Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: vOA6zBMxdOwipP1t2E5WAhQ0TW9Q7ywDd6bMG9bXox0=
Subject key identifier: 05:E2:7B:A8:3B:56:46:16:D4:65:E5:3F:7B:A5:E8:AD:66:6F:10:DC
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019D9886ABC63A039B9EE6969597076D8E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:55 +0000
Manifest this update: Thu 16 Apr 2026 23:00:55 +0000
Manifest next update: Fri 17 Apr 2026 23:00:55 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: tTDyQha+J8tV5WI1RpvpN1CDdmB7HncmqikG/q7fzxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:ab:c6:3a:03:9b:9e:e6:96:95:97:07:6d:8e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Apr 16 23:00:55 2026 GMT
Not After : Apr 17 23:00:55 2026 GMT
Subject: CN=05e27ba83b564616d465e53f7ba5e8ad666f10dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8d:cb:4d:72:93:58:f1:6f:a2:e2:14:a6:be:
0b:72:05:54:4c:5c:f7:f0:9a:dd:c0:a3:78:96:b2:
dc:20:4f:1c:e9:48:3f:2d:a3:93:64:93:74:c4:49:
20:16:e3:05:68:38:79:1c:63:85:54:26:d2:b7:7c:
41:dd:d4:76:51:22:13:4c:70:be:88:9b:e8:97:db:
02:18:64:37:17:d0:b2:3b:1e:e3:4a:a5:ea:15:75:
a3:a0:0d:f7:18:8d:bb:f1:c9:1c:df:5a:dc:3b:bb:
c3:3f:1d:d2:94:69:6c:08:4f:8e:d8:50:d8:2c:9a:
28:36:b3:78:b9:df:c6:04:4c:64:ad:41:58:d6:b7:
2f:c0:07:2e:9d:77:2d:51:04:3b:62:c0:56:25:a3:
d4:7d:ab:23:db:87:48:87:64:b3:09:63:1d:4e:d4:
07:82:42:20:23:29:65:03:28:8e:cf:21:39:42:63:
61:c1:51:e9:88:d8:30:e1:61:06:f0:8f:cf:dc:6d:
cb:62:c3:cb:93:ff:c7:68:94:b6:67:6e:44:ba:66:
23:56:ee:7e:e8:69:f2:2e:2e:a2:f7:21:49:57:72:
7f:14:53:37:0e:2c:2e:5a:14:b1:cd:b2:8f:db:9a:
80:32:6f:fd:34:43:0b:6e:dc:d3:a6:64:ba:76:de:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E2:7B:A8:3B:56:46:16:D4:65:E5:3F:7B:A5:E8:AD:66:6F:10:DC
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ae:c7:ba:d4:a4:d1:50:30:b3:0d:dc:d3:18:ab:b2:bc:65:
a3:76:45:7b:68:fe:3d:9d:38:67:95:f5:24:a0:3d:24:0b:03:
b2:59:67:8c:dc:a1:3f:e7:68:b7:99:d6:db:59:71:4a:aa:30:
05:db:c2:9d:00:9a:28:a2:23:d8:65:f2:90:72:e5:9c:e5:21:
1f:dd:a7:78:59:cc:8e:eb:50:b0:01:a5:88:ee:91:32:50:b8:
75:a7:53:3b:61:ae:1f:30:e6:55:c4:d3:b2:37:48:0e:ef:33:
1c:0e:f7:83:ec:fb:10:8f:34:61:eb:96:f1:61:98:cd:2b:24:
96:9b:93:ba:60:9e:10:da:6c:36:ee:d1:99:7a:04:2c:40:34:
c5:55:fc:9a:fb:f6:7d:41:66:04:2d:48:bf:50:82:b5:ac:3e:
b6:67:00:27:74:d4:5d:40:07:8a:37:6d:64:fc:83:a6:ce:42:
8b:f6:99:54:c8:b4:d8:28:c1:20:ff:db:1d:e4:12:05:b7:54:
21:42:f0:9e:21:fe:8a:98:4b:76:58:98:c4:b8:b2:c4:94:05:
24:d3:70:2b:52:64:fa:9e:00:3a:77:e1:0b:33:c9:1c:55:10:
a9:be:db:78:76:47:e3:48:2c:7e:b6:81:5d:12:ce:4e:8f:51:
22:04:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:54 2026 by rpki-client