Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: dFefPrzkpus5B589r0wT6uvAJ3SMf3TUpBdqpz36nRg=
Subject key identifier: DD:A9:A5:00:B6:9D:89:9B:DF:36:6E:21:DD:36:6B:73:63:9F:11:86
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019D9AE313845E7A51EB540E779879FC80CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 93
Signing time: Fri 17 Apr 2026 10:01:05 +0000
Manifest this update: Fri 17 Apr 2026 10:01:05 +0000
Manifest next update: Sat 18 Apr 2026 10:01:05 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: hw82FKpr2abaonx3B9zxdy0doAjeqCHPf9tbHPp1DzQ=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:13:84:5e:7a:51:eb:54:0e:77:98:79:fc:80:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Apr 17 10:01:05 2026 GMT
Not After : Apr 18 10:01:05 2026 GMT
Subject: CN=dda9a500b69d899bdf366e21dd366b73639f1186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:59:8f:21:38:b1:c3:f8:1a:77:1e:5d:db:
2a:dc:0c:79:76:2c:0e:91:34:2b:08:e5:53:b8:10:
12:69:da:c2:0c:fe:59:b1:a2:a4:d4:46:a2:5a:29:
cb:77:f9:a6:17:77:7b:e7:19:b4:75:b5:65:98:67:
2f:a2:6b:51:5c:1f:b7:37:22:1e:dd:cf:93:c8:fa:
f6:12:cc:73:59:39:54:a7:6a:72:6b:cc:96:07:7c:
b5:8b:e2:6b:83:ff:34:02:d2:fa:30:8f:e2:a9:08:
ed:10:0e:00:c7:f5:78:de:52:5f:4c:2c:9b:db:b3:
81:a1:4a:b9:11:69:9a:17:34:c1:93:5c:88:a5:ce:
ac:a3:ef:d2:25:33:95:2e:07:09:5c:a8:c1:2e:0d:
21:a6:d0:62:49:f0:95:a0:cb:f3:72:c4:7f:7b:df:
df:b7:ec:14:29:4f:2a:24:cc:00:d3:2c:0c:05:7e:
e5:3e:a7:6a:6e:73:7e:f9:16:6d:6e:99:ec:e6:8a:
4f:b2:36:d6:1e:b0:fe:b3:44:01:80:2f:9b:02:9c:
a2:8f:6c:16:de:97:17:7d:56:c4:35:40:37:84:43:
b7:6e:82:0c:4f:31:0b:71:14:b6:5c:34:b0:b6:9a:
46:49:f0:5a:78:38:fd:07:a9:2f:51:57:7d:54:a9:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A9:A5:00:B6:9D:89:9B:DF:36:6E:21:DD:36:6B:73:63:9F:11:86
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:63:c5:09:28:aa:29:77:cd:b8:b9:74:be:68:a7:18:4e:de:
5f:88:44:dc:83:61:7a:2c:9d:f0:86:f5:a9:40:5f:2d:f2:07:
3b:c4:ed:44:de:9d:1a:53:79:87:2b:62:50:1c:5d:ed:53:b3:
92:4e:13:4f:b3:ed:a9:b9:f6:a0:3f:fb:7a:a4:d9:06:8b:02:
ea:3f:a5:2a:0b:a1:73:9c:5e:4d:67:09:32:e5:49:eb:00:8b:
71:8b:96:94:56:d6:38:fd:eb:f2:56:9d:88:ee:14:d1:b3:eb:
d4:45:2c:99:e8:6e:d9:c8:80:77:90:b0:d2:17:a4:47:88:94:
ab:b4:58:80:62:67:e7:7b:ab:ef:f1:cb:28:1f:99:28:23:31:
00:25:b4:b1:60:91:49:6e:f6:b9:5d:37:d3:8d:be:78:36:08:
0a:7f:7d:21:a9:65:0e:eb:8d:bb:ab:37:d5:97:ce:f7:7e:d1:
d2:80:0c:88:33:fe:f3:c1:ee:89:e5:b1:c1:5f:57:8f:fa:cd:
8e:85:55:e5:0a:d2:a6:34:a4:7b:0c:e0:ad:81:9d:c6:1a:f1:
d2:b0:03:e7:95:12:d9:42:28:bb:82:dd:3a:f3:73:16:6e:f8:
66:44:b7:67:eb:af:f2:5e:c4:4c:f9:c9:6c:16:7b:15:81:19:
a7:4f:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:47:34 2026 by rpki-client