Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: NsTlU4WFxqpKsrbt6iF34DkpTy2nK0xkgk7XaGcHe+4=
Subject key identifier: C3:B5:DF:D1:77:B1:03:32:9F:7E:E6:6D:55:99:C3:F3:17:04:36:DD
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019D98BD7CB9C0B5F0DFE63630D15809BD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 00:00:48 +0000
Manifest this update: Fri 17 Apr 2026 00:00:48 +0000
Manifest next update: Sat 18 Apr 2026 00:00:48 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: MQy1AXLjpCht8LfTjF3z9Ao+nEbSGSMYUDDkNxpgz0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:7c:b9:c0:b5:f0:df:e6:36:30:d1:58:09:bd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Apr 17 00:00:48 2026 GMT
Not After : Apr 18 00:00:48 2026 GMT
Subject: CN=c3b5dfd177b103329f7ee66d5599c3f3170436dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:da:c3:cb:f6:cd:37:7c:6e:a3:dd:7b:c6:
32:ae:97:93:d4:18:46:c2:84:d4:e3:ce:76:2d:66:
c2:c1:f4:23:c2:70:c3:00:71:0f:39:37:ef:b9:27:
77:83:7a:69:59:97:78:9a:b6:8f:bb:1a:cc:f1:18:
fd:d1:68:a4:6b:21:fe:39:d8:83:e0:6e:08:7f:3a:
30:35:91:48:c6:ef:ce:5e:2d:46:e6:2e:c1:6b:9b:
03:bb:fd:fa:da:01:a1:ba:2d:b3:8c:ac:3f:63:fe:
a5:f8:c4:d3:f6:f9:e5:b7:a5:ac:71:39:34:33:cb:
19:f2:54:12:f4:09:f4:95:1d:b2:91:77:64:32:22:
4d:69:ef:a6:15:59:1a:41:f4:c3:4e:05:ea:ff:92:
1f:8f:ea:0c:b6:28:2f:2c:d9:7e:ad:7d:a2:9a:fb:
f3:66:91:44:04:02:28:92:2a:90:b7:d8:36:9c:f7:
15:87:13:86:90:45:d6:6d:71:ff:56:5b:1d:d8:c1:
be:0d:2d:01:27:21:b5:cf:04:15:2b:12:85:be:58:
5b:03:d9:09:68:f0:51:b2:63:10:be:94:09:43:55:
7f:4f:53:6f:55:3d:b6:ec:3f:ff:a8:4a:c1:bb:d2:
c6:08:42:b1:33:b7:34:ce:11:67:02:29:66:48:29:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:DF:D1:77:B1:03:32:9F:7E:E6:6D:55:99:C3:F3:17:04:36:DD
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:2e:7e:e6:57:41:56:6d:e7:41:50:7c:30:79:50:f8:aa:26:
57:25:06:27:f6:80:9a:4c:ab:d1:b5:f7:5e:3f:f2:45:e3:87:
c6:0b:ae:b1:70:73:50:26:e2:b5:47:d7:1e:b7:50:75:7c:2d:
4e:51:66:17:b1:32:6e:12:17:3a:d4:0b:66:8f:2a:f3:48:20:
b2:0e:98:c2:84:c6:6d:eb:75:4a:c8:c8:ed:dc:12:bd:b2:aa:
09:73:2a:5d:69:be:d1:74:ef:ca:7e:4a:dc:b9:2f:e7:7d:74:
4f:b2:51:52:59:e2:c0:51:38:03:54:de:20:f6:ec:e8:81:56:
ee:a6:1b:57:09:6f:00:3f:ca:87:20:61:e0:c2:c2:8c:db:92:
f0:2d:28:b4:52:a8:c0:f0:6d:29:e5:d3:bb:e7:85:99:8c:73:
e9:30:90:5d:5f:44:3f:2d:c9:5a:32:59:d4:ce:a4:15:24:e4:
81:c7:20:71:98:f3:31:07:d7:1c:67:1a:98:16:72:f3:3a:4c:
73:a7:10:ba:6e:bc:b1:d2:65:68:11:2a:65:88:e5:25:39:a2:
f0:40:ee:ba:b1:5a:fc:5e:6a:99:51:99:a5:c2:f8:74:88:79:
63:84:81:30:4c:3b:18:41:6c:27:57:c3:9a:08:25:d6:bd:18:
08:28:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:03 2026 by rpki-client