Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: xYPlO/cxL6JarR9W9tVAoqx1r6YErgR8S8tpIuRoFNw=
Subject key identifier: C5:B3:1A:6C:E3:86:5C:EB:07:52:D0:48:35:7C:5F:6E:09:5B:9F:AC
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 019D97E263DCCD82697D2C8A88005AC3B8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 0819
Signing time: Thu 16 Apr 2026 20:01:29 +0000
Manifest this update: Thu 16 Apr 2026 20:01:29 +0000
Manifest next update: Fri 17 Apr 2026 20:01:29 +0000
Files and hashes: 1: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: PHAclCUuqhhbA2VTPA38vuPdn1mz/SK7nVDSeRmStMc=)
2: j0mWI7cQWBCGiDlGDSGVoZj238E.roa (hash: F2Brv8OMMvqFx8gd1Dzz6j6nuO9gaZQJk6LSgnOkIcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:63:dc:cd:82:69:7d:2c:8a:88:00:5a:c3:b8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Apr 16 20:01:29 2026 GMT
Not After : Apr 17 20:01:29 2026 GMT
Subject: CN=c5b31a6ce3865ceb0752d048357c5f6e095b9fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:d4:c5:3f:1a:43:03:d4:54:8a:51:53:36:
f6:4e:c1:a2:7b:2b:7d:f5:7b:f4:c5:2b:bb:2e:ec:
01:56:07:50:a7:b1:eb:04:2a:d7:8e:6a:5d:87:d0:
26:14:bc:a9:16:95:b6:9a:5f:77:bb:e2:b7:52:e1:
19:cf:0a:f1:81:ab:63:7c:1b:07:a0:bc:2d:56:1a:
8d:5e:f7:3d:b6:83:b0:7f:59:bc:0e:b3:91:b0:2b:
f5:77:e4:06:d8:71:16:14:60:15:2c:c6:20:17:3d:
65:f4:72:32:ce:0b:06:39:b9:ab:82:f4:45:8b:b6:
49:11:a9:91:18:ca:5b:06:9e:c9:14:c1:26:a2:99:
87:a8:ba:2f:15:91:36:ac:01:ea:ab:b8:b5:de:63:
b3:b5:32:30:c3:e2:b6:f9:c0:7a:27:8c:b9:a4:bf:
a7:a3:70:58:c8:60:12:95:c7:87:4f:22:43:bd:e6:
93:71:80:e1:35:7e:3e:2c:a9:2a:d5:0a:f9:ea:54:
6a:f1:06:84:e0:b5:3a:58:c5:da:58:2e:eb:f5:c9:
9e:29:23:6c:60:db:1b:e9:bd:53:19:f5:7f:68:20:
df:57:46:3f:63:63:80:53:1d:e2:bb:0b:86:15:6a:
3c:de:1a:f0:b6:41:9e:6d:8a:25:8c:ed:83:bc:57:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:1A:6C:E3:86:5C:EB:07:52:D0:48:35:7C:5F:6E:09:5B:9F:AC
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a4:3b:49:c5:3c:af:35:05:cd:ae:fa:d1:5b:d6:25:43:4e:
b7:f0:24:a1:a9:af:8e:6d:90:ad:67:13:82:3d:e6:1e:0a:76:
1c:f5:75:ec:2d:7e:a5:20:5c:2c:35:c6:42:2c:26:b3:1f:8f:
0e:5f:76:01:1f:ce:66:e3:03:60:d6:a4:a0:85:53:74:47:3e:
3a:1e:63:f3:18:75:15:46:33:08:b0:a5:2c:cd:8d:3b:9d:37:
36:45:0c:01:81:15:e8:71:b1:e8:9f:09:7f:df:c1:92:4d:5a:
66:0e:0b:46:b4:60:7e:d4:7c:5c:12:ac:5f:c6:fe:5c:0b:1a:
0e:a5:6c:79:c3:8d:b8:f6:27:49:74:0d:74:af:e4:1f:7b:d6:
c2:dd:87:f7:27:d0:9b:2f:7c:be:01:f8:cf:8b:91:3d:e6:40:
f1:e7:00:a3:01:f4:a1:66:c6:cb:3f:0a:d5:24:af:23:76:6e:
c7:36:06:00:ed:7f:01:f5:1e:92:58:5c:84:76:75:47:7b:01:
80:d1:4d:bf:62:38:51:bf:e1:4e:6b:e0:05:a3:a7:7f:9d:28:
55:5a:f9:af:51:1b:14:a3:4d:1f:c9:b6:5f:74:18:00:fd:02:
e0:0e:d9:63:08:67:87:4b:29:af:88:42:10:e7:ed:ec:34:13:
a5:9a:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:39 2026 by rpki-client