Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: 9JKkTwMHDai2pLxlm+HIvfA8nMvGDQ83/fdQ5LGVco0=
Subject key identifier: 2F:5A:C3:E1:E3:55:74:5E:4B:B2:DF:1C:E8:5E:9D:31:00:2F:CB:1C
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019D98F513A46EC87D4895B0EFC5E7E8C621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Sat 18 Apr 2026 01:01:31 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: QiuDIuRkSViN_0aiLux397WPPaM.roa (hash: 0ZwM9X61p4unEOmNfSSTesI8zR2qkfQh2THCBqFCSqM=)
3: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: FmD703sKx85I8rY827XRElsLhvbPLInGYTlZmx5fJcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:13:a4:6e:c8:7d:48:95:b0:ef:c5:e7:e8:c6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 18 01:01:31 2026 GMT
Subject: CN=2f5ac3e1e355745e4bb2df1ce85e9d31002fcb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:41:73:ab:b2:2b:0d:c7:3b:54:b1:e3:ac:
64:94:0a:c6:fe:63:d7:b8:75:ae:5a:9a:48:de:c6:
e0:fb:0e:1e:b1:f2:62:37:9e:65:c8:60:cc:b0:21:
2a:18:5b:d4:ef:29:8d:97:15:0d:97:d9:c5:3b:ee:
9a:a6:2b:e8:a0:b9:66:36:ca:bf:e4:1d:5e:23:59:
52:0d:d9:5f:1b:11:39:b4:9b:47:ef:f8:44:6c:ba:
13:59:38:0e:85:fd:42:e9:44:6f:93:a4:f6:0c:c4:
12:42:54:77:34:c8:48:76:ef:60:63:31:74:75:ea:
15:95:c3:e6:0c:ab:fe:23:32:96:90:54:78:17:a5:
01:5e:45:e6:f7:da:8d:38:48:b1:53:8b:b0:ef:59:
87:f1:2d:e4:3f:22:17:1d:51:e1:5c:6d:ca:20:50:
95:93:d5:fb:75:74:ba:e6:ad:5d:ff:49:2a:6b:9f:
f8:0b:57:ba:52:3e:74:e3:16:53:f6:5f:ff:90:6c:
17:4f:b7:60:ed:fd:c4:a8:c1:7b:82:1b:e6:d8:7d:
f7:e2:d1:9e:dc:d8:07:d7:01:2a:1f:cf:05:76:b7:
c2:92:cf:3d:c6:4c:07:10:f1:57:01:c9:84:02:f9:
4c:36:f7:64:3f:86:a2:d0:3c:33:6a:93:31:d7:0f:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5A:C3:E1:E3:55:74:5E:4B:B2:DF:1C:E8:5E:9D:31:00:2F:CB:1C
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c7:53:39:5a:1c:04:d1:34:3a:d5:b8:24:e7:0c:54:95:ff:
94:11:24:ea:57:e8:c2:0b:3a:54:56:c4:b0:82:d3:9a:86:bf:
b9:52:f1:5d:03:d8:34:99:e5:98:6b:1c:cc:d9:2a:32:55:56:
1b:d9:66:42:23:c8:4b:c7:70:1a:06:fa:96:7d:77:ab:6d:97:
36:88:91:55:2a:b9:e5:7d:6e:24:ab:97:75:16:0a:d4:51:60:
9b:28:2f:b6:65:e9:8f:36:dd:39:89:fd:0a:5a:f8:3e:dc:d6:
8b:77:7d:06:05:5d:2a:6d:84:09:5f:76:ce:73:d3:98:f9:92:
ab:16:66:e2:f3:a3:e3:ab:ae:30:7f:28:a9:79:9e:cd:e9:01:
e9:63:22:0c:b8:26:de:e9:8a:0e:e3:3a:97:39:ae:49:f3:a6:
00:5b:9c:a0:8c:f6:dd:ac:9c:9c:32:03:97:3c:5c:37:9c:a7:
b8:19:29:24:70:b8:58:57:29:c1:de:eb:aa:10:93:a3:42:fc:
cd:af:8b:d6:2b:ca:2f:b3:8b:29:c9:7c:2e:fd:cc:8b:a1:e3:
83:3d:69:99:58:bb:8e:1e:06:16:95:65:cd:6e:6f:1b:29:a5:
e4:7c:3a:62:ea:78:b7:1e:44:17:a5:49:8b:0b:b0:83:6d:12:
c4:15:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:27 2026 by rpki-client