
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier: rAYjUw/SQ3k3Uan4CL9kchd8R22K6Y/Qf4yFrUv7x9s=
Subject key identifier: 5B:67:D3:80:28:08:99:C1:DD:2E:79:93:46:D0:27:DF:73:2A:87:10
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial: 019D992B25BAED4F2E985456F3139F3424EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number: 1081
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: FHIyxMNqXpJ39wGwkA-4nrLvTkc.roa (hash: ly+kVhxO/3fVLln2oSG/sFbuci0ZnP8XN3ql69hgFNU=)
2: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: WwhDlAyrVij/gb2BnV0GXMOSjQMYg1y9h2ucr0xmKcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:25:ba:ed:4f:2e:98:54:56:f3:13:9f:34:24:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=5b67d380280899c1dd2e799346d027df732a8710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:90:90:4a:c8:64:7c:41:48:32:41:08:d4:
65:a3:a8:c4:88:19:88:b0:c5:f6:1f:d2:bc:6a:9d:
04:57:13:9b:53:76:30:e6:d0:2e:bb:f3:bf:47:90:
2a:20:09:16:de:00:59:3a:9b:28:40:0d:fc:33:cc:
ee:dd:c6:8a:a9:a5:3e:b6:95:dd:7e:85:70:62:79:
d9:54:fa:2c:3e:c4:09:90:e5:4e:32:c3:3d:ce:db:
69:4f:a3:96:9f:44:45:90:7e:60:38:5b:6a:1c:10:
42:c0:45:76:f4:28:ca:d2:68:f0:90:9a:35:71:15:
c6:84:84:dd:53:42:a7:13:ef:e5:89:bd:b5:ae:87:
4b:cb:f9:9c:c2:d5:9b:6d:37:4b:3d:b6:de:59:73:
e8:81:c8:8a:c6:17:3a:fd:ec:5f:05:ef:33:22:19:
34:dd:60:9a:40:6f:f3:18:24:f8:fc:f9:86:2b:a0:
bc:d4:f1:e9:48:62:2f:a1:f3:03:6e:f3:e9:ce:f7:
b2:81:9a:09:44:bc:c3:a1:68:a4:54:40:bf:20:ca:
86:6a:9d:69:1a:de:07:f8:5f:fd:d3:64:92:31:3c:
80:d3:8e:32:b9:21:00:04:ef:9c:6f:e8:b4:ea:99:
60:7a:10:4e:1d:08:46:d4:04:f4:e2:95:ca:c3:0e:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:D3:80:28:08:99:C1:DD:2E:79:93:46:D0:27:DF:73:2A:87:10
X509v3 Authority Key Identifier:
keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:53:04:84:d7:b4:64:71:99:be:e3:8e:d6:43:9f:78:80:42:
ab:c5:05:da:6a:2d:61:3e:23:b8:ac:82:95:bc:90:a8:6f:7c:
81:a1:90:e3:5f:f3:5e:c6:68:54:0b:87:84:90:c8:f0:2f:28:
c2:ef:e8:30:3d:47:bb:f4:9e:ba:ea:0c:51:90:a2:28:e7:8f:
ec:c2:a8:be:74:2a:b8:47:7b:05:f7:1b:b2:48:bb:0b:25:70:
b9:ae:e1:3b:80:98:87:3c:1d:52:f9:3c:43:45:bb:bf:2e:e1:
9e:65:45:fe:bb:8b:a0:76:fd:da:59:06:64:3b:b3:19:ed:1f:
3b:d4:ea:b5:07:f8:51:05:ac:1c:51:95:64:d2:6b:5c:85:a3:
83:73:f6:02:43:84:af:1e:b5:96:0f:fa:a0:ba:2e:04:e8:59:
d8:cd:aa:25:6d:1e:3f:8e:52:c5:cd:56:b3:eb:36:fb:d9:e6:
7e:5f:44:dd:c5:c7:14:4d:5a:66:7c:6a:00:54:c9:3a:da:ab:
f9:b6:b6:75:cf:fc:c1:15:cf:0a:9f:d1:e3:b9:10:1a:85:dd:
a4:ec:e1:a9:97:39:64:77:fe:8e:9e:a5:29:ae:63:2b:9e:86:
b4:d1:a4:87:a1:03:05:20:6a:9d:e9:6e:d3:77:81:05:46:71:
46:10:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:33 2026 by rpki-client