Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: JH5fnBBIVbbtnTdtayTIyILTUzaE0zslItm0YXUilZA=
Subject key identifier: 45:3B:2D:1D:78:8F:7E:2B:1B:3E:03:88:02:03:5E:C1:A4:2F:A8:B1
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019DA4F94E1B533F96BE5FC5D4319F67EB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 09:01:35 +0000
Manifest this update: Sun 19 Apr 2026 09:01:35 +0000
Manifest next update: Mon 20 Apr 2026 09:01:35 +0000
Files and hashes: 1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: 4drv68JFSi6YKdFd3AsEM9vlNIzTyQG1FWjbmHwUa2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:4e:1b:53:3f:96:be:5f:c5:d4:31:9f:67:eb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Apr 19 09:01:35 2026 GMT
Not After : Apr 20 09:01:35 2026 GMT
Subject: CN=453b2d1d788f7e2b1b3e038802035ec1a42fa8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:70:d6:e9:a8:39:8a:17:4a:8a:fd:ba:62:
75:76:c9:34:68:20:cf:cb:e3:73:05:a6:2f:c1:e7:
1e:4f:d5:06:85:46:1d:f6:a2:0e:dd:2e:33:b0:c7:
42:6c:12:49:d0:32:6c:03:74:a2:b7:4a:73:a6:9f:
b5:cd:b0:d2:cb:67:37:ec:65:96:3e:1f:90:a6:a1:
6d:bf:e8:20:83:fb:f7:5c:4c:9a:08:52:f5:73:60:
41:5b:0e:4a:f2:29:55:65:3b:16:a9:4e:3e:d3:99:
38:db:0d:60:74:ab:46:d9:37:aa:d3:b0:04:42:1f:
74:2d:df:e5:13:01:84:1b:35:8f:9a:85:5c:3c:48:
b3:2e:b8:d1:18:46:75:2e:23:70:3d:50:78:13:8a:
c9:89:0b:96:a7:1f:8e:4b:ab:99:bc:93:b0:c8:b5:
27:de:47:2c:4c:7c:e6:16:72:1c:54:d8:2d:4d:f6:
80:04:4d:ad:05:35:24:7b:b2:b2:75:d0:ff:02:be:
ba:33:95:5d:7f:fe:85:87:1c:04:23:60:8d:e9:82:
d6:a9:7f:db:e2:d7:a5:e4:47:ad:77:3a:5e:fa:1b:
2c:30:c6:93:05:d1:aa:85:df:e2:4a:de:6b:b9:42:
1c:bf:fb:42:22:9e:85:95:a5:e3:2d:08:b0:39:90:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3B:2D:1D:78:8F:7E:2B:1B:3E:03:88:02:03:5E:C1:A4:2F:A8:B1
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5d:89:5b:fa:95:e4:52:89:0e:a3:d2:d0:2d:7a:7d:79:94:
f2:7c:ee:4b:00:5e:79:cb:3a:d4:c6:a9:35:8a:28:1f:82:31:
b9:5c:c0:37:82:e2:52:ff:92:6c:39:ea:77:ee:87:76:a1:1f:
84:6e:0e:e7:e9:9f:20:dd:df:07:e5:f4:09:cd:74:d4:6a:cf:
0c:32:bc:85:58:33:bb:85:ce:75:04:8f:3f:4a:3c:9b:aa:10:
68:1e:c3:7a:cd:ef:ea:14:1d:6c:2f:a5:88:db:7f:24:d1:b0:
12:c2:cf:55:f8:fd:65:21:6e:6c:6b:51:6d:9d:fd:30:c2:75:
f2:a7:86:32:35:39:b6:87:3e:64:5f:6c:aa:33:52:5f:8c:79:
e3:b1:ec:d1:e4:ea:81:35:f2:e4:4c:75:ce:bf:3e:80:f3:d9:
6d:de:81:a4:71:0b:31:7a:4b:15:1d:a8:79:9b:53:36:34:51:
b6:78:a9:3c:6b:f8:2f:fb:bc:06:4a:b8:d4:87:6b:44:61:be:
57:24:ec:97:90:dd:ac:b6:ce:85:c1:80:57:b0:8b:47:82:4e:
12:8a:61:a0:a1:33:3c:28:52:c4:09:c3:45:4f:a2:7a:85:98:
66:7a:02:f6:d9:dc:5c:8c:f8:39:58:79:7b:24:9a:5b:58:fb:
eb:e0:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:03:27 2026 by rpki-client