Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: 4YSuyzzJtc5+2K6108uEX+Oi8nJS6ma7wDIZrOpmlYA=
Subject key identifier: 88:80:7C:D9:7B:68:E7:A5:7E:E6:28:C5:54:BB:19:4A:A3:99:6E:AE
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019D9999542F71B0492F4008B3C8D5DBB4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0FA3
Signing time: Fri 17 Apr 2026 04:00:55 +0000
Manifest this update: Fri 17 Apr 2026 04:00:55 +0000
Manifest next update: Sat 18 Apr 2026 04:00:55 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: zrPHMwPP+DCl1MThenKBI+n8ZQHpV6bKc/wKacmdFRM=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:54:2f:71:b0:49:2f:40:08:b3:c8:d5:db:b4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Apr 17 04:00:55 2026 GMT
Not After : Apr 18 04:00:55 2026 GMT
Subject: CN=88807cd97b68e7a57ee628c554bb194aa3996eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:44:99:34:cd:03:26:bb:00:02:2f:9c:1c:
c1:52:53:18:88:04:d2:5f:e4:5f:06:78:f6:96:1b:
99:f7:62:17:2f:e8:cf:d8:a0:90:d1:df:8e:ee:97:
63:d3:55:7f:84:67:93:3d:2b:36:c3:a3:eb:58:6e:
eb:d6:ab:e0:2a:bf:55:bc:34:39:9b:56:19:ad:25:
32:06:e3:d9:23:26:8b:49:9d:fc:25:64:ab:8a:8a:
fa:18:a1:37:3e:cd:bb:fb:1a:9e:8d:9b:22:56:89:
15:e9:6f:47:ac:ca:85:17:f1:83:58:49:70:9e:5f:
43:8b:d3:cb:8d:15:22:dc:85:74:2a:d1:f9:97:9f:
67:40:22:a3:22:94:f0:c7:f4:ec:d4:58:39:43:0d:
fb:06:d6:dd:c1:c3:b1:77:bb:af:fc:98:18:26:d9:
29:0a:72:64:a8:2b:c6:85:a5:0e:05:bf:2d:4c:1c:
8b:fb:3a:70:58:20:d2:47:7b:07:c0:ad:b6:ef:61:
1e:5a:a6:11:0b:c8:ad:b0:5a:24:20:d9:f9:a3:75:
d8:b5:fb:01:76:4e:74:73:b5:af:75:76:3e:bd:b4:
6d:b4:ce:69:7d:8f:37:ab:c2:7d:5e:3d:56:a5:7d:
85:1f:c6:75:bd:8a:11:36:ad:bc:28:4c:72:31:8b:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:7C:D9:7B:68:E7:A5:7E:E6:28:C5:54:BB:19:4A:A3:99:6E:AE
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:86:2e:9e:cf:27:70:04:9f:9f:40:78:47:f9:f7:c9:7e:be:
08:30:d9:bc:be:78:38:03:18:a3:b6:6b:fc:b3:10:8a:ea:89:
10:f5:34:05:84:ea:7f:64:30:a0:bf:07:c9:37:07:45:d0:37:
07:65:cc:27:31:01:35:6e:f1:5e:d8:9a:64:62:5b:5d:85:54:
17:52:ee:7b:be:d8:0a:9a:a8:48:1b:62:38:f3:a4:1b:5d:2d:
cb:d6:e7:6c:a5:2a:73:51:f8:77:2a:90:2b:35:7e:e2:d0:06:
95:f2:d9:00:cb:a7:fc:18:65:83:f5:ef:7d:7f:af:29:ef:ea:
84:34:93:51:16:a4:36:55:5e:e1:c0:2b:87:be:1d:03:96:aa:
e8:df:fd:77:76:22:08:3d:98:a7:d8:a8:20:90:f6:ea:64:bf:
32:91:fa:1e:a4:90:33:16:2d:bd:0f:9c:5e:d3:16:fe:42:d3:
e2:fc:71:95:01:cb:78:8e:2f:67:f7:51:5d:21:a7:f0:7f:4a:
c6:5c:e3:d7:d7:36:74:bf:40:c6:ce:47:ca:53:e8:30:11:d2:
17:cd:2e:27:85:e2:a1:2e:23:b0:d2:28:12:a2:b0:ed:31:74:
27:ab:be:dc:a1:aa:e6:07:68:8a:1d:b8:68:4c:b4:60:81:7f:
d5:17:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:41 2026 by rpki-client