Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: H1gSsIQQZMO+cgLTz4suSI+7jOzhxSWAOGiaMBP/kvc=
Subject key identifier: F7:1F:7E:17:B8:45:69:B1:22:B5:9A:89:48:1A:54:D3:07:2D:1B:6B
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 019D9C2CAE9CB51AA22ABB86EECD42E196FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 0952
Signing time: Fri 17 Apr 2026 16:01:07 +0000
Manifest this update: Fri 17 Apr 2026 16:01:07 +0000
Manifest next update: Sat 18 Apr 2026 16:01:07 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: s16aQgVAFGwblpv2F/nKl+vPGdU5ifZyfRoTHu+BTZ8=)
2: b757MQvXDSUkc0atEwpcyuKC6YI.roa (hash: RFAcdsiEO0xgN3cYS1sxIjrVlqcw5hgZfBN09N0DhJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:ae:9c:b5:1a:a2:2a:bb:86:ee:cd:42:e1:96:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Apr 17 16:01:07 2026 GMT
Not After : Apr 18 16:01:07 2026 GMT
Subject: CN=f71f7e17b84569b122b59a89481a54d3072d1b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:8e:d0:eb:d6:06:38:56:62:de:3c:6b:6a:
48:04:74:cf:25:51:70:ed:8c:0f:85:fd:23:2d:da:
6f:8f:f4:27:9b:87:38:1b:c0:a7:b4:9b:b0:aa:66:
4e:a9:0e:a9:7b:7c:7d:cb:f0:2a:51:48:a2:5f:a0:
7c:81:bf:94:01:ea:b3:a9:d1:95:da:e7:88:37:59:
4b:e6:01:91:90:36:db:12:86:7b:77:2e:ae:36:0d:
3a:d0:8e:de:85:12:6f:e1:83:3a:6c:bd:36:b9:a8:
80:77:f2:40:fb:de:a4:18:8e:fd:92:30:90:f0:f2:
11:57:c4:8b:f5:0b:f1:c3:b9:15:f9:1b:0c:f1:25:
35:cc:ae:cd:e2:d7:4d:5c:79:47:80:3e:72:37:ba:
85:cb:cc:d2:01:89:c1:4a:92:e8:bb:8a:5a:dc:5f:
21:cd:13:93:3e:fc:e0:c2:8e:df:3b:62:7e:3a:f2:
f4:a3:c4:40:ba:45:97:09:b0:25:85:44:bf:81:84:
e8:bb:e5:d2:0a:cb:3d:36:a6:b6:af:95:dd:30:38:
05:25:91:33:01:f7:2a:ec:3b:a0:a7:8a:84:4e:0f:
1d:4c:e8:98:d5:cb:a3:a5:e0:b6:df:8a:db:67:58:
38:3d:c9:ef:0e:13:84:e9:63:60:f5:04:db:dd:5b:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1F:7E:17:B8:45:69:B1:22:B5:9A:89:48:1A:54:D3:07:2D:1B:6B
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:49:6c:34:28:f4:a9:45:d4:72:84:f5:e6:4f:cf:6b:84:17:
8e:f2:5d:98:fc:69:36:d9:8c:5d:51:92:16:fc:4f:7c:8d:6b:
fd:c8:78:b0:9e:dc:ab:7d:c6:89:5d:10:f8:79:06:f5:e3:b2:
7c:70:56:ba:a7:d4:19:4e:2b:f0:94:6b:2d:59:7d:7f:69:ac:
83:6c:c7:fd:e8:7a:b3:eb:28:4e:86:4a:f1:6e:42:f2:7f:35:
45:e8:2e:1c:c8:75:c9:7f:f3:7d:2e:83:bd:e0:ae:6d:c3:8d:
75:9e:ba:51:9d:c8:ac:a6:70:f8:cb:8a:af:c0:e8:87:d8:be:
ef:af:8f:ea:b2:09:04:41:79:0e:d0:37:46:28:c6:08:f1:d5:
a2:c4:17:f1:7f:ee:93:c6:19:75:af:cb:7b:b9:b7:2c:cd:71:
8a:79:76:b8:c0:57:6d:dd:65:09:5e:4d:ba:fe:30:37:78:39:
df:68:26:0f:fe:dc:3a:1c:17:3a:a8:52:d2:58:c2:68:15:d7:
de:eb:bd:21:3c:c9:05:e8:2e:95:95:9f:23:3f:05:02:b1:db:
17:6b:c5:2e:b2:0a:23:13:c7:b5:26:bf:5b:76:6b:5e:5d:2d:
8c:4e:25:d5:68:c0:e0:d0:f4:59:70:bb:d7:71:8a:72:88:c1:
9d:06:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:46 2026 by rpki-client