Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: qmtJxThCRuPB+E23gDqrsj9s9UqlTaYs2UN3NmXmFP4=
Subject key identifier: 0B:F4:10:59:D7:9B:AC:93:18:F7:7A:D0:DD:D3:D1:6F:86:DF:E3:B8
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019DA3AEF0381792D538C1C49A22FCDC861A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0CAF
Signing time: Sun 19 Apr 2026 03:00:44 +0000
Manifest this update: Sun 19 Apr 2026 03:00:44 +0000
Manifest next update: Mon 20 Apr 2026 03:00:44 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: lLaPcygFYqjEmm5sA065VQ4I7hVuQ7p7rAgbAqJplG4=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:f0:38:17:92:d5:38:c1:c4:9a:22:fc:dc:86:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Apr 19 03:00:44 2026 GMT
Not After : Apr 20 03:00:44 2026 GMT
Subject: CN=0bf41059d79bac9318f77ad0ddd3d16f86dfe3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:3a:9b:f8:69:1b:03:a5:14:e8:9b:5a:13:
7c:e0:ce:9b:6f:a3:31:81:69:cb:d6:f9:9c:7f:6a:
ab:0c:47:1a:e5:48:b9:f7:a0:78:09:8d:28:07:6c:
f2:35:f8:98:9c:3a:b5:d7:2c:a4:8b:cc:f5:98:59:
69:b4:e8:20:07:97:51:23:42:8f:4d:77:42:86:39:
f9:20:0a:03:e9:6d:6a:67:5f:cb:3b:c8:d0:e1:a9:
c0:74:12:e4:56:9d:00:18:13:90:4b:85:95:ef:d0:
d5:96:b1:bf:90:16:0a:8b:bc:cd:f9:d0:a4:84:62:
34:5f:5e:23:bc:6c:b7:cd:cd:e3:fd:03:c3:bb:d9:
89:15:54:48:54:b3:cc:7b:49:b4:1e:19:20:3a:e6:
7d:3e:f3:0f:d9:9d:be:3f:5d:2c:ce:15:6a:df:7b:
49:b5:dc:f4:82:64:99:00:80:5d:5c:40:91:f9:bc:
eb:37:6a:8f:77:43:3e:3a:cd:ee:d4:3d:bc:5c:63:
03:be:2f:d8:70:82:f8:bc:ee:c5:c2:f8:c9:09:a5:
17:b7:26:7d:b6:67:d3:70:b9:2f:e6:6d:ff:65:7b:
58:a6:f7:98:37:49:48:ff:7d:94:e6:e1:a4:ac:03:
79:2a:22:39:33:cd:21:45:3a:18:49:59:f4:59:c1:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:10:59:D7:9B:AC:93:18:F7:7A:D0:DD:D3:D1:6F:86:DF:E3:B8
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4e:c5:11:3b:a6:c6:f7:f7:9a:f3:1f:6e:2d:ff:d7:4e:5c:
a4:06:b5:9f:9e:63:02:b6:d3:99:a7:a5:60:1d:f4:81:de:c0:
0a:d8:cb:73:88:9a:6d:2e:1c:4d:b3:08:0d:e5:6e:7b:05:77:
07:7a:7f:b5:a4:25:96:0f:07:b2:d1:ed:71:d8:8e:63:d4:0a:
ab:b0:9e:36:f1:e3:2c:1a:b2:af:ae:86:61:0f:30:16:8b:2e:
39:fe:f4:7f:b5:68:6c:f8:c5:55:a0:a5:b9:24:24:7f:ad:86:
9c:b8:56:25:10:a3:99:ab:74:b5:00:10:1d:7e:47:56:33:5f:
47:1b:c4:2c:b3:24:45:2b:4d:9d:cc:04:47:12:d5:d9:0d:f2:
c5:5f:cd:8c:ec:65:d5:3e:7c:9c:f6:72:36:0b:d7:72:2c:d8:
aa:69:b2:24:c1:2f:b6:7f:bc:11:24:ca:ef:29:72:ab:61:ab:
d2:4d:7b:a5:02:02:42:09:ad:8a:46:f3:e3:1f:be:8d:b0:0a:
8c:62:e3:b9:30:f6:e8:67:91:a9:0b:e1:f2:98:f5:19:09:26:
9d:1e:d8:88:37:90:cf:3a:df:c6:e2:3b:38:02:ed:6d:b8:db:
04:d9:6e:1a:6d:22:cd:59:38:ec:18:9a:86:2e:e1:5d:86:da:
40:9f:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:44 2026 by rpki-client