Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: 9MElM9+xYfwUH8ibhwcIXz5kYJs56C4R/3eM2ZWng98=
Subject key identifier: 3A:CA:E2:5A:FA:5D:AE:6B:63:BA:B8:2D:DC:50:00:DD:87:20:67:4E
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 019D99D0A35AB45F765E6739B7478AE26248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 117F
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: UZseksy0uhuo08VXcgnfylQC3DI.roa (hash: WI6osdG7JdUaHymm4KYLyMVR4pGV77Pctw9oWtJpBZw=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: 1S7z1+JEl+fOmH2PHSrt9mDxcTfVTFQkkNv4kxBmifE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a3:5a:b4:5f:76:5e:67:39:b7:47:8a:e2:62:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=3acae25afa5dae6b63bab82ddc5000dd8720674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:05:e2:55:08:02:a0:46:66:14:ef:b9:c9:
86:1b:c9:24:9a:b7:72:76:c3:eb:7c:94:24:8d:f7:
b3:80:14:8b:1e:f4:db:99:73:86:51:dd:71:2e:63:
5d:ac:db:0c:37:c5:4e:d5:4f:9a:b1:70:45:83:50:
91:81:97:23:df:67:8b:b6:70:4c:cf:c8:33:fa:e1:
26:fe:10:b1:2c:65:83:df:d0:d5:4f:c9:55:f7:c2:
1d:b4:24:4a:e7:db:9f:f9:db:c1:d6:ea:25:60:4d:
04:88:0d:db:e3:e5:cb:ca:07:07:dd:f6:bd:ee:a3:
58:86:99:91:20:2f:1b:c1:45:51:51:6e:c3:e0:f5:
16:ab:b4:9f:9a:5f:cd:9e:74:d9:3a:fd:58:dc:03:
b5:0f:da:0a:e0:fb:f0:98:92:73:c5:73:b5:a7:79:
81:0d:82:c6:fb:7f:2b:60:57:62:db:ea:f6:86:7c:
82:fb:60:78:14:55:16:5b:97:ca:c2:8e:dc:42:09:
7b:4d:b3:ff:92:d2:2f:42:bc:6d:6c:aa:b9:9a:3b:
e7:4e:00:7b:73:31:8e:47:55:ae:6c:0c:c2:d1:98:
c1:6c:1f:57:a9:a2:fe:11:ed:ea:05:fc:c5:7c:28:
4c:ce:16:d3:21:a4:d7:65:2e:10:9f:ba:fd:c4:97:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:E2:5A:FA:5D:AE:6B:63:BA:B8:2D:DC:50:00:DD:87:20:67:4E
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:94:d7:78:79:b3:de:47:76:95:17:d0:e6:73:03:94:b8:a4:
6d:dc:43:89:f8:ac:62:9e:8a:cc:36:5f:0b:c3:15:18:5a:f9:
55:d8:ca:27:97:10:82:8b:c0:74:7e:c7:c4:b9:f2:1e:45:ea:
70:3c:d9:6f:84:cf:ec:3e:dc:56:cb:4f:82:55:f6:1f:05:97:
fd:b1:b4:13:28:d9:8e:80:1a:9d:20:77:e4:cb:ef:70:19:56:
95:ff:0d:72:f5:f0:6c:a2:8c:cd:ac:c4:93:31:47:4a:3e:dd:
d5:6c:d2:15:f0:5d:fc:d3:75:d7:36:2b:be:e6:f3:6d:36:38:
46:a0:46:e9:84:b5:65:18:3d:fe:79:6a:ca:46:8c:f9:ff:17:
a6:9e:6f:a1:71:57:3b:35:fd:43:87:2c:a7:da:13:d6:de:d7:
35:e2:16:bc:a5:7a:0f:52:f3:17:a1:b5:7a:22:2b:72:b7:19:
19:65:ed:81:7c:98:81:db:ad:f9:82:71:8d:ba:09:b2:32:66:
15:26:c3:5d:8d:5b:74:47:9a:dd:57:7d:80:18:02:61:53:25:
63:81:6c:6a:a9:30:89:1b:2b:2b:62:5d:e3:46:d2:5b:0a:64:
dc:6a:b8:93:8c:b6:27:02:ed:f4:55:24:53:35:b7:40:b5:e1:
97:58:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:14 2026 by rpki-client