Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json)
Hash identifier: YGvZ/LGCgHxx4r7VpEg2IoGQt7Bb6NqM1Pg8ziEPUXc=
Subject key identifier: 24:EE:13:C8:A8:51:A5:E1:94:EE:B9:01:EF:3E:09:62:0C:19:98:3E
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial: 019D9A74AC962F7B34ADF7D97890087E4711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
Manifest number: 131B
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: PD1M6PtARbBp-MFE-_EKsQHkiUA.roa (hash: skJJkpTERxyYoCR/2Ty9oHhbHrSmVPhxCwzmUEM9AKQ=)
2: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: pTh3jgf0itzdEvxCbaZ9iz4pKUbfVz2eCzdntAvd6MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ac:96:2f:7b:34:ad:f7:d9:78:90:08:7e:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=24ee13c8a851a5e194eeb901ef3e09620c19983e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:18:65:9c:17:da:20:15:27:3f:6f:e2:16:
17:cb:82:8f:d9:5d:88:c2:d9:a7:08:d4:3c:28:de:
96:7c:8a:be:62:c6:f1:54:c0:62:64:1b:96:5b:e6:
cf:54:ae:38:3e:b2:4b:0e:3f:97:bc:df:68:b4:52:
91:e6:b0:fe:20:ff:c6:07:e9:8f:b2:7e:40:89:55:
9b:45:b8:13:83:68:c2:1b:2c:0e:c9:db:5a:1a:15:
39:37:b2:02:1d:01:68:c9:ff:da:c0:55:4f:20:82:
5d:a0:71:c4:85:f0:95:6a:fd:5c:5c:21:92:f2:7d:
ed:93:66:e8:5b:50:a6:28:08:88:0b:e5:2e:e0:19:
a8:0b:74:71:59:47:14:9a:b9:02:30:b0:ab:8f:30:
da:31:66:ac:4d:77:2b:13:98:44:9e:2c:17:5e:f2:
23:c9:e3:60:37:4a:96:b7:8f:0e:0b:14:2d:7b:4c:
d7:e3:d1:dc:42:44:11:b3:73:8d:b8:9b:e4:3e:a2:
5b:d5:fb:df:b8:d6:0b:2b:ad:66:5d:d9:3e:c2:c4:
86:a0:8e:41:1f:6b:24:03:75:54:08:d9:80:0a:6c:
d8:3f:82:6e:c9:2a:92:58:0a:2c:ae:ef:bb:42:49:
25:96:21:69:6d:d2:a2:04:e1:39:bc:56:49:47:49:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EE:13:C8:A8:51:A5:E1:94:EE:B9:01:EF:3E:09:62:0C:19:98:3E
X509v3 Authority Key Identifier:
keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:1c:e5:0e:a1:2c:0d:ed:48:9e:b4:d7:82:de:4d:79:f6:
94:0d:54:0b:26:d3:31:8e:08:7c:0f:37:09:e1:8c:36:25:03:
9e:4e:2c:0e:1e:d0:2d:6a:c5:48:96:8f:9a:20:55:a1:c7:ef:
00:9d:3d:d2:0a:a7:39:74:ec:86:1c:53:45:52:c6:af:98:2b:
bd:8d:41:d2:91:05:22:3a:4f:cd:ba:64:78:d0:bf:77:e3:46:
54:78:54:b1:e6:7b:1b:34:26:d3:a2:10:43:be:f5:d6:43:b3:
89:10:39:de:d0:3c:6f:f5:a8:fc:56:2f:93:68:85:bd:e3:d9:
ee:1e:72:51:d6:6b:09:64:92:ed:1e:e9:ea:f7:d2:3d:a6:21:
a2:63:4f:de:97:ce:99:f3:57:80:b3:7c:b0:5d:ea:85:63:83:
8f:cb:13:e7:67:6d:c8:2e:04:e5:57:ad:02:57:74:b6:49:86:
0c:85:7c:a1:64:f2:bf:11:74:22:c0:1a:10:1c:e2:d9:ea:5c:
d7:ed:d0:5b:78:13:77:2a:96:0f:67:24:39:87:86:81:4a:84:
08:c3:1c:f0:1e:f7:2c:4d:ec:eb:23:15:2b:9f:89:b5:a6:80:
e2:f9:9d:79:d3:15:9b:41:1c:c4:b4:0e:b9:ee:e2:94:2f:c9:
d8:78:ba:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:23 2026 by rpki-client