Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: 2pEXPx80t6iB2227x3qFyWEXA81+x7PGsQ/KrEreSWY=
Subject key identifier: F3:02:C6:3A:64:CE:CA:FC:7D:60:BC:6E:3C:8D:12:40:5E:F3:47:53
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 019D9B50D1D4232394F383B7AA0083858B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 1290
Signing time: Fri 17 Apr 2026 12:00:57 +0000
Manifest this update: Fri 17 Apr 2026 12:00:57 +0000
Manifest next update: Sat 18 Apr 2026 12:00:57 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: FTRkSFjgNDI6BLLVNy6glyh5riTMJKObsvVZPxMkUeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:d1:d4:23:23:94:f3:83:b7:aa:00:83:85:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Apr 17 12:00:57 2026 GMT
Not After : Apr 18 12:00:57 2026 GMT
Subject: CN=f302c63a64cecafc7d60bc6e3c8d12405ef34753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:33:1d:4f:18:07:63:c5:4e:8c:8d:a2:3f:
5b:fa:b3:cd:b9:a4:53:9d:96:a2:cc:45:f3:fb:24:
71:0e:d2:4b:6a:2f:c4:a4:22:4f:88:26:81:c0:50:
69:62:99:0b:0a:25:4c:fe:4e:f1:6a:cc:ca:d2:46:
22:c2:c0:71:93:e0:8d:f0:52:e7:ee:49:b7:59:47:
62:76:f8:76:72:68:86:7b:50:f3:ae:35:03:18:b0:
ea:e1:9a:74:54:3a:6c:73:59:17:31:18:53:62:41:
b3:0f:1b:95:74:01:cb:7b:fd:a1:b2:f3:a4:4e:38:
1a:05:7a:79:4f:ec:30:49:51:ec:eb:5b:bb:7a:d6:
b4:74:fd:59:e1:e2:4b:dd:da:cf:8c:e6:01:27:e3:
bc:60:f8:6c:c4:f4:73:31:6f:b2:c2:da:df:38:e8:
8d:05:c4:18:2a:5a:db:85:e6:cf:db:a4:ae:20:8a:
30:c7:91:1d:e4:25:9f:89:22:30:ba:70:92:93:df:
59:60:7b:d2:08:c0:bb:31:ab:72:77:06:42:42:11:
a1:c9:16:a2:b0:13:79:38:06:0c:87:f9:fd:a2:af:
d0:b3:5c:25:26:36:fd:7d:d8:b8:e8:30:09:28:eb:
64:a0:ef:a6:ae:6b:64:66:e6:99:b6:f6:c8:53:8f:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:C6:3A:64:CE:CA:FC:7D:60:BC:6E:3C:8D:12:40:5E:F3:47:53
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:95:40:88:48:2d:45:15:d9:d3:28:af:ce:97:88:00:0f:0b:
33:05:aa:5d:cd:e5:b0:18:18:cb:f5:3f:31:5a:4a:25:9a:22:
93:dd:ed:72:bd:4e:9e:94:13:c6:81:42:05:86:f2:29:7b:47:
95:e2:af:7a:e5:70:b6:34:d3:e5:a5:77:57:b2:bd:b9:96:09:
6f:d1:e1:c6:52:ff:fe:35:6d:99:4e:6a:63:d9:05:ff:c0:f8:
74:ad:7e:14:0f:80:58:73:81:a8:57:73:b2:ee:a5:a0:d0:5f:
cf:9c:9d:2a:38:95:51:05:9d:12:34:ac:26:d4:95:9b:ee:61:
cc:28:16:25:ea:c3:d7:9a:57:cf:82:80:a7:43:86:ba:d2:9f:
64:f2:d1:50:cf:9f:ea:00:96:fb:36:80:9c:52:27:06:72:9c:
91:77:4e:db:9b:4f:66:62:a8:93:fd:fd:a7:9c:ca:04:5e:de:
12:1b:4f:88:3f:48:52:4a:7d:e0:32:03:b7:33:3a:ff:4c:cd:
6d:4f:23:76:7a:bc:5b:00:a9:f2:30:32:25:41:1d:f0:9e:31:
16:74:5b:f5:2b:65:69:29:91:c8:ae:44:2e:41:ae:1e:ed:16:
8b:47:f1:7f:4f:b2:ac:ef:7a:a1:61:08:40:14:40:3e:bd:1d:
14:4c:8f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:04 2026 by rpki-client