Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: 4EXYtt3M3iQwVxGddhbmaXIcE83orukC5wkK3RLK/X0=
Subject key identifier: B3:E2:01:55:C6:4F:F3:D5:B4:B7:D3:5B:0F:36:B4:50:9C:3A:0C:4C
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 019DA30AE999591B5B1A652C2329B637B1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 00:01:34 +0000
Manifest this update: Sun 19 Apr 2026 00:01:34 +0000
Manifest next update: Mon 20 Apr 2026 00:01:34 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: JdGXG442aA+Vxo0RvOzgGfb1yMpYwe/1tBJHJtsoJ0A=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:e9:99:59:1b:5b:1a:65:2c:23:29:b6:37:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Apr 19 00:01:34 2026 GMT
Not After : Apr 20 00:01:34 2026 GMT
Subject: CN=b3e20155c64ff3d5b4b7d35b0f36b4509c3a0c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:45:2c:17:f3:12:10:d0:02:48:56:6b:e4:
f8:8b:4d:af:68:b4:73:3d:b2:53:86:f7:99:7b:03:
28:3f:33:2a:a4:3e:df:d9:06:e4:e4:27:56:d0:ba:
79:74:ae:dd:e0:2a:8b:6c:63:97:5d:0b:df:b0:d6:
1a:0c:41:d7:8d:b4:17:7e:99:81:6a:12:64:bf:b7:
70:da:17:e3:b1:0d:02:32:98:d1:d2:93:88:ec:77:
e3:f7:a8:d2:2e:73:c5:10:f4:3f:a7:39:0e:d1:58:
2a:f3:f4:3e:3a:0a:9f:1a:18:f7:96:68:77:96:bf:
0e:e3:4c:81:e1:1e:da:08:b4:e7:b9:28:56:fd:fe:
31:f1:9b:0b:69:47:fc:4d:3c:44:46:2e:d8:4d:fc:
98:1d:3b:53:9d:83:a5:5c:cc:c1:37:40:f5:9d:31:
47:16:69:8c:a1:17:53:b5:c6:ac:4a:3c:d4:ca:f9:
d7:47:cb:c3:31:72:82:46:61:09:26:62:1f:53:29:
88:d9:86:12:76:00:95:f0:9b:5d:b7:e8:1b:2c:47:
84:8f:12:4a:35:71:64:bf:a4:9f:70:ee:e6:13:3b:
2b:e8:d8:16:97:50:77:df:fb:f5:29:41:86:50:50:
af:3e:81:97:2e:e7:d8:18:f0:47:3a:83:71:59:57:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:01:55:C6:4F:F3:D5:B4:B7:D3:5B:0F:36:B4:50:9C:3A:0C:4C
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a5:a6:59:cb:9c:d7:d2:65:a4:5b:54:42:d3:57:0b:1b:74:
99:b0:8d:2f:20:a0:9b:e6:9d:3b:69:4f:3d:33:df:35:01:c1:
6a:20:e8:7e:a1:b9:dc:e9:35:d5:9d:99:4f:f4:1e:e6:d5:55:
35:97:7b:d2:bb:1e:30:fc:ef:a1:72:1a:5f:41:6c:42:4b:65:
25:2d:7e:9c:4f:d0:1e:5c:d8:5f:80:d9:b8:f8:8c:b1:54:56:
08:55:fd:30:de:3b:00:07:f8:1b:5b:fb:5c:53:bc:1f:b1:f7:
ad:9d:24:41:8d:fb:ee:dd:ba:dd:8a:c4:52:30:13:9a:bf:8c:
7a:e4:bd:7d:b9:e2:73:a2:f7:9f:77:61:1e:06:9e:d6:de:23:
1f:54:3d:df:7f:2a:d3:da:70:c6:0f:86:88:9f:2a:76:53:63:
9f:8e:70:de:e4:1a:b7:19:7d:af:42:13:a8:8a:cb:01:81:5d:
65:42:f3:73:00:72:c9:a4:08:6c:38:10:71:81:7b:2f:fc:88:
df:dc:6c:28:05:a4:c1:83:08:50:c4:67:3b:a4:b0:c4:52:c0:
18:15:10:c4:5b:a4:65:a1:e0:d8:ce:3f:2b:e9:26:72:5f:a7:
e2:4d:ae:05:bf:a3:6f:68:5e:fe:9c:65:e7:55:f7:5d:b8:7c:
12:5d:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:57 2026 by rpki-client