Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: JE3nIhVx/WO3xUdIjv2/4wJrlkwTbCkLpmfwBRKqQv0=
Subject key identifier: E1:0A:EE:D7:D0:1B:0E:76:90:FA:60:77:65:95:81:85:C4:CB:DE:75
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 019D9A74E1C8EC24FBD26B978B2AA8AF81CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 1575
Signing time: Fri 17 Apr 2026 08:00:44 +0000
Manifest this update: Fri 17 Apr 2026 08:00:44 +0000
Manifest next update: Sat 18 Apr 2026 08:00:44 +0000
Files and hashes: 1: D4mNPYe_InC3dADZ__TafnXmCbA.roa (hash: 6g1alEqsAaujZY20/+cKTFN3EVqBFkIkRy8k+84+qhk=)
2: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: JY0FWDZMhj82/72UedMFC8Qi6MdPe8mp0frlOeEpOw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e1:c8:ec:24:fb:d2:6b:97:8b:2a:a8:af:81:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Apr 17 08:00:44 2026 GMT
Not After : Apr 18 08:00:44 2026 GMT
Subject: CN=e10aeed7d01b0e7690fa607765958185c4cbde75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:f0:42:ef:7d:a9:65:ba:3b:5e:75:95:62:
98:5d:ef:95:93:83:e9:d5:45:6a:f7:d6:41:8b:4e:
47:ff:51:b1:21:36:d3:d1:f9:73:5d:e7:c6:18:e5:
74:8f:65:46:16:9e:7a:85:fa:b9:b8:25:b8:17:0f:
4e:ad:b6:c9:53:41:be:d5:39:23:71:2f:d1:df:1c:
9f:c8:8a:a0:7c:82:5d:da:5c:41:ab:86:e1:04:b0:
1d:55:9f:80:1f:48:8c:0a:ff:c4:65:df:b1:7a:17:
0d:69:d4:e5:2e:98:cd:f2:77:92:b4:c3:3f:db:fe:
66:e2:13:bd:13:96:71:06:9e:8f:60:3c:6f:ee:91:
e9:f7:e3:28:59:f9:c6:05:d9:51:d1:51:19:94:eb:
68:f5:04:35:8b:15:e8:a3:4c:ac:94:dc:89:20:87:
b4:01:55:34:6c:b2:cc:22:e9:cb:66:78:67:be:8f:
20:98:7b:6f:b8:0e:0c:38:9e:f2:fd:06:8f:7a:6b:
db:4d:20:d7:b8:cc:7d:52:49:68:bf:8a:f0:5b:31:
3f:27:22:d4:7f:cd:9d:92:8a:7a:dc:5e:17:18:66:
2a:3d:15:a7:3e:95:1b:8b:a4:45:50:fc:db:8d:c9:
13:b3:0b:79:09:0e:24:4e:50:02:78:9e:3d:74:d9:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:EE:D7:D0:1B:0E:76:90:FA:60:77:65:95:81:85:C4:CB:DE:75
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:95:0b:52:08:c4:7f:5e:38:55:88:3d:6a:bd:0f:98:f9:
33:f4:ca:72:63:c7:16:a3:62:37:88:1e:a2:35:3e:ff:29:10:
8c:5c:3d:d3:f7:74:b6:92:c1:c0:a6:0d:e4:90:9c:16:4a:ac:
0b:9c:89:a9:81:22:6c:3c:40:69:b3:d1:ff:87:f7:8c:ad:28:
b9:e3:de:71:c9:fa:54:5a:6a:95:89:55:78:0d:71:51:5d:af:
b5:9e:fd:a9:dc:d3:85:08:c9:eb:7e:66:16:ea:77:b9:92:3a:
5f:83:0a:7b:ab:f2:86:92:77:54:af:03:52:2b:43:cc:9e:f2:
cb:9f:f7:bd:eb:4d:7a:1e:df:92:15:9f:a1:c9:a3:97:0b:5e:
b9:26:b3:49:1b:5c:45:bb:b9:40:98:02:55:eb:8d:26:7f:98:
e3:c2:48:6a:2f:d3:79:bd:20:1e:4b:2d:86:e4:96:98:c9:51:
2c:84:94:5f:48:17:93:e2:dd:6d:f6:31:d9:e7:cc:d0:a8:a0:
d6:af:29:8e:ae:7b:93:b5:4a:5a:6d:c4:a0:fe:e1:12:c3:94:
74:41:9c:15:39:ce:ae:be:50:2d:3b:ae:6b:fa:56:04:8d:5c:
2d:2b:dc:1e:78:c7:2e:69:b2:08:4d:57:74:0b:f6:0f:9a:6d:
39:20:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:40 2026 by rpki-client