Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: uf8uieGdRMDuzjP56oT6MIvJ+q2tfjYij4YStdElcXI=
Subject key identifier: 63:63:6E:5C:1C:FA:D7:10:10:9A:CF:90:1A:EC:7D:E2:54:A1:B4:11
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019D9AE2DE2127D8B3E1F12B57E6A66F4131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 13FA
Signing time: Fri 17 Apr 2026 10:00:52 +0000
Manifest this update: Fri 17 Apr 2026 10:00:52 +0000
Manifest next update: Sat 18 Apr 2026 10:00:52 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: wlL9p5mnVfTjqpqVRxdvItWN1hZGdgVk4Kjj7QtNi4E=)
5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:de:21:27:d8:b3:e1:f1:2b:57:e6:a6:6f:41:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Apr 17 10:00:52 2026 GMT
Not After : Apr 18 10:00:52 2026 GMT
Subject: CN=63636e5c1cfad710109acf901aec7de254a1b411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:a5:da:82:9e:b6:61:eb:f8:b1:a6:a6:3d:
55:d2:ca:00:f7:d2:eb:35:c2:84:a1:be:a5:b7:b7:
98:96:10:fa:e4:be:14:cf:f7:2e:dc:64:3f:d4:cc:
13:9f:c2:40:9a:74:18:0d:41:d4:c7:99:cb:9f:6b:
03:29:77:58:50:3c:71:12:da:ac:97:42:70:79:f9:
8a:a2:e5:47:95:1c:84:fa:56:35:59:c3:8e:a6:29:
7e:54:ae:67:ac:12:37:bf:b7:2b:9e:d8:5c:57:95:
ff:fb:eb:28:c8:87:0c:31:4a:4b:fe:c0:ec:19:31:
2b:b4:ad:2e:dd:2e:15:68:a0:1a:13:df:cc:97:33:
59:6f:cf:c9:ff:32:ed:7c:f6:c0:f5:a9:d0:28:52:
46:d1:d4:ad:6f:49:21:3d:98:27:03:e4:ac:54:fe:
b5:5d:82:40:89:62:fe:ff:f2:ee:df:22:d2:1d:eb:
03:17:c0:c7:42:e2:63:a8:f0:a0:ef:a6:e2:82:3e:
5d:a4:fc:02:94:72:80:fe:07:b8:b3:2c:6b:5c:cf:
3b:8e:c8:5d:9d:86:85:6b:17:0f:12:c2:6d:5b:ad:
0a:d5:e0:43:0d:de:0a:56:87:8f:3e:50:28:ed:4d:
d1:7f:e8:16:17:4d:3a:f4:47:db:2e:9a:99:28:cd:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:63:6E:5C:1C:FA:D7:10:10:9A:CF:90:1A:EC:7D:E2:54:A1:B4:11
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:36:9d:7a:21:0d:ba:55:20:1c:2c:e1:47:91:82:08:0d:f9:
36:35:b5:c3:19:21:05:30:29:68:d4:55:57:ac:9e:6c:7f:ff:
cb:dc:04:e9:48:cf:db:d6:c3:a1:3c:fa:b5:d1:25:2b:8b:9e:
73:55:03:9e:03:29:0f:47:4b:b4:bb:80:19:00:0a:ed:69:c0:
7f:53:b0:6d:1c:3a:54:8a:20:58:a1:4f:03:26:cf:a9:bb:ee:
16:78:98:71:45:ad:22:5d:5a:63:db:3c:38:d6:88:e6:b8:59:
44:e3:a5:73:11:a4:c0:bf:a5:64:61:68:9b:72:7a:37:f8:66:
29:b8:12:81:34:d1:77:af:67:4b:28:af:c1:ec:9e:ba:12:89:
f0:bd:96:80:9c:54:ed:3a:c1:63:b3:1e:83:17:15:b5:cc:be:
b9:24:a9:54:11:7e:02:c7:6f:f9:ac:bf:2e:25:f3:ad:e1:fa:
2f:4f:50:a7:92:b2:06:32:71:99:1b:22:be:99:f4:fd:62:4e:
62:7f:91:50:bc:0d:0c:07:a7:10:b4:26:ea:e3:a4:70:a7:de:
1b:f5:e5:79:7a:59:58:38:c2:ad:5f:27:ff:c6:e9:af:d8:72:
3a:9d:98:da:38:ff:28:2c:90:95:0c:5c:c3:de:23:44:7c:2c:
c7:72:41:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:09 2026 by rpki-client