Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: lP6yOOmlB9ojtu7ni2l863HhDq+UX75JU+HQYR2+pbk=
Subject key identifier: 58:D0:60:9E:45:54:B6:0A:CF:5E:D0:B1:9F:C1:BD:8F:CB:A2:92:11
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019DA48AA6C00AA81D7C584A0455790E5719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 03C6
Signing time: Sun 19 Apr 2026 07:00:43 +0000
Manifest this update: Sun 19 Apr 2026 07:00:43 +0000
Manifest next update: Mon 20 Apr 2026 07:00:43 +0000
Files and hashes: 1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: 2P6AJFFszM82+YgOU/4w6OQ7Rmuk9sVtZPZWtz90hek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:a6:c0:0a:a8:1d:7c:58:4a:04:55:79:0e:57:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Apr 19 07:00:43 2026 GMT
Not After : Apr 20 07:00:43 2026 GMT
Subject: CN=58d0609e4554b60acf5ed0b19fc1bd8fcba29211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:60:47:71:84:6e:15:07:f4:7b:b3:5c:ce:
d1:fb:63:04:64:0b:13:b1:12:ce:ce:df:43:dc:6f:
6a:d8:a8:4c:b2:5c:7b:79:7c:6d:fa:de:05:eb:16:
60:fc:df:f7:94:43:a4:d5:d2:ed:b0:c1:93:c4:26:
b5:a3:3c:4e:7e:91:e0:3f:12:37:05:fc:5d:6b:99:
26:c3:ee:ef:aa:e7:bf:02:45:fc:1c:7e:98:42:8a:
60:91:b9:ab:b5:0b:29:13:2f:43:79:ba:78:86:4a:
05:59:76:6f:66:63:fe:19:5d:41:37:f0:e7:0b:c8:
b0:f5:49:56:34:85:6d:6e:de:2b:c6:2d:99:3b:a6:
47:98:99:11:89:81:6c:83:54:1a:34:a6:a0:a4:67:
9a:6a:16:b1:e0:07:2c:4d:06:59:89:cd:41:aa:33:
17:4d:34:82:77:8f:5d:2e:9d:b1:9e:c9:e5:05:22:
2e:0a:9e:14:e4:ef:87:ed:b5:a7:f8:29:c7:27:9e:
6e:39:e0:5e:80:d2:61:ff:c1:e5:8b:80:1f:82:68:
64:50:4a:05:1a:6f:df:f8:fc:b2:a2:8c:71:f9:04:
f5:ac:a0:3c:4b:d5:3d:dd:6e:9c:1a:ad:d2:0f:8c:
41:0f:72:9b:35:e2:ea:1a:b9:ce:42:aa:00:32:48:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:60:9E:45:54:B6:0A:CF:5E:D0:B1:9F:C1:BD:8F:CB:A2:92:11
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d5:31:99:5e:6c:cf:6c:a3:87:b8:97:6f:21:24:a2:b4:9c:
4f:c5:cf:63:40:68:51:e3:89:6a:43:c9:8b:b6:18:6d:d9:a1:
45:d8:5f:b2:29:6d:e5:3b:96:6f:ac:6d:c8:65:8e:62:88:1f:
01:77:db:a6:be:42:7f:6d:c8:10:aa:3f:b1:e4:b3:93:63:d1:
c0:c1:f9:b6:f6:a8:09:20:67:9f:81:7a:f4:8b:68:ba:66:09:
7a:ce:d0:28:12:34:0a:b5:22:b8:f4:e7:3c:8e:f3:21:f2:d3:
5a:0a:6e:71:96:69:0d:02:69:8c:f9:8c:0e:ff:46:47:09:a7:
81:4a:b0:44:73:90:47:03:a7:ea:f7:e9:b0:40:6c:31:97:42:
d3:67:82:c0:57:81:a9:4f:6f:bb:d1:ae:3c:f0:1f:c9:2c:99:
61:c0:3a:43:d7:83:90:08:2f:46:58:4e:6a:62:b1:9c:1b:fb:
88:0d:be:11:31:f2:bc:6b:cc:b7:6b:d4:69:4e:ff:85:cd:64:
4e:1d:ea:ef:5f:de:d2:9f:60:83:3b:8d:46:ef:d1:27:55:50:
37:55:fe:bb:a2:42:c4:c4:a6:2c:58:62:02:e6:b5:fa:72:f9:
c7:97:85:0f:81:05:0b:5a:16:9a:2f:45:1b:89:7f:d5:29:49:
39:84:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:47 2026 by rpki-client