Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: vkkSKEZFH0iUVM0W0lyBlQ4I4yIM4TTOhe/xUyog3pk=
Subject key identifier: A3:46:BA:2B:A0:50:05:7A:68:B4:ED:D9:17:23:FB:A4:58:BA:C9:CA
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019D9DAD3907E0C7EEFECC81D2E5EAAD9859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0EEF
Signing time: Fri 17 Apr 2026 23:01:08 +0000
Manifest this update: Fri 17 Apr 2026 23:01:08 +0000
Manifest next update: Sat 18 Apr 2026 23:01:08 +0000
Files and hashes: 1: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: ykYTSmtS+j21ynAH4i8OclY8m3341Gt7Urpd3xQJR+Y=)
2: z7DQCTMfSpxYNEqc8NdY7ztXAQY.roa (hash: 0f3C1JOESj8A6E71R4wmJYEbq8aExFFVXotwYdP1hio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:39:07:e0:c7:ee:fe:cc:81:d2:e5:ea:ad:98:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Apr 17 23:01:08 2026 GMT
Not After : Apr 18 23:01:08 2026 GMT
Subject: CN=a346ba2ba050057a68b4edd91723fba458bac9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:13:e4:c5:e9:83:14:74:c5:22:5e:e6:5f:
0f:9d:a5:03:59:df:82:5d:52:be:f2:7f:aa:22:03:
c4:6b:3c:e8:5d:9e:ad:be:77:d6:d0:5f:56:e3:f0:
13:d5:49:19:a9:4c:ee:2d:dc:6d:0e:a5:c2:a3:51:
f7:d4:54:a6:d0:61:34:ee:6f:50:0b:e1:68:06:65:
66:e2:97:b0:45:89:9e:11:a7:5c:a4:37:0f:67:f0:
5e:cc:2d:58:0a:a2:71:b5:ee:7c:5d:95:f5:1a:82:
c2:1f:ad:7a:c5:26:de:2d:f2:88:7b:f1:59:7b:ed:
c6:5b:84:d2:1c:f3:30:2c:f6:0e:4f:f5:c1:26:3f:
56:81:d2:40:89:83:a9:61:a3:31:36:e0:30:3c:48:
56:93:e3:36:db:af:4d:84:b9:7e:f0:f0:3b:25:ef:
d6:02:53:d5:e0:1a:b7:b6:05:7d:65:2b:4c:f9:c8:
a6:7b:d0:41:da:b8:84:1b:69:db:1f:54:64:0d:e6:
e0:6b:9e:b4:b8:ae:d9:66:18:f9:51:1c:69:3a:12:
dc:1a:52:ad:f8:37:9c:5f:34:e6:88:54:0d:9d:cb:
3e:59:d5:b6:85:0c:39:61:a4:12:2f:d4:a6:3b:1c:
5e:0b:35:82:80:a0:31:f4:98:27:6f:98:33:e4:f0:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:46:BA:2B:A0:50:05:7A:68:B4:ED:D9:17:23:FB:A4:58:BA:C9:CA
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9d:39:37:47:b4:7a:52:fb:eb:fb:1e:c9:90:fc:a1:c9:27:
91:10:ed:a2:90:aa:b9:3d:ae:fa:d1:b5:ff:be:80:fa:67:3f:
0b:cd:b0:ae:54:6a:60:d1:12:3f:20:ac:b8:3a:43:ad:74:5f:
e6:79:90:b0:74:fc:ef:95:9a:af:b9:65:e1:74:a5:61:5a:ec:
24:9f:56:4f:dc:84:a5:c3:5a:57:ce:fc:04:27:82:af:dd:ca:
72:b6:96:97:7e:95:fd:dd:63:fc:21:f6:7f:03:56:1f:e0:24:
3e:5b:00:5c:17:48:4a:f9:1c:af:4f:47:3a:52:b0:41:dd:63:
86:42:f0:bc:e6:6e:3b:1e:2f:2e:ce:f6:16:71:e7:94:c9:44:
6c:5c:44:a6:dd:b3:db:13:32:63:ea:9b:59:d9:15:de:b7:08:
96:eb:d7:e8:71:70:ca:69:f7:d8:ee:24:d8:2f:12:bb:a8:c1:
a2:38:89:1b:f5:84:01:aa:99:45:26:70:a2:7e:0e:ae:b9:3b:
80:40:65:cc:53:40:fc:21:75:02:ab:9c:8b:10:f6:bd:e7:52:
e2:a4:f9:10:34:bf:25:c2:6e:fd:31:24:78:4e:3e:b8:76:e1:
aa:81:3e:f7:af:cf:b1:19:1d:08:3a:ae:a5:2b:23:fe:b8:2c:
d5:b6:7d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:54 2026 by rpki-client