Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: Zta+UXnFT2PZfK/nU6zuIurIsqKEBUc222oM30mh8Bg=
Subject key identifier: 19:67:69:90:9F:5E:66:65:38:12:74:E8:83:AD:D1:FD:26:7E:FA:98
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019D9A74B64F25F304E58469321D1DE72941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 15D3
Signing time: Fri 17 Apr 2026 08:00:33 +0000
Manifest this update: Fri 17 Apr 2026 08:00:33 +0000
Manifest next update: Sat 18 Apr 2026 08:00:33 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: LBCVI86TcHjmDq6kwB+rBYPAq1Upgdhe+uYPKim94tc=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b6:4f:25:f3:04:e5:84:69:32:1d:1d:e7:29:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Apr 17 08:00:33 2026 GMT
Not After : Apr 18 08:00:33 2026 GMT
Subject: CN=196769909f5e6665381274e883add1fd267efa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:d9:32:fd:68:51:08:f6:cd:00:e4:34:93:
e2:4b:de:c7:7c:5e:bc:4b:9b:60:f0:f8:3f:e9:92:
8c:cd:91:14:33:36:f4:76:72:d8:fd:6e:96:81:96:
79:c5:99:da:e8:fe:fc:52:b3:a8:97:39:38:15:74:
58:4e:8f:19:38:2e:81:fd:1c:c0:f5:96:d0:e8:22:
7c:c1:c5:f7:fa:76:29:94:83:cd:9e:7b:0c:b3:d5:
99:9b:8a:99:de:bd:d7:b9:01:8c:f3:03:0e:47:80:
f0:ec:b3:77:ab:00:87:22:80:d8:19:da:25:14:91:
a2:42:8f:75:a1:87:c0:f5:d8:85:33:d9:20:19:34:
bb:eb:41:24:fd:8e:d7:2b:4c:4d:ad:ea:b5:e4:39:
22:e6:8c:07:fa:f1:e5:88:dd:60:24:86:46:e9:4e:
a8:f0:2b:a0:18:38:bb:e6:69:ca:b9:b0:95:47:77:
2f:dc:2d:16:30:50:83:73:5c:a7:2d:89:ab:0e:f5:
63:18:3e:d8:e5:0f:4d:7d:62:80:5d:58:84:e0:d4:
0d:5c:02:97:6b:65:45:0e:6f:4f:8f:6d:1e:c0:ad:
af:ca:6d:3c:1a:2a:81:e2:11:c5:a8:0c:a1:ec:af:
79:de:4e:d3:ec:16:a2:65:8c:bf:d5:71:63:48:cd:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:69:90:9F:5E:66:65:38:12:74:E8:83:AD:D1:FD:26:7E:FA:98
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:13:e8:94:ec:f8:2f:8e:9e:2e:2a:c2:65:5d:97:c9:37:6c:
5f:e6:c6:8d:3a:e1:90:46:86:1d:c1:90:fa:30:e1:cb:98:f4:
10:a9:6a:d7:9c:23:ce:cd:69:a1:8a:fb:f1:dc:15:16:18:92:
97:cb:b6:ec:a2:a1:d3:2b:f9:24:c0:da:3a:61:34:63:02:f2:
ac:04:af:e2:af:de:78:a1:db:75:13:61:02:db:a8:5d:e5:fe:
fc:d8:4e:be:81:35:0a:12:a9:99:57:d1:8f:40:cf:e2:d0:04:
b4:bc:26:0e:98:21:82:b3:f0:fa:f1:bd:11:35:2e:a5:f8:fe:
ad:d5:5e:ff:9d:05:fd:72:6d:44:ad:5d:9f:37:48:39:85:d9:
11:22:1a:0b:b3:90:3f:e7:d9:1d:5c:de:99:fc:b6:64:67:ca:
83:a1:c8:3d:56:cd:8a:db:e1:e9:71:e1:da:57:3f:5e:9c:63:
16:df:99:be:02:9e:10:6e:39:14:15:79:d2:78:65:a3:71:6e:
f0:ac:7c:4c:3a:e0:9c:4d:68:f8:9f:ae:4b:9c:07:df:ee:b2:
f8:d3:ec:a5:ef:cb:dc:e7:f8:f9:93:b4:e6:88:b8:ba:d0:77:
10:50:30:45:eb:d0:f9:c1:ad:8b:68:78:b4:27:67:7e:83:98:
fd:09:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:03 2026 by rpki-client