Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: jXW231JY3nstlHn8DI6YF97Kh5vy8Fj2jUbbpmJmz2I=
Subject key identifier: C3:15:00:38:19:5D:B0:4F:97:4D:B8:0E:9D:E3:5D:20:DF:A0:48:1B
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 019D9A3F274BB294D89384E7D107DAAB4599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: 07A2
Signing time: Fri 17 Apr 2026 07:02:03 +0000
Manifest this update: Fri 17 Apr 2026 07:02:03 +0000
Manifest next update: Sat 18 Apr 2026 07:02:03 +0000
Files and hashes: 1: pdjWyCsS6vRt3qgRpmz1-t9Lw4w.roa (hash: iNpMVvC5UiWrjFC/YV4kYZVM+3Z5N79XJuNaeg291pc=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: mw8ihdE2+ZMyj00QHx1VKDq3Ka8PIkaw9aQXJEkc3zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:27:4b:b2:94:d8:93:84:e7:d1:07:da:ab:45:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Apr 17 07:02:03 2026 GMT
Not After : Apr 18 07:02:03 2026 GMT
Subject: CN=c3150038195db04f974db80e9de35d20dfa0481b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:38:73:0c:f5:81:d1:dd:5e:bf:c7:8b:9a:
fe:f0:b3:c9:2b:57:a4:4f:13:7b:1c:51:80:c9:2c:
e6:f0:e6:ff:9f:e2:d1:63:fc:1c:f7:02:0f:b2:cd:
6b:11:e0:e6:61:37:b0:e3:3f:6d:ba:59:bc:d3:7f:
ea:10:3f:fb:07:9c:a7:bc:d2:2e:0d:e4:32:16:ba:
6f:4e:ac:22:e9:53:ef:38:94:fe:4a:38:ec:e5:8e:
90:32:70:28:f2:b5:72:41:4b:e9:31:97:30:c5:f0:
a7:f0:69:5b:e3:91:f8:e7:ae:6d:12:7c:ec:e6:82:
20:7a:5f:ef:ab:42:fa:8b:5a:c7:6f:f1:ac:84:34:
27:c1:a9:ba:ff:36:7c:d8:57:22:45:c8:fe:89:d5:
0c:7b:01:80:f4:69:c6:c5:fe:84:0f:16:59:fa:ed:
6a:1b:41:91:ea:4f:39:61:bc:e2:88:86:52:d7:60:
ce:e2:da:81:20:5a:04:c4:15:f9:1e:83:4d:e9:c6:
27:8c:bd:73:95:66:e0:3a:5b:96:8e:a2:52:7d:7e:
45:7a:c2:2e:20:74:55:f3:f6:51:9a:28:1a:5d:32:
a0:8a:40:b1:fa:c6:f0:c3:72:96:df:05:59:bb:d2:
34:d9:4e:82:13:1f:f7:17:29:2e:e2:02:5c:4e:53:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:15:00:38:19:5D:B0:4F:97:4D:B8:0E:9D:E3:5D:20:DF:A0:48:1B
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:21:1c:c6:27:63:8e:b6:60:91:8d:70:33:29:42:86:71:e3:
31:99:74:05:be:6c:d4:22:6f:e7:29:11:63:8a:9d:0c:1f:03:
3e:5a:6f:57:5a:94:fa:31:f9:21:c2:b4:f4:31:a1:e0:09:cd:
e9:25:b8:bd:46:2e:c3:bc:5c:c6:49:0a:b6:23:4e:4c:2a:a5:
77:2e:d1:aa:1f:55:e2:f8:28:79:ab:49:0a:dc:d5:29:d8:18:
2f:97:bd:12:59:0c:8c:c3:3a:9f:3e:c6:ac:dc:f7:6b:d6:d4:
56:d2:22:c7:8b:61:83:5c:90:32:bd:05:ad:31:c5:b4:58:db:
c0:42:3c:2f:58:91:70:df:4d:d2:87:5d:de:68:82:77:95:bc:
e6:ea:59:3e:a6:b9:e6:04:a8:cd:52:29:23:cb:f6:2b:72:2d:
da:1a:5e:60:55:fc:08:06:58:f5:4d:bd:e5:91:4d:95:e0:1b:
f4:20:f5:ad:b4:08:9b:82:4e:50:40:cd:60:c3:a3:29:57:33:
1c:2f:f2:4b:4f:45:06:aa:48:1c:04:c4:de:b6:f9:c8:fa:33:
da:21:4c:cc:70:1d:87:a2:4a:25:81:7a:66:79:03:2e:dd:ee:
7f:e9:ad:49:8c:1c:c1:2b:5f:15:7e:4b:1a:44:5f:41:e4:fa:
13:a0:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:18 2026 by rpki-client