Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: Fhfx6WX4ZRc3gXKrbCW+13vJgGAvq0u+TYJacCr9RGE=
Subject key identifier: 56:87:5C:0E:42:B3:93:B9:F9:9C:AC:86:3F:66:89:28:20:06:34:2E
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 019DA340FBE0E6459C1824F9AC9EADA4481A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 11FD
Signing time: Sun 19 Apr 2026 01:00:38 +0000
Manifest this update: Sun 19 Apr 2026 01:00:38 +0000
Manifest next update: Mon 20 Apr 2026 01:00:38 +0000
Files and hashes: 1: UZbrORTP_ETM2yJiPplsddvS7KA.roa (hash: KMKv//YG/qKlJS3aeSyQju59WADPz9oMFmNno9Nz5a4=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: nyl1wU95M6aawyiFheKmB/p5H08mQcYG30MLysvpbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:fb:e0:e6:45:9c:18:24:f9:ac:9e:ad:a4:48:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Apr 19 01:00:38 2026 GMT
Not After : Apr 20 01:00:38 2026 GMT
Subject: CN=56875c0e42b393b9f99cac863f6689282006342e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:5a:8e:94:ec:f1:46:4e:ad:5d:b6:a4:8d:
ce:ff:42:4c:13:8b:be:46:7c:4c:aa:9a:fa:b7:a5:
29:b6:7f:18:f2:cf:61:97:4c:d0:26:fc:9b:9d:9a:
f7:08:21:46:d4:5c:a8:0c:56:44:56:9f:8b:6a:a2:
18:64:cc:cf:08:55:f3:45:24:7d:ce:3c:3a:28:5a:
3f:23:2a:5f:54:22:b6:27:1b:15:f4:14:65:3b:91:
b8:c5:f2:e8:97:fb:b0:97:e5:4c:46:fe:68:4a:73:
5e:54:8d:3d:f8:8c:bd:8f:fa:63:f8:a9:cc:e8:28:
ec:74:a7:09:39:9a:92:b9:54:9c:7d:2a:1e:90:96:
d7:27:ee:07:0c:34:74:76:9b:31:b8:32:d1:3e:6a:
ca:31:f2:84:ea:eb:2c:6c:17:9e:ec:79:d3:7b:ae:
e2:48:77:9d:62:e1:39:c5:db:75:03:41:a7:91:c8:
92:1b:67:25:01:c0:e2:16:e7:f6:a3:b2:aa:0e:7f:
13:06:03:4b:77:e7:86:72:8b:db:4f:cd:bd:71:ac:
0b:0e:f6:62:05:98:76:bb:b7:71:a7:bd:83:94:7a:
f3:da:45:d0:b3:30:fb:a6:cf:b6:32:c1:e3:33:a4:
08:10:cb:99:62:b2:41:a1:d8:6b:fc:54:79:e6:63:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:87:5C:0E:42:B3:93:B9:F9:9C:AC:86:3F:66:89:28:20:06:34:2E
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:25:0a:84:82:52:74:68:1f:87:93:90:80:d7:33:29:d6:23:
72:53:2b:37:c7:38:60:9c:4d:8a:d9:80:b3:90:b7:46:fe:42:
52:1c:c0:6f:85:f8:1f:a9:40:37:ec:e9:20:dd:63:2d:e6:f7:
18:5a:07:fc:6a:c6:fb:2e:1d:28:13:dd:2b:76:0f:34:5b:95:
92:6d:3c:e1:ec:2b:ac:33:d7:14:1c:3a:37:6c:5c:4a:9e:ef:
df:c0:6b:b8:cd:16:96:04:2f:eb:3e:77:ca:cf:09:32:ad:09:
5b:6d:28:cf:1a:be:c1:86:de:24:a7:4f:e0:56:b3:4d:48:85:
c9:d3:e0:dd:10:e5:b8:52:f4:92:44:00:56:35:1e:27:f5:02:
fd:13:f2:5a:ad:74:5b:23:3e:56:6d:e8:d1:8a:9d:0d:71:a6:
d6:45:1e:6a:86:63:61:04:61:2b:d1:f7:4a:56:df:f4:a6:1f:
a7:af:83:c3:63:40:1c:e0:90:76:1a:9e:45:1f:df:4e:1b:08:
cd:a7:b0:2a:c7:bd:b3:52:58:24:8a:28:0d:c9:dc:d8:11:15:
6e:1c:53:c5:ce:c1:51:f9:e3:52:05:6a:1c:d8:60:cd:30:3a:
64:38:98:01:99:53:74:d5:19:32:ff:f7:7f:b5:b8:2f:67:ce:
11:3a:a6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:31 2026 by rpki-client