Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: RbIJ+MvtGr1YXDD4W70l8E1XKqQYqKMD3u0IheDcqtE=
Subject key identifier: 6A:F2:DE:05:B8:C9:30:3A:26:C9:98:CE:1E:3A:8B:33:B0:BF:68:DD
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 019D9D0838C01008DFD5C84CB7D711056375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 20:00:54 +0000
Manifest this update: Fri 17 Apr 2026 20:00:54 +0000
Manifest next update: Sat 18 Apr 2026 20:00:54 +0000
Files and hashes: 1: EgZw9prYM48BikMrmIquBFUeyCY.roa (hash: ctCXPXYhr5UMOKpyrvlkfwGqe62m7LyduahfprfYDD4=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: GFqqJcb2WJvd5uby9LiWBkLJLXUNDTv8e2aZaC594yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:38:c0:10:08:df:d5:c8:4c:b7:d7:11:05:63:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Apr 17 20:00:54 2026 GMT
Not After : Apr 18 20:00:54 2026 GMT
Subject: CN=6af2de05b8c9303a26c998ce1e3a8b33b0bf68dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:1b:a1:1a:a5:41:60:bd:a1:63:7c:9f:84:
07:a7:eb:27:be:96:14:1f:c5:5c:ab:37:7b:cf:41:
86:c3:29:cd:69:e0:39:64:d9:2c:20:87:a7:c8:32:
fe:14:c6:b2:25:9a:34:9e:eb:87:a9:7b:e5:d4:00:
02:cb:35:fa:b1:0f:9d:51:32:1b:64:7d:3e:ce:b2:
da:57:b9:67:96:0d:c5:25:f8:95:98:ec:33:96:e3:
71:24:a4:01:28:8a:91:4d:e9:15:d7:bb:19:17:71:
22:3a:73:09:e2:b8:a6:ab:4f:e3:cb:07:0b:c7:d5:
aa:d2:90:76:40:8c:99:9c:a2:19:42:6a:5d:b3:de:
f8:32:bc:27:3c:6a:87:83:10:93:a7:04:4e:b3:40:
52:fc:4d:6c:00:0b:a2:5b:b1:d1:8b:da:41:79:1b:
71:03:b6:6d:eb:d3:29:05:a8:de:4d:3d:01:7f:98:
85:ee:ec:36:a4:ec:56:ec:54:d9:37:96:a8:78:63:
3b:f7:06:8f:a4:c3:83:9f:4a:f7:fb:db:2a:3e:bb:
31:2d:e1:b1:35:7a:d8:85:49:eb:14:ba:04:08:0a:
ec:a4:7d:d5:19:f0:59:df:e2:0e:6f:c6:88:f9:a8:
b6:a9:1b:d2:b7:fa:3b:6f:e8:f7:cf:06:5f:58:77:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:DE:05:B8:C9:30:3A:26:C9:98:CE:1E:3A:8B:33:B0:BF:68:DD
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fc:12:f2:26:69:46:23:57:11:ce:0c:51:49:a5:68:02:d1:
e7:ca:6a:ed:9d:fa:ed:db:14:4a:cb:85:bc:20:1e:b7:b8:25:
44:01:ab:a7:63:16:d1:e5:91:35:83:71:1a:32:98:c6:68:ed:
3d:f8:ed:24:b8:97:5d:40:e8:5c:6f:cc:5d:fe:ec:61:53:a8:
0f:fd:8c:18:e2:e7:de:3c:a8:13:27:cb:dd:c0:57:1c:33:6a:
1a:b3:f7:f7:95:c0:6d:70:a5:28:c9:8f:90:99:0f:47:08:c7:
a4:32:28:55:64:4e:79:8a:46:99:8c:81:c6:7b:f0:72:05:cb:
84:e7:c1:a2:99:9c:ec:3b:a8:63:7f:e9:4b:9e:15:75:4c:f3:
06:e0:5b:a6:44:55:52:3a:6a:d9:17:73:36:07:f2:e5:3e:71:
cf:b7:e6:c7:78:9d:8d:ff:17:3d:ce:34:f4:ec:93:8f:33:72:
1b:23:c7:49:fb:09:ad:29:a9:aa:b6:18:d2:a0:fd:a5:0b:8e:
60:ef:08:53:4d:c5:4b:12:39:76:c6:9f:bc:d9:cd:d6:d9:3e:
02:3d:4e:76:b5:16:63:34:ad:70:09:1a:61:e1:ce:d8:42:94:
5f:34:c7:50:1c:bb:90:07:96:60:15:1f:57:09:d3:33:2c:e0:
bb:e4:d0:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCDjAEAjf1chMt9cRBWN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYjQyYWI4ZGU5OGJlMWM3NzFmMGE5ODY4NTgyZmNmOTVk
YzRhYzYwHhcNMjYwNDE3MjAwMDU0WhcNMjYwNDE4MjAwMDU0WjAzMTEwLwYDVQQD
Eyg2YWYyZGUwNWI4YzkzMDNhMjZjOTk4Y2UxZTNhOGIzM2IwYmY2OGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEgboRqlQWC9oWN8n4QHp+snvpYU
H8Vcqzd7z0GGwynNaeA5ZNksIIenyDL+FMayJZo0nuuHqXvl1AACyzX6sQ+dUTIb
ZH0+zrLaV7lnlg3FJfiVmOwzluNxJKQBKIqRTekV17sZF3EiOnMJ4rimq0/jywcL
x9Wq0pB2QIyZnKIZQmpds974MrwnPGqHgxCTpwROs0BS/E1sAAuiW7HRi9pBeRtx
A7Zt69MpBajeTT0Bf5iF7uw2pOxW7FTZN5aoeGM79waPpMODn0r3+9sqPrsxLeGx
NXrYhUnrFLoECArspH3VGfBZ3+IOb8aI+ai2qRvSt/o7b+j3zwZfWHeAsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGry3gW4yTA6JsmYzh46izOwv2jdMB8GA1UdIwQY
MBaAFF60KrjemL4cdx8KmGhYL8+V3ErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQt
NzczYzBiM2M4OTM1LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQtNzczYzBiM2M4OTM1
LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/wS8iZp
RiNXEc4MUUmlaALR58pq7Z367dsUSsuFvCAet7glRAGrp2MW0eWRNYNxGjKYxmjt
PfjtJLiXXUDoXG/MXf7sYVOoD/2MGOLn3jyoEyfL3cBXHDNqGrP395XAbXClKMmP
kJkPRwjHpDIoVWROeYpGmYyBxnvwcgXLhOfBopmc7DuoY3/pS54VdUzzBuBbpkRV
Ujpq2RdzNgfy5T5xz7fmx3idjf8XPc409OyTjzNyGyPHSfsJrSmpqrYY0qD9pQuO
YO8IU03FSxI5dsafvNnN1tk+Aj1OdrUWYzStcAkaYeHO2EKUXzTHUBy7kAeWYBUf
VwnTMyzgu+TQAA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:26 2026 by rpki-client