Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier: 9T2uJ35EqHjjBC8GUC9JkfZnGxb8XtljDthWN9BZDSs=
Subject key identifier: 3C:64:75:11:AA:0E:BB:A0:AA:0D:E3:7D:74:1B:32:F7:EE:33:9D:68
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 019DA30A1AFC524EA1351B0A73CB18B7FE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number: 1672
Signing time: Sun 19 Apr 2026 00:00:41 +0000
Manifest this update: Sun 19 Apr 2026 00:00:41 +0000
Manifest next update: Mon 20 Apr 2026 00:00:41 +0000
Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: b64robbPJVp7xqfjMFTx8GI8yHhAXaUsAn9VPdEcQRk=)
2: vHsqeUq6iGnyRjByp03wnHq8Se0.roa (hash: VNscZtJ6p8ltvLlYgNm9TQqlID5TSbcVcko5K60GbLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:1a:fc:52:4e:a1:35:1b:0a:73:cb:18:b7:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Apr 19 00:00:41 2026 GMT
Not After : Apr 20 00:00:41 2026 GMT
Subject: CN=3c647511aa0ebba0aa0de37d741b32f7ee339d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bc:04:16:57:b4:a3:f3:98:23:06:4c:8e:96:
f6:78:56:30:b7:54:cf:98:b6:0f:10:c7:3c:84:bc:
7d:00:8d:15:47:91:21:cb:93:61:af:80:28:4d:4c:
7e:21:12:6a:33:00:ac:91:79:ab:79:b6:7a:e3:f9:
f8:e8:af:14:cd:05:d5:41:13:0c:b8:e2:8b:f7:df:
b7:79:0b:43:61:ad:69:70:fe:6e:f4:89:11:02:6e:
8a:b7:af:db:f9:27:2e:3c:17:e2:e7:1e:60:d0:35:
d5:46:52:8b:e1:3b:a5:16:95:94:78:49:b4:a8:b6:
ba:f0:2b:88:ef:d3:87:cd:03:65:fc:fc:d0:cb:24:
79:fb:18:9f:f0:95:b7:79:0f:f6:0a:a7:ad:70:48:
6e:f5:0c:72:ee:0a:c7:09:d9:60:31:f0:d0:03:2e:
47:a5:3b:d5:58:02:48:d5:e8:52:1b:dd:ac:b3:d5:
84:7d:03:14:20:f3:c9:c8:cd:1b:a0:a2:e6:51:75:
b1:02:fa:0f:4b:94:b1:28:75:6c:5a:49:04:7e:7c:
dd:6b:4a:b9:0c:6e:e5:90:ac:d6:6f:2b:67:70:32:
dd:45:b2:f3:7f:3a:a4:a3:87:ef:3d:f2:7c:be:95:
50:b7:7a:15:36:a7:41:70:e3:73:81:00:d0:55:00:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:75:11:AA:0E:BB:A0:AA:0D:E3:7D:74:1B:32:F7:EE:33:9D:68
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:64:c9:73:14:f6:8c:f5:c7:14:06:0f:27:eb:7d:b5:5a:1c:
30:af:cd:40:cf:79:01:3c:d1:b9:1c:7e:01:61:31:08:a4:35:
c1:75:32:72:c7:e7:22:fa:a5:ab:c9:28:09:e8:a1:09:2c:3b:
2c:d6:43:ee:b1:3b:6b:c1:20:32:26:af:88:29:a3:84:f6:b6:
a2:11:d2:a3:5f:66:89:db:ad:76:73:de:eb:d3:a2:3b:7f:4b:
8e:a8:ca:a8:03:8e:df:0e:d3:b1:2c:9e:8c:0c:9b:34:d5:a6:
68:ec:f8:3f:bf:a7:7e:1a:c9:53:9d:7c:24:b0:2d:ce:b6:f7:
80:bf:a6:a9:79:3c:c1:96:bc:28:8f:53:b3:7d:cd:ce:1b:d5:
76:81:37:86:19:10:46:fb:87:c4:75:c9:32:5b:a9:c3:25:1a:
c8:f7:33:74:61:78:e7:27:bf:f5:63:28:55:f3:15:26:79:40:
59:25:91:4f:68:39:75:f2:d1:0b:e2:28:7d:cf:c4:cc:37:98:
4c:b8:66:9b:aa:9c:79:06:7f:84:95:e1:59:f6:14:d4:12:9b:
0a:be:ec:1d:f8:b2:70:ad:8d:df:1b:24:ce:a7:6a:10:3c:cc:
34:e2:e0:5d:5a:64:fc:56:90:89:73:e8:35:bb:0a:6a:9a:88:
2a:d7:9d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:28 2026 by rpki-client