Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier: drD2qrj8beRvd+Blrw7zDa0G7T4DV5AY6SOejoOB9kQ=
Subject key identifier: 86:EF:92:BF:85:BE:98:7F:3F:C7:A6:F0:29:2C:D0:8E:B0:40:05:D0
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 019D9D3F65D367BA8916318370CE9674844D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number: 0434
Signing time: Fri 17 Apr 2026 21:01:10 +0000
Manifest this update: Fri 17 Apr 2026 21:01:10 +0000
Manifest next update: Sat 18 Apr 2026 21:01:10 +0000
Files and hashes: 1: SMN2TicHTITFE7SoU6JvilZobIM.roa (hash: Jgb+gxe0VdXUottoUDRHcVAZQNKtB28hNd2imzpc8AQ=)
2: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: jy8NkOqTnowte5R1TLzXwKFcDNwrPdb1zFF9Tki8oVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:65:d3:67:ba:89:16:31:83:70:ce:96:74:84:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: Apr 17 21:01:10 2026 GMT
Not After : Apr 18 21:01:10 2026 GMT
Subject: CN=86ef92bf85be987f3fc7a6f0292cd08eb04005d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:46:c6:79:35:02:8c:71:7b:65:cd:98:00:
f5:10:dc:8b:2f:cc:15:8b:f5:6f:c9:18:6b:e8:92:
c4:d7:79:66:19:92:c8:61:b4:51:09:06:38:96:13:
57:3c:3f:9c:e1:e9:88:47:43:d1:6b:92:b5:d9:97:
43:a4:97:a9:a6:43:7c:6b:ae:9e:98:e6:50:25:7b:
e9:04:5c:de:70:cc:7b:db:a4:d2:c9:50:f6:ba:26:
e4:6f:a2:78:05:63:fc:00:5c:87:8f:60:92:32:be:
4c:6f:32:9a:46:26:91:57:69:a3:60:e7:68:07:00:
ea:8f:6d:3e:d2:3e:16:42:a6:e6:ee:08:46:5c:21:
13:36:8f:d3:7c:eb:f5:dd:d6:65:ad:63:e6:d3:c4:
c4:38:d9:3e:bc:6e:38:79:a3:3d:5c:02:33:c2:0d:
e3:9b:6f:f9:d8:09:9e:93:78:91:82:57:21:a5:0b:
0a:ae:15:9a:d9:78:ec:df:4b:aa:00:92:de:45:e0:
31:8f:2e:4d:9c:71:af:09:10:c9:de:11:ca:f1:5e:
85:cc:6a:02:d8:f7:aa:1d:21:d3:84:e1:0d:bd:dd:
93:ae:61:15:5c:5c:9c:5b:59:f6:d1:b0:ed:5f:89:
69:19:58:01:66:0d:d9:01:f9:0d:54:42:4e:dd:a5:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:92:BF:85:BE:98:7F:3F:C7:A6:F0:29:2C:D0:8E:B0:40:05:D0
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a5:98:7d:d3:1b:86:1e:8e:c5:c9:06:2a:3b:b7:01:47:cb:
21:c0:fa:1c:50:63:3e:e8:4c:56:9f:d2:18:46:53:b2:58:47:
6c:bb:62:cf:1f:60:34:fa:d8:4d:b2:cc:82:00:0f:9f:d4:ca:
5e:dd:31:6a:50:66:c8:29:70:8a:b5:2e:c0:5d:b2:eb:19:12:
59:57:ec:2e:5e:80:47:3a:b6:9d:85:72:69:f2:f5:71:23:ef:
a3:28:4b:d3:d2:a4:84:7d:c5:d1:68:49:68:87:f8:93:74:e6:
68:33:bc:ca:d9:c0:7c:61:bd:14:7f:39:b5:a8:3b:49:bb:82:
33:1e:34:2f:ee:4c:38:25:7c:b2:2b:da:f7:63:ad:61:39:4d:
58:2c:4e:b6:c2:e3:cd:40:d0:d0:92:b4:fb:49:c4:c7:a2:f2:
4f:b3:3e:81:9c:5c:28:af:75:84:a9:ab:46:2e:44:a0:62:ad:
de:c5:6d:d9:bc:64:e8:57:70:ef:f9:46:5f:bf:75:37:2b:ec:
e0:a4:96:d8:4b:bf:07:a0:a3:47:70:30:ca:1c:04:70:6a:79:
a7:64:76:ae:cf:3e:07:5d:b3:2e:a5:46:48:7d:04:21:4a:ce:
f8:75:26:30:16:99:f3:b9:fd:73:81:1c:c8:a3:9c:4d:fd:45:
78:a2:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:04 2026 by rpki-client