Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: kF1DVO4IHGwcl/nRYsfs+isNrDVgQtb/fddLtrGN/Yk=
Subject key identifier: C3:79:CD:0E:7F:7E:FC:81:71:4E:EB:91:EE:AD:76:16:77:40:99:29
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019DA48A89842419F12C4A60341AE323D75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 07:00:35 +0000
Manifest this update: Sun 19 Apr 2026 07:00:35 +0000
Manifest next update: Mon 20 Apr 2026 07:00:35 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: nLrAA0P5olAbQt+tJtDTDDsFVxaMU79rn75tWzAOlxw=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:89:84:24:19:f1:2c:4a:60:34:1a:e3:23:d7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Apr 19 07:00:35 2026 GMT
Not After : Apr 20 07:00:35 2026 GMT
Subject: CN=c379cd0e7f7efc81714eeb91eead761677409929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:d1:57:7c:36:ff:fd:91:c5:c5:69:75:b7:
29:f2:18:e0:db:19:ae:95:a4:1a:cf:9b:f9:69:9f:
bf:92:b6:aa:d0:e0:86:5f:c5:b7:d0:1f:5e:8d:74:
fe:fe:c5:9a:63:bd:5a:02:73:01:83:49:43:fa:21:
cd:72:d3:22:20:af:03:73:bb:6a:bf:e3:eb:f3:d4:
8d:0a:3b:8a:dd:39:04:dc:c7:32:24:f9:bd:cf:4f:
ff:3b:37:bc:70:13:73:c1:1b:81:44:96:85:34:8a:
89:db:be:54:ac:ed:74:c5:8c:20:7e:41:a4:c7:ab:
a4:9c:40:11:9c:50:9c:1b:bb:a0:97:80:58:4c:0d:
38:ab:4a:82:36:bd:e4:9a:e0:24:f1:38:5c:47:d2:
6e:72:6f:1b:66:88:ee:5d:5e:1c:f4:8a:98:d0:2c:
f7:48:12:15:d0:a7:17:fd:92:21:3c:5d:ae:7b:13:
e7:4e:54:0a:34:7b:f4:9e:e3:5c:7a:76:c1:6b:3d:
ba:0b:09:3f:27:31:56:3a:70:f8:3b:62:33:8d:cf:
87:c8:a1:5d:bc:a2:b6:70:7a:a8:09:bb:a2:d1:a7:
53:98:ba:b8:d3:f0:a8:87:4e:43:31:25:90:45:5d:
5e:2f:fc:dc:44:2a:31:33:b3:c4:28:f7:10:23:43:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:CD:0E:7F:7E:FC:81:71:4E:EB:91:EE:AD:76:16:77:40:99:29
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:24:f3:78:eb:38:ea:34:79:96:79:6d:20:d6:6b:d9:a3:56:
66:a1:95:64:ab:39:e4:c0:53:9f:26:ed:ee:d8:5f:ae:e7:4e:
a8:94:bb:b7:13:fb:af:66:e9:e4:43:2d:00:fc:65:c2:dd:da:
c5:0e:0e:e5:94:ca:81:55:58:02:3c:df:84:f6:1c:1b:ce:a9:
b6:20:e2:04:19:7f:91:d3:9b:86:b2:ac:37:68:3c:68:96:9d:
43:96:95:71:5f:a5:c1:bb:5e:5b:43:f5:8a:da:c0:46:04:60:
61:40:a4:2a:d1:54:ab:e0:93:db:d3:75:4b:66:d5:51:dd:81:
7d:7b:6f:d0:be:e2:26:9c:f3:8c:19:06:3e:91:5b:c9:63:fe:
4b:47:7a:7e:3c:26:de:f3:ef:b8:f6:1a:f7:5f:9c:8c:ba:05:
c0:a2:0d:87:cf:04:58:d6:3c:d5:b9:b9:bb:99:79:4a:ee:e4:
73:1f:08:e1:56:11:98:9e:cb:75:a8:0b:5b:27:79:4a:70:a3:
08:3b:42:ee:3a:a7:a0:aa:5c:91:bb:9f:a8:7d:25:cd:c9:41:
a1:06:21:05:5e:7d:99:7a:c6:80:88:a3:c8:a3:1a:dd:35:aa:
3a:7c:3b:22:9a:9d:ce:72:fc:b0:40:3d:4c:4c:91:f2:0b:2d:
8d:d0:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:48:13 2026 by rpki-client