Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: kLjYzkbm1zZaQjUNoJqk3k57YudF+pxpevZs9+V55C8=
Subject key identifier: C9:C3:A2:D9:1E:E0:7E:B8:8D:DC:04:F3:62:12:5D:5F:01:A4:84:3D
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 019D996296A5DE162DB3BDFC594535F9B8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:01:08 +0000
Manifest this update: Fri 17 Apr 2026 03:01:08 +0000
Manifest next update: Sat 18 Apr 2026 03:01:08 +0000
Files and hashes: 1: QlZ3EwceRly-CQVyh76fsical88.roa (hash: GhqviNkjdeBBcrA1tzvOBRebTTX9kM0EqFFhCTAnsnQ=)
2: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: wDNRJRXz+7MnOW/MxLBxZxzFPkN/s+mNgOOCzMsgkfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:96:a5:de:16:2d:b3:bd:fc:59:45:35:f9:b8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Apr 17 03:01:08 2026 GMT
Not After : Apr 18 03:01:08 2026 GMT
Subject: CN=c9c3a2d91ee07eb88ddc04f362125d5f01a4843d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:5d:92:8c:bb:0f:ed:3e:3f:d0:b1:32:4e:
63:a8:7a:94:cd:c6:0d:83:9d:2c:f6:21:81:17:85:
22:ae:8b:b2:62:41:68:31:58:ca:81:f4:31:26:3c:
6a:cb:0e:df:51:b1:d9:7e:16:f8:86:91:4a:f8:32:
b8:87:77:22:cc:99:a4:8c:2f:c1:a1:21:4d:7e:2b:
39:c8:d0:5e:ee:01:ce:96:15:ed:74:6a:04:f2:2f:
d4:e7:0f:46:3a:db:f8:ce:c1:fd:dc:81:42:2f:c8:
e7:42:ad:db:07:0d:09:5c:fd:c4:ee:a9:77:20:0c:
94:78:03:ea:3e:8a:9b:66:ba:8e:92:fd:20:a7:05:
17:55:36:f5:05:77:e5:cc:3d:83:0e:1d:ff:17:fd:
36:18:f3:4c:5f:1f:82:b0:b3:f4:9c:ef:51:98:cb:
8f:e3:f0:fc:4b:6d:76:47:68:04:77:ca:24:aa:70:
61:a3:37:ac:a8:d5:35:f1:7c:01:f4:14:b1:71:04:
a8:91:ed:53:4e:e9:c0:f4:3e:a7:aa:74:85:a7:a3:
dc:fc:ff:fd:db:ad:e6:6c:63:e0:5d:9e:34:96:9d:
7e:0a:13:f6:7f:7a:10:67:f1:81:3d:d5:52:62:f2:
ae:aa:03:3a:91:ca:02:41:30:f7:6e:fa:6d:da:b2:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:A2:D9:1E:E0:7E:B8:8D:DC:04:F3:62:12:5D:5F:01:A4:84:3D
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ab:6d:f6:75:2e:14:46:6a:03:32:62:1c:90:5b:b0:22:c0:
bf:1d:b0:17:13:39:1b:01:52:7d:54:e0:77:c8:82:19:de:45:
80:a7:18:38:5f:83:d5:cb:70:91:78:10:9a:49:8e:3c:fc:45:
29:d5:01:57:da:3c:e0:f0:e4:7d:e6:dc:85:d1:f1:cb:8d:b7:
41:53:af:5b:ee:1c:7c:4a:d5:5e:90:8a:c4:8c:45:17:a2:d8:
7e:11:64:85:1b:b5:90:ee:b4:80:22:41:f0:ac:7c:da:67:13:
29:a7:4d:51:5d:ae:f1:10:31:74:03:22:08:3b:d3:7e:ea:f5:
6c:95:5f:73:91:9a:76:df:fd:9e:1a:e0:f9:95:85:4c:bb:fa:
bf:cc:42:e1:50:a3:ac:3c:16:aa:77:ad:9b:15:9d:0a:5a:37:
69:51:fb:40:f7:74:1f:91:c0:94:db:ea:de:ee:d2:15:40:73:
45:8c:c3:77:4d:15:12:32:27:cd:c9:81:1c:23:ac:da:b0:be:
15:0b:73:f3:0e:a7:7b:44:ce:c5:d0:08:b1:58:de:60:7b:1d:
d1:cb:71:fd:58:bf:17:48:b3:db:7d:cf:76:b8:0a:91:57:c3:
82:d3:e6:8b:e8:12:0d:ef:ee:d2:6a:c2:3b:d6:ff:89:96:f8:
b2:d8:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:12 2026 by rpki-client