Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: N6lfFMeoCfife1+PxTvmI7f7gvvIYCBBufuEUiZCZls=
Subject key identifier: F6:43:FC:B5:03:79:61:73:AF:FF:4B:5B:91:04:E8:8A:81:7B:7F:3A
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019DA30A070D37CA48AAF646B807A3799144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0D19
Signing time: Sun 19 Apr 2026 00:00:36 +0000
Manifest this update: Sun 19 Apr 2026 00:00:36 +0000
Manifest next update: Mon 20 Apr 2026 00:00:36 +0000
Files and hashes: 1: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: Cu57/yyklNW+/jUQgyXQS89tHby7GHz5R0BdoAV3vVw=)
2: s48bE7zPFBsdxI3PwTkDcvxFl10.roa (hash: LCQZLSRk+w6NsXbM56XYTWWTkMECSvsvXOz9oSXfsiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:07:0d:37:ca:48:aa:f6:46:b8:07:a3:79:91:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Apr 19 00:00:36 2026 GMT
Not After : Apr 20 00:00:36 2026 GMT
Subject: CN=f643fcb503796173afff4b5b9104e88a817b7f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:03:a4:36:1e:d7:dd:6e:3f:7c:24:51:9e:
dc:28:fa:c1:92:60:bb:2e:eb:6c:56:ae:80:5e:00:
52:17:05:7c:f9:a5:37:47:e3:06:c0:66:f3:49:90:
cb:aa:f0:b6:a1:cf:5b:1d:a3:89:80:8e:0c:60:7b:
e8:04:09:41:4a:c1:b6:4c:b8:e0:60:77:2a:29:eb:
d6:cb:dd:4b:db:15:fb:a9:c4:f2:ac:8f:a4:d0:4e:
d7:fe:57:8f:54:8d:3f:2b:19:51:30:87:6a:c7:7b:
5d:b6:70:1d:9a:3d:45:b4:7c:5e:aa:76:1e:90:bc:
68:90:0f:71:7a:d1:74:d2:43:71:a9:2a:32:57:4e:
31:50:a1:a7:61:2c:22:19:f3:da:49:b6:66:72:af:
5f:30:ea:2d:bf:9d:6a:cc:65:09:f1:04:87:ce:55:
94:8f:44:6f:84:55:22:e0:ad:96:bc:22:88:ac:af:
92:a5:61:c8:49:5a:af:0a:07:07:92:76:74:84:6a:
db:5c:76:51:f4:0a:b9:b9:d9:98:50:b9:29:c0:84:
b5:66:c2:90:b1:30:0b:bf:11:fb:4a:34:2b:61:e8:
f8:08:a4:f7:88:00:7d:64:59:b4:4b:b8:fd:0b:4e:
a9:e4:ee:2c:eb:ef:82:a8:c4:e1:d8:d5:0f:72:b4:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:43:FC:B5:03:79:61:73:AF:FF:4B:5B:91:04:E8:8A:81:7B:7F:3A
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5b:31:92:74:db:83:44:ae:26:f4:c8:15:e0:7c:6a:af:c7:
c7:71:be:70:22:45:5a:89:cd:71:00:66:c5:f5:79:dc:c1:1e:
1e:f3:f8:da:d4:d6:a0:83:0d:c9:3a:9f:91:da:39:31:29:99:
b4:06:e8:4f:b2:f0:6b:5e:e5:da:c5:13:27:3c:87:3f:f1:97:
e8:4a:15:e4:6c:25:7d:07:6e:cf:72:fd:db:d0:46:cd:15:aa:
fb:bc:d2:33:30:ac:15:04:3c:1e:c4:3b:57:f3:8a:03:e3:3e:
99:a0:80:b8:4e:b7:10:eb:14:98:cd:9f:78:3a:05:ea:20:43:
2c:97:5a:4d:42:f5:94:9a:23:86:30:5b:60:b7:ef:c3:bc:f8:
77:23:d0:3c:23:30:4f:45:51:4c:2e:1b:ac:66:f4:95:1b:03:
de:1e:e7:f7:94:b4:f8:88:2e:95:a2:c2:db:d1:9c:01:37:8d:
f7:fb:12:04:7c:3e:ba:94:90:25:5a:f4:85:ed:82:88:19:4c:
f6:b9:ee:fd:bf:de:2b:dd:f6:fc:05:59:84:aa:6a:19:84:a3:
fe:ee:3c:79:6e:0e:03:5c:6a:49:5f:23:ea:4c:f7:33:7c:f2:
bb:aa:74:d6:36:a5:5b:2c:32:d9:bd:2a:77:5b:58:00:12:fe:
88:36:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:59 2026 by rpki-client