Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft (raw, json)
Hash identifier: LFyxNeFzUgs7FG5HGT+V5c5xS7FdWtPPBPXMg5domCo=
Subject key identifier: 25:06:F0:5E:99:CB:94:52:0F:B0:BD:C5:C5:7E:DC:4B:48:61:0D:A2
Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
Certificate issuer: /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Certificate serial: 019DA4F87E72C651071F1C44741A17AFFB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
Manifest number: 0148
Signing time: Sun 19 Apr 2026 09:00:41 +0000
Manifest this update: Sun 19 Apr 2026 09:00:41 +0000
Manifest next update: Mon 20 Apr 2026 09:00:41 +0000
Files and hashes: 1: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl (hash: R4vexl4h/YuXevW75rZqztUX65dEH51ahk6gjlDFklo=)
2: pPahSaeBPta7w6VOnQkraRmUcA0.asa (hash: FCTya6t/QqQMoFaMDmatYCTAuidSm61Lv7qwKelhC5E=)
3: rXJCBpwtYShFouVpouU47HymwWo.roa (hash: z0tPKD9etDZny3IDTZR0T2qHlWP90XZw84nhExsH4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:7e:72:c6:51:07:1f:1c:44:74:1a:17:af:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Validity
Not Before: Apr 19 09:00:41 2026 GMT
Not After : Apr 20 09:00:41 2026 GMT
Subject: CN=2506f05e99cb94520fb0bdc5c57edc4b48610da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:83:8a:5e:9e:c5:46:c1:c8:89:3f:3c:f1:
2a:aa:61:fd:a0:07:94:98:bb:06:14:39:16:df:57:
56:e0:9c:6c:1b:bb:a5:70:86:02:fb:24:b5:f6:95:
00:0f:1f:5b:0c:55:fe:35:b8:9b:df:bb:8b:41:ce:
76:b0:64:b6:f8:87:e1:9c:c9:f2:81:f2:32:f7:bf:
27:e5:7b:b4:ab:5b:a4:23:17:87:2c:1a:f1:57:33:
a7:23:89:0a:14:64:16:1d:d2:52:c7:f4:41:93:e2:
4d:08:c7:34:fe:af:54:48:b4:f5:7d:3d:88:54:be:
86:25:f5:fa:93:1d:23:0a:4a:2d:a5:b7:62:5f:8e:
8b:7b:b6:64:69:21:f9:ee:e3:b9:f0:6f:ba:dd:c5:
24:5a:74:3a:c6:e3:5d:63:3b:a3:24:3b:f4:15:9f:
a6:67:ca:14:cf:48:a0:ab:41:b3:bf:3a:e5:7b:68:
69:4c:02:5c:ac:21:72:21:56:0c:98:d5:bf:60:7b:
70:ba:b8:b6:ed:fd:40:1b:e1:b0:11:8c:77:ac:00:
38:99:14:b0:8b:dd:0e:9b:e7:5f:a2:c5:7f:e2:19:
3f:32:8e:67:62:31:c4:c0:03:77:1c:e0:88:64:6b:
62:e6:b9:94:e5:aa:67:c9:a9:0f:57:9a:6f:68:14:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:06:F0:5E:99:CB:94:52:0F:B0:BD:C5:C5:7E:DC:4B:48:61:0D:A2
X509v3 Authority Key Identifier:
keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:bc:b1:51:35:68:87:62:26:09:09:84:c7:f7:01:95:26:
d2:f8:4c:c1:22:16:3a:a8:c0:4a:ba:0a:06:d0:f9:4e:49:b5:
b9:3d:51:25:37:f4:48:7b:9f:96:9a:60:35:f1:95:37:c5:d6:
c7:20:a5:97:73:0f:76:38:34:e0:1d:ae:5d:9f:83:84:33:8c:
6d:87:5b:ab:7d:94:d7:ee:cf:88:1a:7d:b5:b4:62:a4:1a:a3:
13:16:9b:87:8f:71:80:84:ce:28:93:80:71:dd:06:b2:05:2d:
ec:7f:52:81:6f:b9:20:ee:31:54:67:17:b6:2e:76:fc:57:49:
b1:57:f3:95:eb:a9:0f:82:b9:b4:29:3a:47:61:e5:4a:a6:08:
30:92:7b:ed:c4:26:f0:d2:37:f0:b4:3a:a5:21:38:b7:29:44:
50:e5:9a:83:0c:e6:51:4c:f7:18:6b:d0:73:3f:91:3d:93:8e:
bc:c3:e5:71:b2:85:c2:ab:af:2a:a6:60:6e:bd:7a:4e:64:a3:
76:06:b3:42:22:8b:ca:d9:6b:50:e7:1b:e8:8d:49:a2:ed:54:
2c:67:30:05:98:c1:1e:bd:10:f9:31:03:f7:5b:0b:5b:d9:cf:
f5:56:86:de:9e:e1:e0:4e:df:9a:07:dd:c3:00:83:a9:08:67:
c2:32:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:43:55 2026 by rpki-client