Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: Le2WLYWYnxFQHY29rElnbpNSd36q2y+PxcENTthBjE8=
Subject key identifier: 74:E0:04:41:0B:CD:40:8B:5D:AE:B5:A2:91:37:06:E1:82:ED:82:5D
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 019D99D0C1A21C194EEF6D88C70F1408DE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0ECE
Signing time: Fri 17 Apr 2026 05:01:28 +0000
Manifest this update: Fri 17 Apr 2026 05:01:28 +0000
Manifest next update: Sat 18 Apr 2026 05:01:28 +0000
Files and hashes: 1: KpNNrs7-74JuAx07tH3Ntml_vj8.roa (hash: iDfnHxKAzmOYLOtglm6RsnOhV84NnDbI1O2L4oOFWp8=)
2: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: KOls43rHpRrw+1GersAP1RSW3nPh7/rjNOXfWUA51Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c1:a2:1c:19:4e:ef:6d:88:c7:0f:14:08:de:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Apr 17 05:01:28 2026 GMT
Not After : Apr 18 05:01:28 2026 GMT
Subject: CN=74e004410bcd408b5daeb5a2913706e182ed825d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:f6:ee:d2:71:1c:23:d2:c0:38:fa:06:d5:
2f:00:3d:a4:ee:6d:96:64:57:11:d6:03:a9:74:a8:
f4:15:9f:1f:c2:de:e7:f7:54:0c:0b:1b:9a:15:b8:
14:5d:4f:95:2e:46:c8:2c:74:da:9a:af:86:ca:2b:
ea:43:b6:0d:8b:9d:13:e2:f3:98:d7:58:79:50:35:
3d:6a:6a:5e:e9:01:06:3e:27:c4:0f:d9:b8:e4:19:
41:26:64:8b:40:7f:c5:5d:65:9e:9f:13:3f:a3:b6:
6e:30:a3:a0:a1:34:5f:02:cb:0b:29:13:18:31:8d:
f3:dd:33:2e:9f:05:2b:ee:ba:1f:5f:94:f5:51:06:
27:15:01:e7:9a:ae:bd:51:e4:1b:81:52:cd:48:f5:
f5:b3:7b:5e:9f:ad:b5:e3:ab:e0:4a:a2:8c:d3:2e:
52:dd:a3:42:cb:8d:c1:51:7a:20:37:47:1c:1c:44:
37:23:af:a3:e8:e0:95:fe:3a:62:59:0e:9f:1c:a1:
08:1f:5f:40:10:76:10:6b:a4:f5:54:e1:de:c8:a1:
ba:fc:20:d2:c3:d1:a8:12:2a:8e:cf:c0:3e:a6:19:
9f:03:d6:31:46:69:64:5b:14:82:42:7a:a2:95:6e:
c2:b6:54:ab:b9:39:8d:5c:db:28:b5:af:8f:e3:66:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:04:41:0B:CD:40:8B:5D:AE:B5:A2:91:37:06:E1:82:ED:82:5D
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a7:18:aa:2e:cb:18:ab:7f:50:ee:94:02:bd:63:c1:e3:a2:
76:51:0e:9f:a8:b7:0c:97:95:bb:d1:d6:3c:a3:60:1d:d7:16:
34:74:d0:f5:ec:c4:d4:5e:0f:8a:94:7d:4e:8b:f7:41:1f:7d:
ed:84:44:d6:7f:e2:0c:a7:81:b9:9a:65:f7:f6:3a:d3:f2:12:
17:be:1e:2f:0f:fb:2e:88:94:76:3e:62:fb:13:6e:a5:99:9b:
83:fe:c5:89:51:b9:fb:cc:91:91:2e:ce:f7:2a:c3:4f:43:33:
96:6d:a1:48:b1:0f:44:1f:2d:89:85:66:d6:2d:77:bd:b5:c3:
57:33:bd:a8:70:6d:40:7e:f0:39:93:e3:f1:d5:d7:9e:bb:2c:
26:01:b3:91:6a:0e:07:85:ab:93:2e:06:bb:cb:41:5d:6f:f8:
75:4f:2f:dc:14:34:d5:2d:30:83:7a:12:fd:b3:8f:ca:0e:7d:
3b:b3:48:9d:93:68:00:65:9b:8d:da:63:cb:c4:2d:b0:38:e5:
ad:1b:7f:69:72:11:28:3d:67:a3:5e:d3:49:b4:a2:66:3e:35:
71:ae:69:16:98:67:bc:0c:ea:d4:4e:cb:2b:0b:fc:f6:eb:e7:
9c:20:39:43:9d:76:54:4e:98:65:33:04:ec:4c:d8:75:8c:53:
32:e7:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:17 2026 by rpki-client