Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: ktFTHfxOr0M4/2/JaKcnpL0Bi1hYyHQltgAXjnbM1t8=
Subject key identifier: 53:0B:DE:99:4F:65:37:C6:C0:0A:B7:78:BE:75:03:A8:E8:9A:5D:D7
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 019DA41CD367787285FF91CAD6F9E87C6A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 1858
Signing time: Sun 19 Apr 2026 05:00:45 +0000
Manifest this update: Sun 19 Apr 2026 05:00:45 +0000
Manifest next update: Mon 20 Apr 2026 05:00:45 +0000
Files and hashes: 1: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: U/kfXWANOQxfxK0j6gZD+LbQ0M2+VCU3om4ZwP5xIq8=)
2: z8ur_dlixhHr86qHsQK2VwEFLVU.roa (hash: wwiX0Abxg7HH3i+7n0HaT1GyWyASGat8jETXDQw59Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:d3:67:78:72:85:ff:91:ca:d6:f9:e8:7c:6a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Apr 19 05:00:45 2026 GMT
Not After : Apr 20 05:00:45 2026 GMT
Subject: CN=530bde994f6537c6c00ab778be7503a8e89a5dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:50:94:10:99:73:9a:fd:a0:01:44:d9:49:
d9:6c:b9:5d:a0:ad:f3:f3:37:ef:53:03:7f:7b:b2:
b6:fe:c1:ad:32:7c:04:64:8b:7e:6b:5b:2b:b6:30:
10:96:6e:bd:50:51:32:62:77:a6:32:6a:6f:5e:00:
b0:15:b4:9c:9f:1e:b5:36:dd:54:21:6b:16:0f:20:
6c:6e:b2:da:ac:d5:5d:10:6a:f6:7e:8e:8a:73:cb:
8a:89:f3:63:26:e5:14:60:70:20:10:ee:11:1b:ef:
df:da:0f:c7:da:03:73:b2:d3:3d:be:a3:98:04:17:
16:6d:d4:36:a5:30:a7:17:6f:82:7d:3d:fa:5b:f0:
40:2c:b0:7a:c5:9c:68:d1:18:1d:20:98:9e:0e:d9:
c3:80:07:e4:2d:d1:db:0c:58:c4:d8:b6:36:52:f4:
40:ab:a8:0c:fe:79:7d:c0:38:5c:7f:c9:31:42:2b:
a2:2e:44:32:8c:eb:0b:52:af:67:22:5d:d8:ec:03:
f3:cd:89:25:d3:c6:21:bf:f3:8c:47:69:eb:f2:c2:
ab:3c:d4:9e:4a:63:18:59:31:b9:c2:d1:da:d8:01:
7d:1a:b1:ef:7c:bf:90:33:bc:69:98:20:2d:4e:9f:
2b:a2:eb:40:e7:3b:76:69:29:69:08:27:35:02:60:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:DE:99:4F:65:37:C6:C0:0A:B7:78:BE:75:03:A8:E8:9A:5D:D7
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:f1:28:9f:b7:65:6f:78:fe:0a:36:48:7d:54:44:12:c7:
5f:fb:21:46:98:73:2f:03:75:06:a8:5a:36:c7:c2:cf:c8:e6:
01:21:58:96:c7:b0:54:c5:5a:26:36:dc:77:06:e0:57:2b:92:
fe:46:d4:9c:03:1a:cc:be:06:ad:34:5b:01:cb:af:ce:d0:0e:
82:9c:6a:91:f6:ce:3d:d0:58:0a:a9:02:9c:61:b1:99:18:9e:
05:4d:94:80:6e:d4:7a:cc:1e:90:c7:f4:7a:3f:e5:6c:81:52:
80:ee:e4:ac:c6:fe:8f:77:63:b4:76:f7:2f:ef:2a:51:3c:14:
fc:e4:73:7a:f4:69:ba:5f:ab:82:ea:c4:9d:fc:03:5e:a1:84:
05:32:55:4e:c3:c0:51:1d:ad:ca:45:ee:95:c7:81:82:e0:2d:
a2:21:7a:be:89:26:6a:00:e0:49:ed:06:60:df:71:9b:3e:44:
cc:74:58:83:9e:42:09:66:1b:d0:3e:b3:0d:24:38:be:8f:d1:
c6:01:b9:50:6d:61:2d:db:32:19:57:8c:88:30:27:e2:44:d0:
d2:5c:4e:ae:4c:a5:5f:cc:c6:fb:d2:38:aa:da:cb:20:d0:ac:
16:85:7e:b6:53:e0:69:c2:db:44:7f:a3:1a:4d:a0:34:cd:27:
ee:b2:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:38 2026 by rpki-client