be:a0:c7:d6:77:
ec:9a:51:cd:bf:79:80:07:46:4e:df:de:52:b4:8a:06:49:44:
8b:2f:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:11 2026 by rpki-client