Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: AETTTIoa4Lqv47KuLZ0Usv1OWz9CLKYD2GbJrttqYP8=
Subject key identifier: 70:07:94:4C:E4:E6:EB:30:78:36:80:9D:D1:0F:80:0C:8F:75:F0:F5
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019D9AABFC6D78C44AD74871C9EFCD3887D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 169C
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: a3RZa9xJ9cXq3rQprfuSwNvs7EuC2ETOU0yvuW3/zfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:fc:6d:78:c4:4a:d7:48:71:c9:ef:cd:38:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=7007944ce4e6eb307836809dd10f800c8f75f0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6b:f1:93:21:1e:74:b4:ca:0d:e4:dd:e8:d3:
d1:0f:10:b1:48:46:59:aa:d4:18:c1:09:a4:e3:c7:
90:41:8a:aa:76:46:4b:6f:ee:bb:ae:3f:e7:92:df:
c0:0b:b6:0b:11:3c:10:a7:dc:04:ca:8c:c1:b2:ca:
42:d5:0a:f8:30:c4:33:cf:53:19:20:68:ed:39:ca:
68:d9:cf:8c:f6:94:62:4b:97:45:a6:03:80:24:3a:
f7:58:ec:4a:17:94:af:e6:26:1e:fb:fa:d9:e6:05:
e6:11:f0:d2:56:0e:16:4b:2c:cd:4f:3d:67:fe:a9:
f6:a9:0b:d0:57:d2:b6:f3:22:06:94:6e:6a:83:f1:
10:ca:a4:6c:c7:2a:0f:fa:2f:47:fc:9d:45:14:6a:
dd:ed:66:ac:c5:31:8f:24:e9:66:0b:24:68:d6:da:
04:cb:42:85:c7:d6:cc:5e:8c:f0:e2:33:22:85:de:
10:f5:69:8b:b4:23:65:d2:41:4b:c2:63:e3:48:ba:
a8:f6:a1:c5:ed:6a:06:a8:86:da:a9:33:57:22:b8:
ac:b8:16:b8:b4:5b:f9:15:d5:f1:4b:69:8f:e4:c6:
45:ce:25:03:aa:c8:67:9c:2f:c2:0f:ad:92:80:87:
cc:a6:8e:f7:85:4f:51:f9:15:68:f3:35:1c:21:1e:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:07:94:4C:E4:E6:EB:30:78:36:80:9D:D1:0F:80:0C:8F:75:F0:F5
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:34:8a:92:e1:7b:e5:dc:eb:fa:35:12:84:e7:92:02:71:39:
e7:7e:80:39:1f:ad:76:94:c4:0c:c2:8a:0f:b4:01:1d:aa:54:
3b:c2:fe:f5:f6:50:07:5b:20:1f:50:f0:f1:bc:99:87:15:31:
52:1c:b6:3f:67:5a:5f:5b:6a:12:6b:d0:04:4d:84:69:38:0b:
2c:7f:91:6a:a7:31:7e:3f:ea:e9:bc:1f:4b:b2:9f:b5:c8:d2:
6b:0a:fa:47:03:86:72:ba:bb:07:43:e2:2a:0d:81:0e:2b:8d:
7d:46:cf:ec:ed:7f:b5:17:fd:e6:db:d9:20:49:17:59:d0:6c:
f4:9f:78:c7:af:08:20:f4:91:a1:fa:e7:7a:4e:53:e2:e4:b8:
ef:bf:9f:b7:d5:aa:53:b6:a1:cf:07:0b:b4:64:76:8a:20:ef:
71:15:c3:8c:1b:1a:8e:53:4e:a9:d8:8d:d6:34:c9:d4:66:4b:
dc:e8:41:6d:ae:af:d0:48:fb:14:91:ed:8a:d8:dc:42:df:c1:
b1:9b:81:bf:01:97:25:c1:8b:8b:02:50:75:04:08:83:04:f8:
7c:6e:f8:5a:fb:98:aa:e9:04:4a:b8:a1:19:b8:ff:cf:d5:6e:
fb:2d:1b:5a:46:b8:cb:11:c3:3f:a2:8e:fd:ce:25:fb:33:38:
ae:64:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:33 2026 by rpki-client