Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: ho4tZ9uH0jokOroQn0p1DveREH9XJ3zu/o+aiIqOgT8=
Subject key identifier: EA:06:90:FB:07:C6:DC:2D:22:99:05:2C:BF:1B:DE:87:85:D7:60:01
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019D9A3EA50823C25DBE508E1B085B89A231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:29 +0000
Manifest this update: Fri 17 Apr 2026 07:01:29 +0000
Manifest next update: Sat 18 Apr 2026 07:01:29 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: XH0MlyGEht7m1C2/xZnwcuMtZQFeC+9oTjD4gy/ZVA8=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a5:08:23:c2:5d:be:50:8e:1b:08:5b:89:a2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Apr 17 07:01:29 2026 GMT
Not After : Apr 18 07:01:29 2026 GMT
Subject: CN=ea0690fb07c6dc2d2299052cbf1bde8785d76001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:11:ce:dc:a1:07:f4:3e:f5:62:97:37:08:
5f:cc:c3:7c:64:19:56:9b:30:68:88:3a:1e:8e:a7:
b5:4f:08:4e:ca:54:d4:43:d5:54:b0:bf:18:88:fa:
8c:c2:81:a0:7d:7c:02:61:07:30:cf:ad:a1:78:93:
ef:25:c5:cf:38:51:60:bb:38:f8:9e:41:c5:74:d2:
4f:cb:e9:31:a8:2f:ef:be:89:aa:5d:f6:e9:7c:bf:
5f:7f:99:0b:14:02:b9:ac:65:93:64:0b:76:c1:d6:
b6:c4:51:dd:55:84:fd:0f:19:7b:cf:a5:64:db:15:
df:39:1b:92:6b:8a:28:ec:77:23:27:5a:c0:d7:8d:
6e:f6:70:93:25:54:cb:9c:d4:9d:d2:24:35:50:fb:
4a:22:63:10:60:b4:2e:e1:59:d0:26:29:0f:59:6b:
62:de:20:fa:5f:6a:61:73:04:25:97:d8:ba:eb:0b:
4b:09:88:f7:d4:00:15:21:b9:8a:f7:dd:a4:00:10:
36:0c:cc:21:e1:2d:08:20:88:d4:c4:3a:d9:2b:53:
e8:9c:5e:8f:db:f5:59:03:ec:9a:d6:ee:72:52:be:
b8:9f:df:e4:ff:77:ff:41:82:7a:20:9a:5c:a4:70:
d8:63:ba:06:dc:6f:91:7c:82:87:6c:9e:f2:3f:eb:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:90:FB:07:C6:DC:2D:22:99:05:2C:BF:1B:DE:87:85:D7:60:01
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ef:18:6d:9d:c0:67:d4:07:42:4c:f3:9d:b2:8c:ea:cc:af:
01:d4:64:4a:32:d4:36:29:31:5c:17:4e:d9:9f:45:5d:41:47:
23:93:99:6e:8d:03:1e:ab:40:69:fb:73:25:91:8a:d9:49:06:
7f:53:83:62:f9:01:01:1e:1b:88:cd:d9:4d:c5:37:50:37:f8:
83:42:cf:c6:50:44:fa:9f:aa:ae:ee:6b:4c:df:5e:81:97:a2:
48:35:27:d7:3a:40:64:f7:b9:ad:81:2c:48:ca:6c:c9:a6:17:
c4:e9:6a:cc:e2:b0:e1:e5:ef:ab:d0:d6:24:97:76:fb:d5:08:
ea:76:8a:a0:44:48:89:a7:c7:c0:9a:54:28:d4:4c:8d:ef:76:
37:03:92:bc:9d:a6:4e:bd:be:e1:21:e5:38:60:b9:cf:24:b8:
a2:6f:41:21:e5:1d:65:46:f5:30:02:9a:96:a2:58:ee:d3:6c:
e3:f2:ec:61:78:bf:ff:51:c4:dc:80:4c:99:1c:3a:e7:dd:42:
d8:7e:4d:d0:e6:ec:6c:fe:fd:f5:1b:a0:74:aa:f7:a4:d7:ea:
6b:84:d5:d3:24:7a:1e:38:19:ca:35:98:7a:2a:ea:bf:37:4d:
da:34:2e:d8:d4:f9:d4:92:a6:2d:10:01:62:05:c3:fd:e7:26:
5c:7e:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:23 2026 by rpki-client