Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: rp9zzaJDsqJ2C7rdZwuoyTx3uDAMR1FB0lE0CIaa1bI=
Subject key identifier: 93:9D:AE:C8:C7:9F:6B:1F:BF:BE:1A:25:EB:7C:17:E1:F6:F1:3F:AE
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 019D98F4B3666F4A252EB0D624E452540597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:01:06 +0000
Manifest this update: Fri 17 Apr 2026 01:01:06 +0000
Manifest next update: Sat 18 Apr 2026 01:01:06 +0000
Files and hashes: 1: H7bzuNwWAw0WqWgCEkaaWLBrXww.roa (hash: qJ814Ut9PCA48je680EM2s8Vg9S3+E4bblZcpYFDxgI=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: 341cKUW96Yd1q9atmjdJJLbbqRGCiKBBOMlyEGoJ6l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b3:66:6f:4a:25:2e:b0:d6:24:e4:52:54:05:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Apr 17 01:01:06 2026 GMT
Not After : Apr 18 01:01:06 2026 GMT
Subject: CN=939daec8c79f6b1fbfbe1a25eb7c17e1f6f13fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:62:30:29:00:f0:41:e6:9d:5b:74:5e:6a:
f0:c7:87:cb:96:87:5a:ee:45:a8:7d:bf:f4:52:fb:
a4:d2:64:af:d7:1f:4c:0c:d5:76:d1:f5:b2:89:28:
e4:47:94:5e:f2:84:85:8c:b9:b0:6c:a4:20:c7:e1:
6d:5f:9c:8b:6f:ca:cf:11:8b:72:53:b7:b4:f2:ad:
6d:16:59:e0:60:21:e9:19:56:b7:9a:cd:d9:82:19:
1f:db:81:72:6e:3e:cd:a7:9e:8e:7f:f1:cb:be:4d:
40:42:df:cb:00:f8:82:c4:c5:41:6c:b1:05:9d:71:
59:6c:bd:ad:8a:cc:bd:0f:29:5e:2d:20:00:96:7b:
b4:4b:c1:d0:f7:27:0a:f9:03:0c:3f:df:ea:89:bb:
f0:1e:c5:8e:df:fe:a4:fa:08:4f:ce:cd:8c:cc:b5:
70:3f:7c:63:6f:b8:ae:8e:02:30:80:dd:ba:b7:b6:
45:87:9e:18:68:33:4b:71:70:13:d3:11:35:62:bd:
4a:e5:e9:32:03:5e:7f:94:7b:b0:45:4c:93:14:2f:
2c:a7:2f:ed:2b:ec:8d:e9:4c:bf:f4:15:11:a0:5f:
44:11:64:62:6c:43:97:4a:39:0d:4e:87:b4:46:3c:
76:89:1e:71:91:35:50:2b:2e:3e:7a:6e:cc:ef:02:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:AE:C8:C7:9F:6B:1F:BF:BE:1A:25:EB:7C:17:E1:F6:F1:3F:AE
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:56:8b:c1:86:90:9c:3d:51:68:5a:26:8b:f8:81:40:c2:44:
da:b9:0c:66:1c:b6:05:0a:6a:9c:61:9b:05:13:87:c6:95:c2:
43:35:2b:8c:97:1a:b7:86:cf:ba:b6:8a:fa:03:fa:fc:b2:85:
23:e9:8b:36:fb:9f:ff:45:92:68:1a:31:e1:c5:19:5b:1b:69:
58:f0:44:d4:98:5b:b6:57:b9:3c:67:05:04:2f:b5:cd:0b:c0:
08:bd:05:15:bc:56:07:b9:8a:31:11:8b:11:f8:eb:5b:37:96:
8d:43:d3:e3:f2:71:ec:ba:14:1a:3b:8a:93:11:1f:42:32:8e:
a6:9b:d3:f6:ea:72:c1:17:0b:b3:64:17:0c:33:d1:9f:aa:8e:
14:2a:b1:8b:28:fa:b2:d8:99:12:7e:0f:16:1e:45:af:54:96:
fb:25:f9:5e:e1:96:a0:9d:8f:27:db:57:81:57:26:5c:34:08:
36:cd:1b:9c:67:a3:e3:7e:18:cb:21:58:73:8f:b2:28:e6:86:
55:b1:8d:0b:b5:ee:b9:70:6b:8f:42:92:e8:ba:81:0d:d5:8c:
6a:84:6b:4d:3b:8d:e0:62:aa:2b:d9:14:d1:12:51:fa:1f:7c:
84:84:b0:9f:67:44:b6:8b:4d:5a:94:e7:1f:fa:68:92:5a:5f:
42:51:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:26 2026 by rpki-client