Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json)
Hash identifier: jkSmarfkOIZg3GqlWmMuEikIvnyHm+N4ZIFuKupnYnQ=
Subject key identifier: 96:9D:2D:88:FA:08:55:DE:87:20:27:4C:C0:28:DE:DC:94:AB:F4:97
Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Certificate serial: 019D9818EA5765E2DF456B453DD0A0DA9F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 21:01:02 +0000
Manifest this update: Thu 16 Apr 2026 21:01:02 +0000
Manifest next update: Fri 17 Apr 2026 21:01:02 +0000
Files and hashes: 1: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: jwsbaeobthp5UPd5l6nF1U72u1Vz5Xd2XdUPi2F16X8=)
2: oGFy_UJ1FYJcnSkbjOpzsDeEAhQ.roa (hash: sqZQ4ODNviSrmC5Scgdot54s+8lbk1XnzbtP1SaI9m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:ea:57:65:e2:df:45:6b:45:3d:d0:a0:da:9f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Validity
Not Before: Apr 16 21:01:02 2026 GMT
Not After : Apr 17 21:01:02 2026 GMT
Subject: CN=969d2d88fa0855de8720274cc028dedc94abf497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:60:ec:15:00:3c:d3:3d:ee:47:12:4e:bf:
49:ee:76:c9:2e:58:9a:6c:14:23:ec:15:70:3f:fd:
78:82:9a:71:88:cb:a8:9d:44:36:c9:f5:53:e5:c5:
e8:1a:c2:ef:8f:f8:ab:c7:26:6d:a4:06:33:33:3c:
a3:f9:ce:27:70:72:06:80:3c:97:2e:e6:81:3f:f9:
48:57:fa:38:b3:45:01:c1:09:e4:79:0f:1a:11:d5:
da:fc:2a:01:30:6b:42:24:77:6c:c3:aa:39:b3:2f:
6a:71:20:eb:28:4d:b0:02:d1:1f:23:6a:c1:78:09:
72:ec:1f:b2:bd:ad:a0:43:00:6a:b7:52:70:49:0f:
6d:82:84:d2:bf:13:9b:32:40:98:03:8e:6a:f8:dd:
fd:e2:e4:f0:16:60:44:d3:a4:dc:46:01:08:7c:b7:
2c:a5:95:fc:0c:b4:14:09:89:79:61:fc:09:7d:ca:
27:fa:8d:73:dc:96:52:62:57:0b:da:34:e7:99:b2:
5c:78:97:ac:37:2f:89:44:b7:ed:12:5b:c0:53:4a:
a2:1b:7f:aa:c3:13:e2:1c:a4:bd:85:63:13:21:67:
f9:90:0d:18:f1:33:59:6a:84:1e:78:e5:36:9f:ed:
02:e2:46:fd:7e:fd:26:01:5c:fb:58:3a:96:39:0c:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:2D:88:FA:08:55:DE:87:20:27:4C:C0:28:DE:DC:94:AB:F4:97
X509v3 Authority Key Identifier:
keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:14:5b:aa:eb:79:c4:e5:a7:a3:a1:42:b5:95:e2:d9:e4:80:
a8:c1:f5:c2:0a:15:2d:32:ad:89:87:be:36:bf:7c:aa:f6:6f:
29:a3:1d:41:dc:82:7b:b1:5b:ac:a0:ca:ab:64:3a:6a:4c:62:
fd:e0:22:46:25:17:0c:3e:28:98:85:e5:96:62:5c:db:08:b5:
1d:a1:95:cb:f3:db:4d:4a:d8:91:4a:21:6b:db:b7:2c:c0:ef:
55:e1:5e:f1:6f:5a:0f:d7:ca:b1:d6:df:f4:5a:68:7a:2d:54:
a6:de:c6:71:de:d2:89:36:94:ee:4e:b2:7d:62:41:b1:e9:34:
9f:57:c7:3a:fe:39:dc:6a:d4:1a:5a:88:c9:0d:02:1d:82:f3:
46:7d:02:fa:95:58:c6:30:d1:ae:7c:8e:5e:86:1b:e3:f8:ca:
75:28:38:8b:58:e4:58:7a:c2:a3:34:11:a3:e4:44:25:78:ac:
18:32:49:c7:e5:f2:52:da:c0:7f:71:04:2d:24:d6:10:42:e1:
ba:f1:a6:0c:54:44:fd:41:b9:1d:55:25:48:52:cc:87:d1:85:
b9:7c:c6:d4:af:af:75:bd:29:5a:18:32:28:d8:6b:83:54:88:
9f:92:58:5b:57:59:4f:e4:b9:f6:cf:67:95:67:a8:62:2a:7a:
50:20:5a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGOpXZeLfRWtFPdCg2p8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNDcyOGJkMWY1ZDEzNmQ3NjhiZjE3NTM0NjFjNTNkYTQ1
NzQ2Y2IwHhcNMjYwNDE2MjEwMTAyWhcNMjYwNDE3MjEwMTAyWjAzMTEwLwYDVQQD
Eyg5NjlkMmQ4OGZhMDg1NWRlODcyMDI3NGNjMDI4ZGVkYzk0YWJmNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3pg7BUAPNM97kcSTr9J7nbJLlia
bBQj7BVwP/14gppxiMuonUQ2yfVT5cXoGsLvj/irxyZtpAYzMzyj+c4ncHIGgDyX
LuaBP/lIV/o4s0UBwQnkeQ8aEdXa/CoBMGtCJHdsw6o5sy9qcSDrKE2wAtEfI2rB
eAly7B+yva2gQwBqt1JwSQ9tgoTSvxObMkCYA45q+N394uTwFmBE06TcRgEIfLcs
pZX8DLQUCYl5YfwJfcon+o1z3JZSYlcL2jTnmbJceJesNy+JRLftElvAU0qiG3+q
wxPiHKS9hWMTIWf5kA0Y8TNZaoQeeOU2n+0C4kb9fv0mAVz7WDqWOQzy2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJadLYj6CFXehyAnTMAo3tyUq/SXMB8GA1UdIwQY
MBaAFF1HKL0fXRNtdovxdTRhxT2kV0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMt
NWUyMzY3MjY3M2QyLzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMtNWUyMzY3MjY3M2Qy
LzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBRbqut5
xOWno6FCtZXi2eSAqMH1wgoVLTKtiYe+Nr98qvZvKaMdQdyCe7FbrKDKq2Q6akxi
/eAiRiUXDD4omIXllmJc2wi1HaGVy/PbTUrYkUoha9u3LMDvVeFe8W9aD9fKsdbf
9Fpoei1Upt7Gcd7SiTaU7k6yfWJBsek0n1fHOv453GrUGlqIyQ0CHYLzRn0C+pVY
xjDRrnyOXoYb4/jKdSg4i1jkWHrCozQRo+REJXisGDJJx+XyUtrAf3EELSTWEELh
uvGmDFRE/UG5HVUlSFLMh9GFuXzG1K+vdb0pWhgyKNhrg1SIn5JYW1dZT+S59s9n
lWeoYip6UCBatw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:04 2026 by rpki-client