Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier: hPK7ewm2nrdZ55gIjea4S6YqMrWeWAP8QO8bAGkVd/w=
Subject key identifier: E3:F9:A8:1F:3E:19:97:C8:78:8C:E5:82:5B:21:7B:74:37:1B:E7:CB
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 019D9B87A6BB0913EE49060FA72EF144D008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number: 08AD
Signing time: Fri 17 Apr 2026 13:00:51 +0000
Manifest this update: Fri 17 Apr 2026 13:00:51 +0000
Manifest next update: Sat 18 Apr 2026 13:00:51 +0000
Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: OLLVzTZEnMf1HPlFad2LlVFCLG+1s8wC5EXtVoWicLo=)
2: iDrTmSYQpvy7vo3KT85M4NqZ4jY.roa (hash: +0AgLX/1nLHcInEl5vkO9SuWGWou8jccVXQFvcHqqjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a6:bb:09:13:ee:49:06:0f:a7:2e:f1:44:d0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Apr 17 13:00:51 2026 GMT
Not After : Apr 18 13:00:51 2026 GMT
Subject: CN=e3f9a81f3e1997c8788ce5825b217b74371be7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:60:d4:5b:80:e0:29:15:95:71:47:77:b2:
56:f4:24:74:02:ad:fd:7b:be:5d:a9:82:96:1d:58:
d4:5a:8b:27:9d:05:c1:5b:17:77:1d:22:a0:2a:75:
e8:8b:f3:2e:23:8e:97:51:c0:e3:2b:9e:0c:62:39:
96:55:80:a9:6c:98:c5:78:2f:20:e0:0b:5b:11:f3:
2b:a6:a0:50:1f:21:28:ff:01:ac:b1:1d:74:b4:82:
3c:7c:1e:66:de:c4:87:ef:5d:d9:4e:65:87:e5:77:
4b:41:d3:db:b1:36:18:d8:8f:6d:95:6c:74:6e:73:
2b:c3:88:4e:8f:5f:59:15:82:03:21:a9:c0:78:2b:
9d:fe:c1:e5:8f:4d:40:e8:1c:3f:43:5e:f2:bd:72:
eb:51:22:7f:9b:57:7b:04:d2:ee:a6:58:90:43:0d:
96:3e:a6:db:fa:23:eb:ba:b0:9f:56:96:b7:6f:1b:
f2:11:29:cc:c8:1f:ad:91:60:73:ea:15:da:ff:d4:
97:e3:30:7b:df:e3:ad:7b:fb:1c:78:b7:a3:8d:39:
11:35:d3:39:03:68:3f:d9:57:1b:92:1d:26:e2:f9:
0b:65:4b:41:03:c8:60:51:ad:62:5d:06:85:02:ba:
a0:ec:68:a5:91:14:5c:3b:28:a9:ad:98:45:0c:9f:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F9:A8:1F:3E:19:97:C8:78:8C:E5:82:5B:21:7B:74:37:1B:E7:CB
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f3:09:cd:2e:cc:06:33:49:ed:f1:43:25:43:dd:74:30:f2:
30:d5:33:cc:25:71:17:c9:9b:62:5b:89:94:eb:69:6d:73:c3:
a9:14:fd:96:68:17:53:87:d5:c8:d6:ec:12:84:36:53:1e:82:
c9:83:f4:c8:b5:e7:8f:00:5b:c2:98:9d:ba:97:15:5c:75:02:
cc:de:df:0a:9e:9e:df:c4:8c:59:3b:75:5c:3c:de:1d:30:e7:
5a:cc:f1:7f:c8:30:cd:82:28:f2:3e:c8:70:36:2d:40:af:60:
0e:a3:ba:ab:d4:ca:11:1b:23:3a:03:e1:78:29:49:ca:b5:bf:
80:ec:e8:ca:60:28:12:0a:63:4a:8d:24:1b:4a:66:a7:37:ab:
d0:0c:d6:a6:ec:e7:db:e9:a1:28:55:a0:b2:dc:cd:af:ef:a9:
9a:9d:94:94:a8:2f:ff:e0:2d:d0:d3:7f:23:df:95:08:9e:eb:
55:b7:dd:32:2d:3e:67:11:bc:2c:ef:16:36:de:dd:56:fc:21:
3c:a2:d5:da:51:f0:9b:fa:7e:ce:c2:0b:32:5c:6c:35:1c:8e:
69:01:66:3a:51:0e:97:c4:a9:82:ac:04:b6:c4:e5:e2:f8:54:
41:e3:e3:af:d7:39:1c:d8:33:f6:19:61:8f:59:a5:0b:a3:18:
43:7b:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:52 2026 by rpki-client