Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: DRu1W82v0CQAb/lP8YtP+/lQKMXpOgJ1F9PRjeWt7R0=
Subject key identifier: 98:CF:28:4D:54:7F:3C:FB:1D:15:28:AB:07:6E:13:58:15:77:6C:BD
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 019D98BD3FFDC41D3C08B467335120E9CA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 1077
Signing time: Fri 17 Apr 2026 00:00:32 +0000
Manifest this update: Fri 17 Apr 2026 00:00:32 +0000
Manifest next update: Sat 18 Apr 2026 00:00:32 +0000
Files and hashes: 1: ub7YR9axa9vWtz1X_qFq5fbsHkk.roa (hash: JE4qOMRm4xEBU/PFIJ8QsUIFvLyYeHz3Zc+xrGXyYyQ=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: FQYDsAjUGxfk0SG5qn70bwlbQQceTGUf05XOt/F+y+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3f:fd:c4:1d:3c:08:b4:67:33:51:20:e9:ca:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Apr 17 00:00:32 2026 GMT
Not After : Apr 18 00:00:32 2026 GMT
Subject: CN=98cf284d547f3cfb1d1528ab076e135815776cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:3b:a9:ed:25:00:c4:33:12:ae:cb:37:bc:
54:41:9b:d7:ad:71:e1:3e:cc:bd:7c:1d:cb:3f:db:
1e:68:21:c8:2b:c2:db:f8:06:6a:a1:90:04:b5:0b:
5c:35:14:1f:d1:e2:12:83:f4:71:91:4f:24:fb:26:
67:90:46:58:27:c1:c2:7d:ed:cb:d9:a6:7c:7f:4f:
c3:8f:0d:97:cf:5a:42:9d:7e:03:b8:88:80:0f:4b:
65:0a:db:19:b9:b9:6c:55:d2:20:a0:4e:13:eb:26:
d3:03:a5:52:f9:8b:2c:ea:b6:9f:db:79:7d:25:cf:
64:ab:c1:5b:32:fb:3e:90:33:f3:b8:42:66:81:62:
64:ac:a4:75:85:3c:78:39:2f:20:95:54:7e:e7:bd:
96:af:e3:e5:86:67:df:af:ef:a8:75:94:be:26:c9:
7b:e9:eb:f9:d4:d7:13:7f:b8:25:e8:be:3b:ea:84:
cc:6c:f1:9e:bc:ff:e5:1c:41:db:5c:c3:c1:69:39:
20:4e:2e:4d:02:a3:c9:ad:a8:16:4f:e0:65:02:7b:
36:13:5a:fc:5c:df:ec:a2:41:1a:62:e8:a7:75:2b:
5a:dd:e8:43:1d:26:be:ca:8b:f5:9d:b1:39:23:e5:
49:ff:b0:8e:c3:3c:b7:6c:fe:45:04:c9:da:49:b6:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:28:4D:54:7F:3C:FB:1D:15:28:AB:07:6E:13:58:15:77:6C:BD
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:41:ab:56:99:fd:f8:17:ff:33:a2:c7:c0:db:a0:1e:a7:f2:
5c:08:4a:ca:3a:8b:0c:b3:a9:06:e0:8e:fd:0d:e8:78:a4:51:
04:fe:02:82:d0:02:ad:78:55:1a:8d:66:50:51:47:e6:ef:58:
ff:96:5b:a9:11:e3:25:19:d1:49:33:4b:ae:34:47:8b:87:3f:
8d:8a:8a:d8:db:e8:57:6e:c3:10:d2:6f:22:78:21:e8:ac:14:
77:06:a9:3e:46:f2:2b:b0:b8:68:e8:c3:16:b2:4d:4c:f3:c7:
ee:42:73:32:94:c6:96:1d:a9:ab:84:7c:f5:73:ea:84:01:3a:
ef:88:bb:e7:09:b9:89:91:9a:74:45:5d:2b:66:fb:b1:8c:2b:
be:91:03:13:2f:1f:d9:55:c0:d7:95:ba:3c:6b:92:fd:ee:0a:
d4:aa:cf:53:71:f6:36:0c:35:88:ef:a2:53:b3:85:36:c9:50:
3f:b9:34:fd:8e:ea:84:d4:90:59:63:11:f4:d8:ec:08:ae:86:
94:60:5f:55:fe:31:46:19:cf:c6:8d:48:17:21:82:cb:59:4a:
80:db:11:7a:35:34:53:e5:f2:42:90:ea:cf:ef:ac:3c:ed:0b:
40:1e:8d:bb:ba:8c:da:84:84:6f:b4:dd:6c:14:81:28:64:58:
4b:92:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:58 2026 by rpki-client