Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: RdXEmZfqIRIORszZfzWEZWoY/jw3gWNWbuIhzy2c2n4=
Subject key identifier: 4C:5C:D9:95:FC:FA:06:20:14:6A:1E:FB:18:CF:B0:B0:1D:18:65:FB
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019D9BF50EAAF53C1B9452C55F3753FC79EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 0491
Signing time: Fri 17 Apr 2026 15:00:21 +0000
Manifest this update: Fri 17 Apr 2026 15:00:21 +0000
Manifest next update: Sat 18 Apr 2026 15:00:21 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: MEzE1TyFI5kkvNe39wyzhC4Pt+sLGPE3isF4HfpZkNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:0e:aa:f5:3c:1b:94:52:c5:5f:37:53:fc:79:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Apr 17 15:00:21 2026 GMT
Not After : Apr 18 15:00:21 2026 GMT
Subject: CN=4c5cd995fcfa0620146a1efb18cfb0b01d1865fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:d0:08:60:dc:b2:49:a9:0f:f9:12:6c:25:
7c:d0:cd:4b:a4:1c:8e:5e:e4:f6:34:a5:21:24:fe:
56:96:18:e4:07:10:21:07:2a:94:49:98:03:2c:c3:
ed:26:cc:b9:83:5a:3a:b5:31:eb:88:4b:2d:99:93:
19:b6:47:f6:3b:e4:2b:9a:c9:1e:cd:8d:30:24:19:
66:8a:9e:da:a9:11:e6:a2:14:06:5d:2c:d4:5f:d8:
bc:3d:4b:a6:dc:77:90:6c:9d:d3:93:23:26:1f:57:
65:d6:4f:38:0d:c7:78:e9:f3:dc:53:1c:fe:9d:12:
3f:64:6c:3b:58:5d:9a:7e:e9:7f:83:3a:5a:7e:9e:
67:79:ae:a0:a4:4f:39:92:f3:c1:3f:71:da:6f:c5:
00:05:b6:d2:65:4e:d3:a3:9f:a8:4f:86:7c:d4:79:
b2:16:6d:73:aa:22:9a:5e:e7:6b:d0:39:a3:8b:b7:
a6:1b:6c:e7:4a:64:e9:8e:85:df:71:d9:2c:d6:47:
ea:f0:2b:60:29:88:cd:ae:bb:02:e8:0c:75:c6:e4:
79:c1:60:5a:33:c8:50:c1:bc:73:c3:2b:70:c1:10:
4a:92:33:ab:82:07:41:ff:d5:e9:d5:b8:3e:1c:cc:
16:75:89:66:f0:e4:e0:17:5a:07:3b:b7:f0:5c:6d:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5C:D9:95:FC:FA:06:20:14:6A:1E:FB:18:CF:B0:B0:1D:18:65:FB
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cc:a3:bb:47:84:f5:86:b3:2e:2a:39:96:c0:6e:3a:a9:2f:
f1:ce:0b:6b:33:1a:2a:6c:51:89:c8:84:6e:5d:f6:93:5c:5f:
17:40:17:93:0f:fe:ff:0f:2a:68:52:0e:24:16:66:ea:bf:02:
52:47:5a:cf:02:9e:e8:02:f7:22:9a:73:14:a4:ff:8e:93:07:
35:af:c0:06:d4:0b:09:40:a9:ce:36:e5:6b:76:93:1f:f6:b4:
e2:0e:7f:7c:da:9c:47:81:65:65:e5:87:6d:7e:12:e6:de:e0:
03:01:58:50:93:92:01:cf:30:84:39:16:55:41:55:a6:c6:7a:
86:2b:36:9e:18:22:9d:98:13:f9:9d:82:50:f8:f7:fe:cd:02:
01:71:75:21:dc:96:a8:8a:d1:07:b4:08:64:4a:da:5b:82:6f:
27:b1:0f:64:c7:27:39:f9:3c:61:2d:78:d8:17:89:17:5f:ec:
11:1e:96:dd:b6:17:cd:71:e9:85:45:0b:16:b5:4f:f9:a0:e2:
c2:ca:05:e4:06:28:9f:2c:61:be:f1:a8:f6:4c:0c:49:b3:2c:
0b:d0:56:2d:80:97:33:2d:5d:00:dd:60:8b:3b:79:5a:55:51:
12:b9:41:40:7b:de:e3:ad:d7:8a:41:67:e6:0e:f6:81:7c:b1:
12:4c:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:12 2026 by rpki-client