Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: xqU/LYP/k7LI5pDJZPLWy3bct80kDC7J0ftm8IrNtRg=
Subject key identifier: 44:49:23:F0:FA:25:22:74:2C:17:2E:E1:E6:48:9F:4E:7B:D5:B1:AD
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019D9C2CDF18ADCDCFA6A972281C1E888E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 06E3
Signing time: Fri 17 Apr 2026 16:01:19 +0000
Manifest this update: Fri 17 Apr 2026 16:01:19 +0000
Manifest next update: Sat 18 Apr 2026 16:01:19 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: svqwRvIGznKLHaDBGXFJ26tkrAjiG7LXJZhmHuF3I+k=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:df:18:ad:cd:cf:a6:a9:72:28:1c:1e:88:8e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Apr 17 16:01:19 2026 GMT
Not After : Apr 18 16:01:19 2026 GMT
Subject: CN=444923f0fa2522742c172ee1e6489f4e7bd5b1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:40:0e:ff:df:6e:ef:c4:d7:58:46:0e:7d:
0f:23:0e:bd:67:db:5a:12:dc:1a:42:f5:d7:30:b2:
53:bb:49:22:5b:a8:f9:f9:d1:f4:07:03:44:ac:00:
ce:49:c7:d1:dd:83:f6:30:65:11:a6:e7:76:94:0a:
d3:37:06:5b:2e:70:2b:a4:5e:1d:4d:7f:42:0a:ef:
23:a2:de:44:a1:5c:e4:26:a4:d2:7d:c5:bd:fd:81:
75:9b:73:32:40:50:e0:af:4f:35:10:1a:c9:21:ab:
30:97:82:ef:9c:23:85:93:07:0d:18:dc:7d:51:b7:
25:3e:3f:5d:1a:9f:ec:61:d6:d7:c2:9e:e7:e4:e0:
b7:dd:03:98:cf:94:04:17:e4:62:e3:69:60:e3:c1:
59:18:a1:8b:a9:60:7e:62:de:bd:ed:5e:9d:28:0c:
91:6d:31:af:53:35:82:e1:bd:20:a3:25:a3:f0:d8:
21:5a:b5:1c:e5:17:7c:de:12:46:1e:08:88:58:a6:
2a:66:cb:05:c7:8f:4f:18:dc:13:34:95:1c:68:f2:
3e:e5:07:fc:e4:95:c6:e5:b7:66:ef:40:15:2d:99:
7a:dd:ad:91:e3:1b:fe:56:77:51:65:95:c3:e2:c1:
b2:59:78:13:43:fd:86:2c:5f:fc:74:13:92:e6:d4:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:23:F0:FA:25:22:74:2C:17:2E:E1:E6:48:9F:4E:7B:D5:B1:AD
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:da:22:4b:4f:c1:4e:1c:7e:4e:69:25:c2:0c:2b:c2:88:68:
c9:ce:43:67:16:b6:17:b0:d5:b0:38:b2:85:02:15:a2:42:de:
86:dd:bf:b8:2f:0e:82:ad:f3:32:94:b5:b2:2f:08:47:e2:e3:
0f:41:5c:a4:00:05:b5:4e:0c:ff:b1:7c:97:94:85:04:de:ea:
71:ac:d4:0c:96:b4:10:bc:5c:d3:be:78:46:37:0f:47:d6:ae:
ad:1f:1a:cd:ab:36:5f:c2:d0:b1:07:0d:09:5b:37:ee:70:6d:
4c:3c:55:61:8f:1b:0b:66:5d:1b:e4:1b:6f:96:da:09:f5:a9:
da:52:e3:9d:ef:02:19:26:1a:7d:dd:3a:a7:94:b3:7e:80:19:
86:11:4c:de:59:e7:5d:c4:35:bb:cb:32:06:ca:05:5f:64:84:
79:6c:73:99:99:ae:98:a2:52:c2:68:3a:af:b0:cc:74:66:66:
92:77:60:36:10:a6:a5:9e:5c:aa:b5:f2:65:b0:47:17:4a:a1:
50:17:cf:9f:c5:16:a6:05:cc:00:42:2d:2c:f3:8b:c5:c9:08:
b0:ed:64:f0:23:8d:0e:cd:e4:cf:00:e6:bb:54:c0:ca:e4:91:
bf:ca:04:bd:11:42:5d:98:3b:0a:81:f6:b1:b2:95:26:32:34:
c1:9a:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:43 2026 by rpki-client