Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: xXjRPjA0aZJ2tMrk3d8qn76GlXnpKaarcq3SjIcKE4g=
Subject key identifier: A1:B3:AA:32:4C:20:00:A5:22:78:DE:34:18:74:56:9C:28:92:0C:DA
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 019D9A070C1D919E90DD140476207716CD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:46 +0000
Manifest this update: Fri 17 Apr 2026 06:00:46 +0000
Manifest next update: Sat 18 Apr 2026 06:00:46 +0000
Files and hashes: 1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: OIiO2KNv1rtBP2RXsHGYx+/LkA2V5Wvzlbn73Za0vV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0c:1d:91:9e:90:dd:14:04:76:20:77:16:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Apr 17 06:00:46 2026 GMT
Not After : Apr 18 06:00:46 2026 GMT
Subject: CN=a1b3aa324c2000a52278de341874569c28920cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:74:63:ec:e5:16:60:3f:8f:00:30:b9:e8:
ed:ad:5c:25:1e:e1:df:75:27:99:f8:9e:2f:ef:7b:
de:26:68:8c:ad:55:12:ff:51:9c:d7:99:87:80:58:
5a:79:3b:60:48:05:cc:37:3a:d6:73:52:b5:86:15:
92:a8:12:47:fb:cc:9b:10:6c:9c:9e:bf:91:bd:49:
5f:2f:10:f4:90:6f:ff:9c:28:48:4e:c0:a4:0b:e7:
71:3a:16:81:18:71:9b:88:f7:06:a9:56:03:8d:7f:
05:4f:fd:16:d4:df:4e:47:39:46:c6:a0:a9:e6:70:
51:b5:2e:f0:b8:87:15:93:8e:aa:82:e5:7c:7f:7f:
ee:ce:78:ec:c7:6e:af:02:b3:b6:a8:2a:c9:dc:d2:
d1:9e:62:b3:eb:62:3b:93:07:ff:18:20:61:a5:68:
ab:b9:ac:b9:d1:7e:14:af:3d:ea:23:13:d9:92:7b:
43:54:e3:8e:09:e9:12:de:59:3c:97:cb:c7:75:91:
2b:93:4a:aa:09:9f:87:70:1e:af:62:c6:98:39:f0:
56:01:99:2b:22:b5:ee:72:c5:bb:c6:82:96:98:a4:
cd:a2:7c:71:35:0e:07:3e:a7:ee:7d:13:2a:8f:e3:
c8:0e:9b:aa:1c:61:20:54:e3:b4:6d:c1:4e:f3:27:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:AA:32:4C:20:00:A5:22:78:DE:34:18:74:56:9C:28:92:0C:DA
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:55:1a:40:44:c8:cf:97:23:76:b7:7b:c5:8f:d3:59:91:75:
6e:1e:c6:a2:4e:d3:de:6c:84:17:69:02:bd:c3:f2:6a:c7:bf:
d6:54:4b:06:a8:04:fc:91:9a:ee:39:95:b8:84:f9:94:fc:6e:
9d:e1:c7:2c:ee:9d:17:06:98:56:d2:26:21:c4:1e:df:7e:e8:
1e:ab:86:ed:32:d2:52:35:f7:c5:a4:af:dd:9d:15:ad:19:a8:
1b:d1:b4:69:24:31:9c:de:71:8f:0d:0f:3a:75:ad:ef:99:20:
a7:e1:05:c0:1b:ad:c3:d1:49:e4:77:c6:af:3b:4c:15:c2:f1:
43:d7:2d:10:de:72:0f:aa:01:6f:fc:b4:22:d0:3f:0d:7e:22:
d5:ba:f6:0b:19:b6:ee:d2:2d:ab:2f:dd:84:47:16:c8:5c:14:
07:21:57:f8:9c:8a:17:a9:91:b3:d4:2c:84:9c:38:90:fd:11:
b4:92:e8:98:a8:67:94:74:c1:69:c4:63:07:9a:8f:be:cd:9b:
ba:6f:f2:5d:bc:51:76:d6:ca:7e:b0:07:ca:90:85:d1:76:d0:
e1:08:c9:ad:9d:90:64:5b:67:f1:d5:96:79:69:1d:98:e5:36:
a7:0a:59:b0:b7:0b:c8:02:04:84:78:8f:be:ac:56:e7:fc:4d:
51:c3:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:12:56 2026 by rpki-client