
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File: Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier: FK9V+VSiQhTWkklbYXAwxq37bWmLddg88vc5m9NaVng=
Subject key identifier: 49:E4:A3:EB:EC:A3:D1:82:9C:7D:F7:44:88:CE:46:35:8F:73:A1:36
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 019D9A75026A1CFE7747142F2910E5E92AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number: 1C32
Signing time: Fri 17 Apr 2026 08:00:52 +0000
Manifest this update: Fri 17 Apr 2026 08:00:52 +0000
Manifest next update: Sat 18 Apr 2026 08:00:52 +0000
Files and hashes: 1: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (hash: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY=)
2: 7kBwPgGRBT6la_Sv0xow-iKxJjY.roa (hash: yJRfbZO2cu/OemJVS6Qkus/x0WgpdrtBI5YmGOiccvY=)
3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: 7oBLGnBicQRocuayzs63eh6TuSfPv+DE91ZPK3cgdZE=)
4: XlsLvbVU193m2Z6UVxU87ZTboqY.roa (hash: UZGfcrrCQJHsGlbF2mwHoSkh+ONgNYGr3BnRwDE44rU=)
5: _gpNNvVI5XEgo5Wc__5zl60B4rc.roa (hash: H2sscAVsyz5GJI/Qseyr+Bkuup31d7nbthDB0vhC554=)
6: onUcHcMkvFv3eRd2HH3aPRf6vhg.roa (hash: FMvdGW8G/i8Ujn/8ecIl88xpPzK27z5df59EqMBKxi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:02:6a:1c:fe:77:47:14:2f:29:10:e5:e9:2a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Apr 17 08:00:52 2026 GMT
Not After : Apr 18 08:00:52 2026 GMT
Subject: CN=49e4a3ebeca3d1829c7df74488ce46358f73a136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:62:d7:fd:3d:84:e8:b6:27:37:ee:61:89:
9c:92:86:99:f1:04:34:1a:7c:ac:50:2e:f0:cf:70:
70:d0:ac:e3:bc:d9:58:66:5f:06:09:ed:dd:50:f5:
c0:ff:35:d6:b0:b5:ba:98:14:c4:a8:a1:2a:4b:49:
bf:4c:89:e5:27:26:ab:ed:a1:5f:6a:9b:fb:b2:b8:
79:d6:83:f5:ae:d9:ca:0b:61:b1:ee:47:3d:1b:4e:
da:1f:e4:5c:f6:43:1c:3a:f0:20:d9:4b:df:ad:c1:
ff:5c:7c:86:5d:dc:d2:c0:93:66:39:4a:8b:c3:4a:
79:a2:b8:a9:d3:75:2d:e3:ac:f8:ae:4b:32:86:f9:
fb:a9:cc:a0:25:1f:54:49:6b:a8:30:1d:0a:e3:4c:
87:2d:32:04:4a:15:3c:54:21:e1:d8:6d:43:a1:12:
91:cb:0c:21:68:80:f8:da:aa:3e:42:34:10:93:43:
6d:8d:49:45:15:f6:79:e3:90:73:f9:2f:4f:f3:e4:
16:96:bb:3f:19:e4:70:13:c8:17:31:cb:5e:9a:37:
ad:98:3e:25:9c:7b:14:d3:c9:f5:45:23:a4:c3:ae:
18:75:ab:95:1c:90:d4:77:07:f0:48:56:95:92:fa:
d7:fe:d0:3b:90:cc:9e:4d:26:c0:ae:15:4e:cb:6d:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:A3:EB:EC:A3:D1:82:9C:7D:F7:44:88:CE:46:35:8F:73:A1:36
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6d:4c:7b:98:25:a9:37:d6:f5:e8:67:30:aa:02:12:b6:2e:
14:dc:97:83:7d:14:d5:41:51:fc:23:f8:d0:6b:aa:08:14:50:
5b:11:51:4b:af:14:e7:91:70:38:61:df:b2:e7:a7:a2:11:78:
ae:8a:70:ca:34:07:95:0c:32:c3:bf:40:02:22:9e:a6:5c:a0:
95:80:04:00:5c:76:8b:7a:93:e9:96:35:4a:64:25:58:69:5e:
a2:dd:6c:cd:fe:3e:54:0f:26:45:92:63:7a:3b:b6:bf:c5:c1:
2e:b8:ff:cf:99:2b:35:d3:1a:b5:2b:3d:c1:62:5e:86:16:1f:
f8:79:ef:0e:51:70:a3:82:10:31:34:b7:a3:33:9d:5f:06:f8:
36:02:1b:39:53:3e:ea:9e:af:e1:22:c5:50:f0:95:0a:39:c8:
f9:8e:46:77:78:93:29:0d:ad:b1:a1:6d:34:d0:b0:b2:8b:05:
93:ee:70:fa:ef:3e:2c:a9:51:d9:7e:0a:2a:59:59:a6:3b:ab:
25:7d:46:47:29:8f:39:fe:55:4c:80:dd:a2:b6:5e:21:d2:f4:
a1:1e:f9:6d:71:27:33:f2:1a:30:bd:b5:66:16:5d:4f:da:8d:
18:aa:d2:a8:c7:d2:96:22:72:27:46:cc:b5:b3:0c:3f:ed:05:
4d:e7:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:08 2026 by rpki-client