Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: DohraqzeLXM0/HEoB9k8/CT72MDC3wPOmwHrgTlzQn0=
Subject key identifier: 7C:7A:B5:45:93:AF:1B:FF:99:DD:A5:42:C4:4F:CE:1F:A6:70:13:BB
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 019D9B87F8C6BB34D4264D596BE5D9A59DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 13:01:12 +0000
Manifest this update: Fri 17 Apr 2026 13:01:12 +0000
Manifest next update: Sat 18 Apr 2026 13:01:12 +0000
Files and hashes: 1: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: Cr7vulfZ25pr87s9lFwEmCtoTxxs619X0QPGSz+Q9fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:f8:c6:bb:34:d4:26:4d:59:6b:e5:d9:a5:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Apr 17 13:01:12 2026 GMT
Not After : Apr 18 13:01:12 2026 GMT
Subject: CN=7c7ab54593af1bff99dda542c44fce1fa67013bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:ce:b3:f3:01:52:51:8b:5a:48:17:8a:06:
35:98:33:a4:17:03:f5:44:f6:c5:7c:69:09:d0:34:
ac:73:7d:cd:6c:e5:62:5b:16:f2:d3:80:2a:8d:8f:
4e:70:36:92:01:88:66:16:3a:56:54:bc:68:cd:46:
b4:b8:0b:f7:e3:79:c0:66:c5:97:42:53:d2:4b:ca:
fe:48:83:4a:de:5b:8e:db:34:d0:83:dd:fb:9d:42:
5e:e8:57:b8:05:67:a2:58:cb:0f:04:8c:7f:66:f4:
e8:8b:48:7a:14:0e:2e:c8:60:1f:dd:38:a9:bb:26:
64:9c:ff:2c:b0:95:93:de:2c:d9:f6:02:23:80:a6:
f2:d6:d0:dc:f5:79:08:80:49:74:1c:37:5e:21:4a:
6d:04:8e:8d:dc:2e:3f:ad:ea:d3:11:dd:db:d7:65:
1c:bd:67:06:85:e1:f9:ec:90:da:37:f9:a8:d7:7d:
3a:47:86:84:88:57:09:6c:41:be:81:cc:c3:49:c2:
78:80:1a:cc:07:0d:16:bc:3f:40:2b:b6:7b:8f:9c:
eb:e9:32:8e:e1:9e:6f:6e:64:bf:01:37:3b:e0:8f:
4e:ad:27:ab:07:a0:8d:65:67:af:79:e4:e4:0f:bc:
49:6c:3a:d0:b3:48:3d:a3:27:ff:73:5e:b6:6b:90:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7A:B5:45:93:AF:1B:FF:99:DD:A5:42:C4:4F:CE:1F:A6:70:13:BB
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:00:a9:b6:5a:38:9e:43:fc:80:25:8a:15:98:28:6f:49:80:
ff:38:d8:a4:31:2a:4b:45:23:0d:9a:9b:1a:49:98:92:4a:fc:
11:42:1f:cd:10:b5:db:39:74:95:2f:bb:79:f1:1e:19:91:ff:
6a:af:16:bb:1f:2f:df:a3:1a:98:07:30:57:ce:cc:88:18:d5:
be:37:78:46:45:fa:c5:79:92:44:9d:31:ea:26:0a:6d:c1:de:
1b:96:d8:ba:fd:9c:a9:c2:e9:23:2d:0f:cf:08:a1:a4:b5:50:
8b:14:96:f7:4b:0d:8b:3a:6b:18:c1:7f:e2:04:a8:d3:63:66:
f8:06:b9:a6:56:48:c5:e6:42:9f:f0:20:cd:6c:3e:7d:49:8e:
f3:16:ee:62:cc:0f:38:35:d3:07:db:89:93:51:ea:f7:fd:73:
71:4a:d3:6e:a7:ed:2c:08:b6:de:cd:81:a2:56:bb:b1:c5:2a:
84:6a:5c:fe:a6:aa:dc:3b:2f:1c:52:ba:c1:9a:13:7d:f0:ca:
a0:ac:c3:27:01:bf:8b:5b:a1:b1:02:e4:5b:5d:8d:31:97:28:
6a:4d:4e:1f:1a:c0:1b:5c:0d:a9:68:53:d8:d6:6f:00:a8:65:
27:40:cf:77:e2:f0:13:fa:79:26:40:a6:91:a2:97:3e:61:5f:
ab:2c:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:44 2026 by rpki-client