Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: BS9vFEocdCXSH0U+Ko4QgXwc6dLWfbJIad6Ghw1xQ58=
Subject key identifier: D5:FC:3A:89:03:53:A8:D7:D7:F7:A2:CA:A1:2E:5A:A8:EE:16:A2:2D
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 019D9A3E3DD327BA5FA4B3B7CB3C00CDB631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 07:01:03 +0000
Manifest this update: Fri 17 Apr 2026 07:01:03 +0000
Manifest next update: Sat 18 Apr 2026 07:01:03 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: LqLq3g3ADP9CDwAaWskTg7LD31NDfmA3nwtSFHOL56E=)
2: eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa (hash: LnqLUkXGJD0OiqsbSYEC0AppS9eAVHhK/gEl/tMcU6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3d:d3:27:ba:5f:a4:b3:b7:cb:3c:00:cd:b6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Apr 17 07:01:03 2026 GMT
Not After : Apr 18 07:01:03 2026 GMT
Subject: CN=d5fc3a890353a8d7d7f7a2caa12e5aa8ee16a22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:47:19:3f:0a:86:32:7f:7e:37:f9:25:a3:
d2:d5:98:38:62:74:8a:06:14:ad:f3:51:eb:80:b1:
2a:1c:da:81:5f:a6:ea:db:fb:27:bd:c2:89:db:4a:
dd:4c:4b:b2:fc:72:c0:28:bd:b6:e7:38:6e:8e:ad:
1f:15:b0:2a:7b:c1:a1:db:3f:bc:40:fa:9f:6c:95:
c4:3f:ae:a5:4a:b3:7b:b4:e5:37:d9:d9:79:98:5e:
f5:e1:47:3b:5f:a6:68:35:e6:38:3a:91:09:5a:64:
87:30:d2:85:f5:b0:e0:c2:c0:ff:ca:ce:95:bf:af:
35:9f:bd:76:3c:8c:75:fe:1c:e3:d8:4b:e5:13:58:
45:53:5b:98:f5:38:e8:e9:66:cc:36:fd:84:e6:0d:
4e:e7:70:79:99:66:6c:20:f0:b5:bc:43:0d:e4:60:
c6:73:81:28:44:37:3e:51:3e:1a:9a:91:c4:f6:ca:
56:ee:c0:74:89:0d:cc:e4:aa:f9:e3:32:45:c6:5c:
f9:e7:d6:72:81:f6:c5:87:4b:32:69:80:ac:14:f7:
50:d2:56:4d:1e:61:cb:bf:4a:e3:0f:23:02:b6:1c:
2d:16:e0:5b:83:ef:f5:de:fb:21:3d:0c:98:e8:d6:
33:53:c1:02:18:5e:f2:23:f3:0a:67:55:6c:5b:53:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:3A:89:03:53:A8:D7:D7:F7:A2:CA:A1:2E:5A:A8:EE:16:A2:2D
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b4:1f:b9:de:1f:2c:d5:e1:34:06:27:33:2d:82:88:42:6d:
f8:40:15:ef:9e:38:38:04:9e:54:29:cd:06:be:73:1c:67:a0:
b9:c4:dd:b8:50:df:df:12:ba:27:e1:01:f4:8a:5b:0a:76:c1:
33:af:f3:77:24:80:ff:e6:4c:57:f1:29:c3:b3:82:d5:f9:49:
d0:6b:97:f6:52:b1:7d:9f:0b:d7:37:b5:5d:0d:9f:57:f0:10:
6c:d0:fe:92:7d:f5:7c:79:88:3d:b5:2a:0a:0f:fd:90:6b:48:
2f:94:71:5e:f0:b5:52:30:4b:84:fb:e2:95:a0:39:71:6e:c3:
6a:18:f1:9b:e2:53:ec:ab:fe:bd:ff:9a:62:35:b1:20:dd:3a:
9b:da:04:30:34:c7:4f:63:82:60:ce:de:07:36:f6:0f:f7:b2:
4b:0d:77:e4:66:34:c3:66:ba:e9:c3:f5:1c:5b:01:e1:99:51:
dd:54:27:6d:3f:09:90:dd:46:06:f3:40:7a:96:c4:e4:b1:88:
09:6e:5c:ec:d4:c6:f0:93:33:6e:9f:97:85:f2:67:8f:72:92:
31:a9:65:41:ee:28:6c:ca:31:5d:ee:ab:d7:98:ee:97:1d:f2:
d3:46:e6:51:9e:76:ac:b8:90:7d:53:3f:a7:f0:77:dd:f3:dd:
20:5d:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:28 2026 by rpki-client