Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: ICCal5BpfTJJwm/Wd6+lhMNrarBy7og33xJrWa/636w=
Subject key identifier: 8E:C8:C5:3A:1C:5A:DA:E6:D5:32:2B:09:BD:57:69:37:38:A9:4E:BF
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019D9A075F6A53E9FEC2834FA2A9F5C2C28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:01:07 +0000
Manifest this update: Fri 17 Apr 2026 06:01:07 +0000
Manifest next update: Sat 18 Apr 2026 06:01:07 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: gL7r4Tp8pXw5jj3KG8IHOXMt0WWV8dFf2XLBmeXY9Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5f:6a:53:e9:fe:c2:83:4f:a2:a9:f5:c2:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Apr 17 06:01:07 2026 GMT
Not After : Apr 18 06:01:07 2026 GMT
Subject: CN=8ec8c53a1c5adae6d5322b09bd57693738a94ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:c2:93:fe:b9:6a:25:92:40:99:ac:4a:f8:
81:de:16:2a:54:56:4f:69:77:e9:44:67:a1:67:65:
7a:78:cb:76:6c:46:fa:1a:f8:d5:f1:32:fb:53:ba:
92:d1:27:50:a9:a7:81:57:8f:dd:30:87:cd:a7:a4:
5c:0f:4f:88:ce:7b:91:3e:37:0b:1f:4d:99:94:84:
33:39:a1:b0:f8:d5:cf:a1:65:46:da:ae:ed:8a:9f:
4d:51:f3:4b:44:92:87:d6:ef:cc:ca:31:60:45:a9:
84:fe:4f:e0:e2:c7:4b:ae:7a:b1:b1:76:70:4d:8c:
d9:0d:8c:5b:4e:d8:67:68:28:74:56:73:ba:4c:67:
a1:a8:b9:da:2f:ef:18:9b:11:96:7f:0d:e3:1b:95:
a6:bf:48:34:17:6c:93:72:52:0e:9b:9d:09:e5:37:
c0:af:7e:1e:bf:2c:ec:6d:5e:79:30:a9:43:c8:89:
e9:39:ab:03:02:2d:ea:2f:23:a0:22:b2:cb:b3:f1:
92:18:4f:b4:e8:d2:6f:07:2b:20:ed:bc:f8:e0:a0:
e8:c0:8b:bb:98:38:bb:b9:60:57:b5:7f:e1:d9:bf:
88:4f:d7:2b:97:a0:c5:9a:eb:aa:9d:f0:61:86:95:
ae:94:d6:5d:89:40:da:fd:8d:6f:0a:b8:46:69:2d:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:C5:3A:1C:5A:DA:E6:D5:32:2B:09:BD:57:69:37:38:A9:4E:BF
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:40:fe:4f:57:19:96:b8:0e:22:9f:1b:c3:8b:97:17:20:b4:
20:f4:99:7b:fe:10:2a:0b:dd:94:8a:53:91:db:df:71:37:a2:
a0:66:e4:ec:81:3e:d4:3f:c1:f1:fb:20:82:85:20:d3:b9:f7:
52:b4:62:e8:77:c3:5e:0f:88:49:00:4a:69:aa:7c:78:7b:ea:
45:8a:ce:97:c1:27:f8:03:f0:62:18:1d:fe:ec:96:13:5a:79:
d0:50:db:73:a6:7c:79:47:35:1a:9c:92:0a:98:c8:18:61:ea:
9a:f2:90:b3:c5:84:dd:84:d2:35:d2:60:71:2d:e3:98:19:f9:
a3:d7:5f:49:13:de:9d:08:a5:46:50:7a:6d:5f:50:27:fc:11:
91:c6:be:a4:02:3d:8f:1a:8f:c1:0c:03:3c:a0:fd:58:d8:46:
7b:28:da:f8:a6:a6:f4:de:3f:a2:87:38:6a:6b:89:7a:e0:e7:
bc:60:99:f8:e1:e9:2e:90:7d:62:e6:8d:58:88:63:5d:73:a3:
11:98:19:a1:f9:b0:78:bd:02:d8:46:f9:c9:bc:a1:90:78:58:
42:cc:b1:fe:93:b6:73:92:e3:ee:d6:c4:61:78:ce:50:ec:82:
e2:e5:7c:75:05:44:bb:fd:2b:73:3c:39:e6:0f:9e:e4:af:cb:
4f:51:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:24 2026 by rpki-client