Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: W2P6g8295SCydDZgNH0nIzoUuY6PMhMue0/TQUk2U/Q=
Subject key identifier: 5D:7A:D5:CB:2F:08:B2:26:F0:21:E4:AD:7D:A6:C4:7E:A9:4C:5B:7C
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019D9998CEE846EBACC48C8AF71CFBF6C12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0C58
Signing time: Fri 17 Apr 2026 04:00:21 +0000
Manifest this update: Fri 17 Apr 2026 04:00:21 +0000
Manifest next update: Sat 18 Apr 2026 04:00:21 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: 6uCcqEPSosqKE3HE84d4jXUUmAwrP2qBuX7Nfa0xD5o=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ce:e8:46:eb:ac:c4:8c:8a:f7:1c:fb:f6:c1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Apr 17 04:00:21 2026 GMT
Not After : Apr 18 04:00:21 2026 GMT
Subject: CN=5d7ad5cb2f08b226f021e4ad7da6c47ea94c5b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:90:0f:65:68:5e:6f:bc:27:5a:49:cc:fc:e8:
f1:36:42:86:f4:6d:56:d7:63:cc:2b:bb:16:2d:5c:
e9:c3:e4:59:c9:d6:f7:5d:81:6f:6e:e9:d2:1d:88:
44:52:3f:d0:26:2d:8b:86:26:06:f3:c5:c9:a9:b8:
dc:9c:37:8f:20:de:27:23:37:df:a0:24:d7:d4:c4:
a6:e3:6b:ef:9e:c6:44:c8:04:4a:3a:92:0a:40:1e:
58:21:3c:c2:86:88:97:0b:d1:89:32:25:e0:3f:27:
9f:e5:2a:de:ab:11:17:94:62:41:fb:f7:b7:29:92:
b6:af:35:0c:b3:a5:3a:9e:ca:12:97:50:8f:34:05:
0f:04:65:55:9a:e9:0e:73:bf:dc:fa:bc:95:9a:1d:
46:e1:c8:f3:39:26:94:a0:db:c6:d6:e6:65:29:56:
c7:2f:87:aa:14:f0:ca:29:89:2e:c1:c8:85:c7:4f:
29:57:18:09:1d:55:26:d0:81:9e:e4:1e:f9:33:4d:
48:4b:4e:91:79:e6:7f:4d:99:2a:69:52:1c:0a:c1:
ab:d2:34:ab:9a:11:b1:f9:48:b9:64:30:ba:93:f2:
c0:c8:36:82:bd:ab:8f:75:b8:e7:08:98:ff:66:63:
09:0a:7f:2a:17:dd:78:a2:f1:4c:df:29:a0:85:1b:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:D5:CB:2F:08:B2:26:F0:21:E4:AD:7D:A6:C4:7E:A9:4C:5B:7C
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9d:4a:b3:a3:d0:7e:91:38:1c:4a:bb:db:2c:f7:d7:64:b3:
cd:69:9d:8c:bb:1d:87:63:b8:58:88:ec:2c:c3:93:4e:1e:24:
92:f5:cc:e8:89:ac:b8:09:b1:e3:ae:64:6a:65:d2:5a:b6:35:
d3:dd:01:21:d8:58:84:62:88:f7:c5:52:f6:46:61:44:59:d8:
ca:09:8e:c9:4b:a2:dc:c3:ba:76:61:db:e6:dd:e4:98:2c:59:
33:1d:d5:f8:60:c3:a1:d4:97:17:01:3d:e3:7b:7c:b8:85:3b:
de:97:28:18:28:07:29:b8:b7:d5:2c:d8:62:ff:90:ae:e9:a0:
4d:26:d2:d3:67:0d:fc:27:4b:08:71:44:a8:94:ab:4f:f5:99:
79:b4:8d:42:62:cf:6d:6a:c6:96:9f:b6:84:a1:5c:f0:24:f7:
af:2a:fb:d0:f2:ae:a6:7a:d2:8f:fa:25:e1:0b:4e:60:f8:87:
17:27:de:b1:c6:0d:67:f7:90:2b:4a:60:e2:b9:46:2a:27:54:
1b:55:f0:09:40:25:a5:45:81:f3:8e:24:fb:73:85:19:4c:db:
e5:3e:8d:18:c9:da:93:9d:19:e4:5d:ff:c4:06:5b:99:62:22:
53:b5:23:e5:12:19:9a:97:ab:95:8f:a8:9b:d0:ab:9c:92:89:
3d:f6:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:26:41 2026 by rpki-client