Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: NSc9p6ERj04OXflu6kBC2xUyJslPaXnWHMJJHDgh7H0=
Subject key identifier: 29:CE:71:BE:C8:6D:8A:95:F9:7E:A4:40:22:D7:21:81:12:84:6D:7E
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 019D9A06EB980A21A4D90EFBF98C6F4F7BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 08AE
Signing time: Fri 17 Apr 2026 06:00:37 +0000
Manifest this update: Fri 17 Apr 2026 06:00:37 +0000
Manifest next update: Sat 18 Apr 2026 06:00:37 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: Lw4B+b7REmhcDHq3jjvEBcLb7eRu8XPiyJigPtbi8wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:eb:98:0a:21:a4:d9:0e:fb:f9:8c:6f:4f:7b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Apr 17 06:00:37 2026 GMT
Not After : Apr 18 06:00:37 2026 GMT
Subject: CN=29ce71bec86d8a95f97ea44022d7218112846d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:ad:a6:a9:84:00:86:f3:a9:6c:40:d6:5c:
db:19:b7:28:8b:4e:43:e4:ad:29:17:33:a3:14:b7:
ce:8f:62:36:30:aa:0a:ed:f0:c1:f1:d6:9c:16:eb:
34:20:4c:2e:14:3e:41:3f:30:f7:04:7f:35:d7:bc:
8a:2e:51:3e:fa:1e:f5:4f:96:af:ee:74:d9:97:09:
21:6d:53:be:a5:90:36:ec:7d:6f:c2:c4:83:31:a6:
49:ea:38:a3:66:42:cc:62:7c:ab:fe:e8:54:dd:5d:
58:94:36:1c:4c:dc:28:ee:aa:10:c1:da:be:1b:3b:
49:32:20:62:70:11:d5:4a:d7:c0:54:e7:7f:12:d5:
16:cc:d3:10:ff:dd:0c:94:ea:90:a3:70:0d:52:d5:
46:7a:45:e1:45:7f:e3:ef:12:16:0f:f0:d7:c4:5d:
80:00:8c:f4:37:7b:fe:49:a0:37:c1:fb:50:85:81:
01:5c:92:5e:6a:00:a8:71:3b:40:d7:0d:bc:ad:e2:
0f:7e:c1:10:ef:fd:c8:89:2f:11:cb:54:a0:81:48:
49:9d:00:dd:12:a8:d3:ca:d8:a2:bb:97:f6:56:32:
a4:0d:b1:b0:e0:d0:6c:3f:d7:d0:6f:5c:2c:a1:22:
d0:21:e1:e6:1c:99:89:76:c8:04:7d:92:59:f2:f8:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:71:BE:C8:6D:8A:95:F9:7E:A4:40:22:D7:21:81:12:84:6D:7E
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:59:99:6f:91:9d:4e:14:07:f1:a0:4a:e3:c4:5a:56:ea:c0:
24:ff:20:85:0a:04:13:fe:55:95:07:11:59:e6:8c:1c:a1:41:
38:1d:8f:f9:eb:85:93:33:ad:f3:04:cb:8f:f2:60:a5:79:b5:
fd:8e:e2:71:6a:db:c5:51:0f:fe:7a:fa:2e:d2:b5:61:7b:5d:
1f:d8:09:b7:3b:d0:59:cb:81:6b:81:98:70:41:39:fd:59:36:
56:99:a7:b0:8d:59:f5:41:fa:3f:ec:60:52:5f:91:66:1e:66:
f2:13:c4:9f:cc:67:03:32:7a:7e:31:e4:a6:c1:09:6f:d9:63:
c3:bb:34:fc:a4:c4:5d:25:91:e7:e9:fa:72:95:ca:73:5d:fd:
7d:9e:1b:3f:15:a5:2e:09:ad:3b:2a:2b:3a:67:4f:c2:3a:5f:
0c:22:5e:9e:77:25:3f:69:e5:ce:38:05:3e:07:f5:21:91:4d:
bf:4a:90:ee:e9:82:40:cd:62:96:43:65:94:50:13:ae:4d:31:
fd:73:00:69:9e:e2:30:d2:e6:b2:78:f4:9c:a1:29:45:0b:da:
2b:0e:29:17:ca:09:9d:5d:91:1e:bd:89:44:6d:d8:21:a2:ef:
f4:07:64:33:e1:86:ab:6a:f8:0f:d8:67:73:42:aa:f6:b4:f9:
6a:16:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:46 2026 by rpki-client