Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: TDSRtmPZXlr8nHvnThTInVuKhBNqCLkAV77GfdKqex8=
Subject key identifier: D4:6C:34:F5:BB:A0:03:6D:83:28:2A:DF:53:D1:86:E2:AD:4D:82:58
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 019D9D3F5E05E36EB18DDB29665EAE41F593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 11C3
Signing time: Fri 17 Apr 2026 21:01:08 +0000
Manifest this update: Fri 17 Apr 2026 21:01:08 +0000
Manifest next update: Sat 18 Apr 2026 21:01:08 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: 6yLUev4pTQHVTmHWyu/tjZBjJv78OC0/YTN1GOPFi9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:5e:05:e3:6e:b1:8d:db:29:66:5e:ae:41:f5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: Apr 17 21:01:08 2026 GMT
Not After : Apr 18 21:01:08 2026 GMT
Subject: CN=d46c34f5bba0036d83282adf53d186e2ad4d8258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:21:5e:73:0f:b1:c7:8d:00:05:9f:b8:76:
58:d1:11:b6:e6:da:5b:68:ff:75:af:c4:45:cd:b6:
4f:c6:7f:16:f5:55:a3:68:40:9e:75:1d:50:a7:0f:
ae:5c:59:5b:d5:4d:a5:02:53:c3:95:3c:76:71:4c:
23:46:53:31:4c:e9:2b:89:06:cb:41:34:14:26:89:
4f:89:1e:a9:e4:cf:4e:05:e6:1d:5d:11:6e:81:df:
43:30:06:96:03:83:60:75:ff:08:6a:cb:2b:66:98:
9c:ee:6d:92:26:68:fb:6d:89:da:ca:6b:2c:92:2f:
b0:3a:ed:bd:98:ef:a5:2f:b1:a2:90:f4:d9:a2:51:
6a:05:be:aa:9c:6c:14:f6:ee:8c:f1:ca:01:95:b5:
ab:ae:90:34:fe:4a:18:a4:15:f4:e4:16:76:c8:f7:
7f:be:39:dc:41:b8:3b:94:7a:35:8b:da:35:ef:d4:
5b:c5:c7:99:c1:04:a8:4e:7f:ae:b6:5a:86:82:94:
b2:10:9f:c9:0d:82:da:45:a9:b3:0d:63:37:b8:d8:
6f:27:b0:5f:95:0e:61:54:7f:26:2e:f0:8b:20:14:
38:f1:4d:6c:a0:1f:af:c6:4f:d5:4f:09:6a:fa:a2:
92:f0:83:45:fe:2a:75:76:e4:19:48:47:44:f9:4c:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6C:34:F5:BB:A0:03:6D:83:28:2A:DF:53:D1:86:E2:AD:4D:82:58
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:be:a2:de:75:50:a8:13:92:1e:d7:dd:ba:57:03:f8:e4:82:
14:5a:50:4b:af:b5:fc:ef:ba:46:38:6f:32:a3:66:f3:04:31:
b7:2f:00:81:55:cf:ad:41:01:25:d8:25:3b:47:16:33:45:bd:
6a:a4:81:a0:28:23:fd:e5:64:11:9c:e0:01:a4:80:89:67:5b:
e9:b6:b7:c7:60:9a:21:c9:44:cb:05:4f:e8:38:3b:db:b1:9d:
e7:8d:03:0d:f1:2d:fb:80:1f:2d:f5:0a:1e:f0:62:93:ae:8c:
a5:ce:17:b9:18:2d:b8:ec:0e:0a:08:3b:38:f5:f4:2c:36:e6:
e8:7e:c9:37:f7:e2:b6:58:f6:b3:d7:c4:3e:1c:09:2f:3d:ec:
53:17:c9:25:08:f5:46:29:e8:47:9f:0d:e2:78:ef:54:61:d7:
5a:ff:3b:9a:79:67:d0:d4:ee:a1:75:cb:d5:a4:72:43:87:f7:
fa:70:28:84:b2:a5:be:b5:47:f9:e0:80:c0:a5:0a:84:5e:6b:
fe:98:e5:19:c1:cc:42:de:51:cb:8c:c5:67:7d:76:cd:a4:ab:
56:96:4d:b6:08:51:29:cc:10:18:e1:30:25:bb:40:6a:ee:07:
3a:96:cd:af:6d:e1:3e:80:04:c2:5c:df:0c:ec:0a:63:b9:f8:
70:51:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:51 2026 by rpki-client