Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: IN7XpinpEpzrCm92XDdiNBl7P9D8PHd2L9QirA9SccI=
Subject key identifier: 64:75:8E:E9:B8:49:D5:E3:83:30:71:7A:D4:32:20:20:C6:68:93:5A
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019D996232F4EE6D126B64AD4B7FC3F565F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0B8C
Signing time: Fri 17 Apr 2026 03:00:42 +0000
Manifest this update: Fri 17 Apr 2026 03:00:42 +0000
Manifest next update: Sat 18 Apr 2026 03:00:42 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: 8oXm/FiBucrqBHW8rHQJo1eb5z793G3PHFf2LAxEU1g=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:32:f4:ee:6d:12:6b:64:ad:4b:7f:c3:f5:65:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Apr 17 03:00:42 2026 GMT
Not After : Apr 18 03:00:42 2026 GMT
Subject: CN=64758ee9b849d5e38330717ad4322020c668935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:57:36:8e:b5:66:d1:ee:5f:f3:63:a7:d5:
54:56:40:cb:58:f1:bb:ad:c1:b9:32:61:e9:8d:4f:
58:0f:11:49:94:0b:57:a2:ef:7e:f2:04:5e:d8:68:
d8:40:bf:c8:84:3b:80:ba:68:2c:d0:a2:35:1f:66:
92:90:2f:10:76:ad:22:4b:a4:3b:25:04:18:5b:f5:
bf:9b:f3:e9:e6:66:37:27:c7:4c:ce:d3:e0:62:b8:
25:60:2f:ee:1f:90:39:2d:23:40:92:f3:82:22:cf:
e7:f1:f8:d6:d2:27:62:1b:85:7d:59:78:5b:44:ff:
4d:80:c0:ab:a4:f3:73:9d:12:b1:9b:c4:8f:fb:30:
86:7a:18:d3:b0:ee:da:6c:50:1a:6b:2e:2f:72:50:
b4:2a:1a:0f:5d:de:41:8a:1c:41:bf:2e:e6:00:d5:
0c:44:ae:9b:4c:15:31:1a:f7:cf:13:b8:7f:e6:ca:
ca:db:22:85:50:96:81:dd:ab:a9:7d:8c:8a:6f:a3:
77:41:fa:22:83:33:4d:6d:62:b5:07:93:67:69:9f:
21:3c:2f:30:91:0e:d0:ed:6c:8b:1f:f5:3d:45:56:
59:c7:fd:da:68:e0:85:33:59:1a:d5:1c:20:c9:61:
19:2a:3c:c8:55:fa:a7:b3:a5:dd:d7:01:2e:3a:1c:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:8E:E9:B8:49:D5:E3:83:30:71:7A:D4:32:20:20:C6:68:93:5A
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:62:d8:5f:c7:94:70:48:34:8d:c7:d5:18:c0:bf:ae:24:d9:
3f:2b:e9:7b:66:0b:56:04:51:5f:02:4b:6f:62:4a:9a:df:11:
f2:80:31:3c:c9:d4:d3:ac:0f:75:a9:48:1f:0a:b2:cf:a1:fd:
16:76:e0:88:1c:ca:0d:da:6d:73:d4:58:4f:bc:fc:ee:c3:4a:
a0:f4:e2:eb:0d:a9:fc:79:79:e2:0b:d5:0f:2a:aa:56:b8:a7:
a5:46:20:9b:0b:12:33:da:80:cb:44:4d:0d:cc:a6:64:a4:58:
4e:26:43:8e:da:99:b7:0d:54:f9:33:1a:34:06:b7:88:3a:eb:
b1:d9:e6:26:78:67:fb:a3:6f:d5:ec:30:51:5c:1b:e6:53:86:
6f:18:1e:81:29:e3:e4:26:d2:df:ad:fc:57:22:7a:29:f0:f2:
a2:96:bc:59:6e:28:7f:15:6c:79:b6:dd:a2:7b:70:52:dc:28:
2d:43:2f:3b:4d:7d:f4:1f:24:8b:60:85:1c:80:8e:c2:3c:68:
ed:e1:2d:c8:1b:c3:09:95:85:f5:5e:40:21:95:e0:ed:e9:06:
73:f3:44:aa:f2:b1:0a:2e:6f:6f:7a:32:44:3c:19:07:3c:76:
0c:11:7e:62:26:28:6e:7c:9b:df:8d:da:2e:ec:d3:31:4b:c1:
0a:8c:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:08 2026 by rpki-client