Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: W4v/zhUSa5JWB4ZEkyIBAHsIstZeYmeGQGjgeHcw/yk=
Subject key identifier: C3:1D:2D:04:E6:56:2D:44:65:E8:0E:CA:75:A3:90:F4:E0:04:A9:98
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019D97E1B0D25BA465ED6166BCE3A49086CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 142D
Signing time: Thu 16 Apr 2026 20:00:43 +0000
Manifest this update: Thu 16 Apr 2026 20:00:43 +0000
Manifest next update: Fri 17 Apr 2026 20:00:43 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: gWgj3VXtZQvzJGOUaEAQ7CIHktkI74fzPgvQ/YkcdHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:b0:d2:5b:a4:65:ed:61:66:bc:e3:a4:90:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Apr 16 20:00:43 2026 GMT
Not After : Apr 17 20:00:43 2026 GMT
Subject: CN=c31d2d04e6562d4465e80eca75a390f4e004a998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:41:2e:80:1d:81:dc:1c:1a:9b:0c:cc:16:
dc:00:d0:1f:08:21:55:e4:e1:3f:fe:06:d3:2d:a0:
78:b2:d1:5d:38:00:3a:51:14:d4:c6:71:70:57:21:
c2:22:46:26:37:07:94:a7:1f:48:de:b9:b2:30:d0:
5f:b8:be:b2:eb:0e:af:b2:84:64:c1:1f:08:c9:8f:
1f:6f:b6:62:f3:95:40:f5:17:49:f8:87:b4:a9:81:
8d:d9:5d:53:ec:77:d8:8a:09:5f:29:3d:2f:0e:71:
ed:b6:f2:8b:d0:99:f5:03:98:f1:49:87:c7:23:b4:
27:32:07:e2:5d:fb:25:e6:9b:79:8c:bd:a9:f1:fa:
34:d5:54:e1:c1:f3:35:55:db:00:fb:f4:80:21:e7:
57:19:3d:90:cc:4f:cf:08:26:fc:db:48:f7:df:0c:
b1:b8:bb:7a:49:95:05:5c:c4:62:bb:ad:d1:a4:5d:
01:1f:ee:fa:10:9f:15:3b:4f:e8:03:55:34:a7:2e:
80:4b:12:17:48:eb:f0:14:9d:43:2a:9a:f5:cd:03:
63:98:ae:8a:17:ff:b8:aa:90:c7:27:5a:89:50:ec:
ee:1c:44:94:16:fd:23:0c:fc:2e:bb:8d:ee:5d:8a:
24:58:05:0e:80:c5:77:0a:ba:59:ac:ba:42:a5:26:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1D:2D:04:E6:56:2D:44:65:E8:0E:CA:75:A3:90:F4:E0:04:A9:98
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:08:99:c5:52:6d:d0:84:40:b1:73:10:31:be:c1:35:ff:45:
94:de:36:09:91:6f:cd:99:3c:14:be:38:b6:d8:c3:b5:ae:30:
48:fe:d7:7e:83:5b:e9:65:17:7a:c6:c5:24:d1:d2:bc:5e:33:
70:48:84:00:d1:71:ff:bd:8d:7a:83:9f:f6:bd:bf:65:f3:62:
83:91:49:f7:df:2c:00:65:44:93:ea:50:63:4c:af:cf:15:4e:
15:71:b4:d4:8f:e6:72:9c:d9:e9:de:34:32:2d:d2:fe:ff:98:
f5:c5:c5:28:2b:db:5b:3e:10:3a:b8:19:52:b0:04:de:37:40:
76:6c:c0:8e:54:da:cf:ff:f3:16:cd:17:da:56:a2:05:bd:48:
96:5b:b3:44:33:66:aa:1f:03:d0:36:ca:3d:39:86:aa:7e:cb:
3d:d8:1a:3b:21:be:0c:c5:b0:24:f8:75:7b:8f:0c:66:42:46:
8a:bb:f0:14:c0:f0:b3:d2:50:81:58:97:50:93:bd:71:e5:aa:
fd:a6:5c:6d:05:f1:3e:63:a1:c8:12:3f:9a:77:13:dc:46:67:
57:39:b3:e2:b0:f0:36:00:f9:c1:17:07:c6:45:7d:24:75:95:
fb:8e:03:aa:4f:a5:c7:9e:a3:75:ae:29:c9:b5:97:8e:90:87:
eb:f9:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:28 2026 by rpki-client