Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: jmFBCsssuS77Xy3ROOxR9szHE85lfGEYidR3tWab8VU=
Subject key identifier: 67:26:8C:31:E6:91:D2:14:08:EE:9B:12:04:B1:4D:84:25:15:EC:76
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 019D9AAB96EEF3D8E8E9107D56D83E114E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 09:00:29 +0000
Manifest this update: Fri 17 Apr 2026 09:00:29 +0000
Manifest next update: Sat 18 Apr 2026 09:00:29 +0000
Files and hashes: 1: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: qHxoPmQOKxwKs8LrB3EaQUUXv1JnkUdWVuIDJUuTptE=)
2: y5TDm0AbnF5uW1VYqN6HJrhTGH0.roa (hash: lqxFRYQnP+n1wormol/wg9R3mZ0oBovnPQrrpsaBhek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:96:ee:f3:d8:e8:e9:10:7d:56:d8:3e:11:4e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Apr 17 09:00:29 2026 GMT
Not After : Apr 18 09:00:29 2026 GMT
Subject: CN=67268c31e691d21408ee9b1204b14d842515ec76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:21:86:4e:ac:f5:01:ca:16:74:77:5d:47:
9e:db:32:ba:02:11:5c:c0:3d:bf:cf:54:de:0c:24:
23:99:9c:df:dd:03:9a:7a:c6:f6:2a:1c:83:ad:0c:
e4:8a:a0:8d:6c:e2:67:bb:a1:9e:6a:2d:56:52:eb:
1f:04:0e:39:1a:4d:79:cd:f3:24:bd:43:85:d5:4b:
96:00:e3:60:d2:bc:8b:90:f6:01:89:f7:40:20:a5:
4e:96:ef:51:e4:c8:3e:59:39:56:b7:2e:75:d5:02:
ef:cb:80:aa:db:39:38:77:bc:aa:bd:d3:b1:28:02:
97:24:c8:ea:74:9f:34:29:e0:e7:3e:78:7a:63:0d:
03:65:15:56:ec:bb:81:ea:f5:96:c3:9c:de:7a:d0:
e5:55:de:31:99:8e:95:96:60:e9:b9:bc:24:80:76:
22:84:59:5a:a9:fd:00:89:1b:4a:20:98:ae:7d:88:
25:ff:3c:b8:70:ba:05:4c:aa:17:f6:1d:21:aa:a8:
81:17:3a:04:44:40:0e:50:5e:86:2c:e0:91:ac:1b:
0c:12:a3:28:f4:e8:4e:33:e2:48:b5:f6:6e:7c:ea:
20:e6:14:7e:52:f6:4b:ee:dd:98:cb:c4:fc:15:9f:
0c:c6:97:8d:95:d5:d7:a7:d9:c7:10:67:69:47:c8:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:26:8C:31:E6:91:D2:14:08:EE:9B:12:04:B1:4D:84:25:15:EC:76
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3a:b7:56:06:c9:ce:cc:97:d6:b4:b1:c2:f1:ab:99:49:d0:
08:53:c2:3a:3d:22:ee:23:30:a3:0c:6b:2c:ae:ba:f1:cd:49:
20:dc:8c:b8:0a:ca:3f:ab:c9:6f:4f:3e:b2:59:4b:dc:be:2c:
f7:bd:72:a3:39:44:35:9e:1f:12:55:a9:c8:74:d8:ce:f4:15:
de:a6:49:05:18:c1:77:38:60:46:1b:d2:a3:b2:7d:66:03:ea:
f8:f9:58:34:d4:c3:95:20:9d:a3:1c:c0:a7:ee:e2:21:46:db:
f3:8b:a2:2f:6b:44:7c:98:1b:01:6f:da:ff:42:20:11:49:fa:
36:9f:bc:30:aa:59:c0:28:88:03:b3:67:6c:07:a5:46:9c:72:
df:7a:11:89:86:70:66:44:c2:e7:ca:06:fc:59:2a:61:db:61:
3e:af:cd:9b:29:71:7e:ab:ca:47:7d:5a:1f:70:0a:d2:8a:58:
bd:e2:09:8e:8e:d8:9e:75:df:55:0c:3e:b7:37:41:eb:e7:6b:
6d:43:46:0e:05:c2:11:7c:0a:1a:1e:a6:bc:7e:c1:5b:8d:70:
b8:ae:40:60:d4:2c:dd:c4:cb:72:e8:23:21:30:07:37:5a:29:
3c:53:ad:7e:48:4e:39:1a:38:b8:a1:b3:ca:7a:75:de:7c:ed:
87:67:04:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq5bu89jo6RB9Vtg+EU6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz
NGZkZDkwHhcNMjYwNDE3MDkwMDI5WhcNMjYwNDE4MDkwMDI5WjAzMTEwLwYDVQQD
Eyg2NzI2OGMzMWU2OTFkMjE0MDhlZTliMTIwNGIxNGQ4NDI1MTVlYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHQhhk6s9QHKFnR3XUee2zK6AhFc
wD2/z1TeDCQjmZzf3QOaesb2KhyDrQzkiqCNbOJnu6Geai1WUusfBA45Gk15zfMk
vUOF1UuWAONg0ryLkPYBifdAIKVOlu9R5Mg+WTlWty511QLvy4Cq2zk4d7yqvdOx
KAKXJMjqdJ80KeDnPnh6Yw0DZRVW7LuB6vWWw5zeetDlVd4xmY6VlmDpubwkgHYi
hFlaqf0AiRtKIJiufYgl/zy4cLoFTKoX9h0hqqiBFzoEREAOUF6GLOCRrBsMEqMo
9OhOM+JItfZufOog5hR+UvZL7t2Yy8T8FZ8MxpeNldXXp9nHEGdpR8gB5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcmjDHmkdIUCO6bEgSxTYQlFex2MB8GA1UdIwQY
MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt
OTI0MTYwMDcxNThlLzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl
LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjq3VgbJ
zsyX1rSxwvGrmUnQCFPCOj0i7iMwowxrLK668c1JINyMuArKP6vJb08+sllL3L4s
971yozlENZ4fElWpyHTYzvQV3qZJBRjBdzhgRhvSo7J9ZgPq+PlYNNTDlSCdoxzA
p+7iIUbb84uiL2tEfJgbAW/a/0IgEUn6Np+8MKpZwCiIA7NnbAelRpxy33oRiYZw
ZkTC58oG/FkqYdthPq/NmylxfqvKR31aH3AK0opYveIJjo7YnnXfVQw+tzdB6+dr
bUNGDgXCEXwKGh6mvH7BW41wuK5AYNQs3cTLcugjITAHN1opPFOtfkhOORo4uKGz
ynp13nzth2cEQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:41 2026 by rpki-client