Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: uXRyunF36EPXm5Nq4hm7z+p/UtjZrumCPgfhpmNBt+0=
Subject key identifier: 81:05:90:19:0C:B0:44:3C:B5:89:23:F7:16:7A:B6:4D:E5:B9:16:8D
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019D9A74AB6149E206417AF9B9CF9B60D7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 15CB
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: B2RE2/vh112hqwvdjlZveeL5/dWAqzO6nMoMajA+M24=)
3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ab:61:49:e2:06:41:7a:f9:b9:cf:9b:60:d7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=810590190cb0443cb58923f7167ab64de5b9168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:90:97:51:81:63:f5:c0:a2:4f:91:5f:b7:ad:
60:1c:09:6f:76:cd:9d:78:af:de:1f:d6:e0:ac:e4:
0c:d9:6c:d6:63:68:84:ad:c9:63:d8:f5:96:ba:45:
22:cc:58:e6:ef:15:e4:7e:e3:d5:fb:13:3a:b0:bb:
6c:df:21:2b:99:09:bf:8f:26:84:54:b9:2e:ba:f0:
f4:b0:9e:8f:5f:f3:cc:dc:4a:11:46:00:f3:72:a4:
a8:24:e3:ce:15:11:dd:8d:97:24:1b:54:48:39:bb:
6c:7c:5e:6b:8c:59:2d:fb:c4:e4:f3:d2:f4:8a:7d:
24:06:a6:fc:1e:4e:34:03:49:27:25:43:ac:ca:40:
83:f2:57:ca:fb:9d:54:ca:5c:f8:fb:e5:8c:02:c8:
57:9d:f7:5a:16:97:66:b2:94:d7:77:56:59:68:50:
51:68:80:81:98:fa:78:4a:ca:ca:98:0b:46:a2:b3:
e9:c0:e9:32:ca:33:3a:44:cc:c3:5b:b0:bb:56:5d:
da:ea:6e:53:da:6e:6f:4a:5a:65:05:c9:20:27:01:
16:61:a0:88:8c:99:ae:5d:70:09:1d:a6:60:b8:46:
64:7b:87:85:0c:a8:d2:34:32:b1:ac:2d:5f:12:5d:
06:8a:75:8b:e4:6e:86:80:78:48:a4:11:7a:90:65:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:90:19:0C:B0:44:3C:B5:89:23:F7:16:7A:B6:4D:E5:B9:16:8D
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:99:47:bb:b1:1c:b7:c5:e8:96:f4:9f:73:55:d9:ab:61:
f7:0a:2c:54:f8:15:be:ae:e7:c0:8c:34:54:b7:0e:c9:91:a2:
7d:dd:d0:51:cf:c8:16:ac:28:8f:64:a3:f9:85:8e:e7:e4:7f:
da:09:ad:8b:2d:16:91:53:05:04:c6:25:9f:59:06:04:32:d8:
e3:72:10:7e:dc:f9:f7:16:9c:b1:e5:73:a1:6e:ac:52:08:e6:
86:6c:a7:38:97:13:34:10:26:8d:e0:11:dd:13:7f:cc:6a:b1:
36:2e:39:e9:e9:38:fd:68:ad:94:90:45:a4:31:b6:7c:bf:f6:
62:65:d3:6c:7b:53:53:fe:ab:49:c9:b1:e9:15:0c:a5:a9:07:
f2:75:31:6b:3c:84:8b:92:c1:f8:52:d9:9b:bc:f0:b8:4b:85:
ae:29:a2:5f:a4:2e:4e:e1:aa:89:36:be:9e:76:d7:f1:74:24:
4d:34:d1:85:75:73:ad:d7:46:dc:61:96:9a:74:3f:fa:7e:94:
06:bb:26:14:67:f6:32:bc:0f:c2:68:6f:41:a4:f2:4b:21:e1:
fa:bd:4b:7c:45:c7:b1:a1:37:7c:3b:eb:81:25:41:4a:c5:d9:
a0:d7:72:aa:9c:2a:15:54:ed:7f:42:0d:a7:02:13:2b:33:33:
db:d8:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:09 2026 by rpki-client