Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: ryB0D/eCSshX4TQZBkBGPGsjApM16vokQeYwiLAYHtI=
Subject key identifier: 76:C7:B9:13:01:36:23:A3:05:DC:8E:13:AB:73:9B:ED:6D:70:77:B0
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019D9A74853D647F2A7C55B6509805E4A05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 0849
Signing time: Fri 17 Apr 2026 08:00:20 +0000
Manifest this update: Fri 17 Apr 2026 08:00:20 +0000
Manifest next update: Sat 18 Apr 2026 08:00:20 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: 7Rhx8tHAmlM4X2jb5xU4nKQBjW6IclGJzmunjd1Ckuc=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:85:3d:64:7f:2a:7c:55:b6:50:98:05:e4:a0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Apr 17 08:00:20 2026 GMT
Not After : Apr 18 08:00:20 2026 GMT
Subject: CN=76c7b913013623a305dc8e13ab739bed6d7077b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:3d:6d:cc:46:1b:bc:fd:ef:04:01:68:b1:
66:08:40:1c:fc:2d:a1:4d:cc:be:b5:09:ed:27:2f:
82:9a:8a:f8:00:cf:99:43:a1:30:93:66:bd:07:68:
6c:bd:d3:b5:cd:fa:49:c4:31:a2:1a:76:76:3e:e3:
f8:c9:0e:02:97:93:dd:59:18:fc:f8:9b:54:37:5d:
a7:f9:1a:ec:83:37:55:63:39:25:59:ed:1f:d6:73:
11:8c:92:37:83:2f:b8:9e:05:70:fe:5e:2b:49:07:
f2:df:74:51:55:5d:9c:3c:3d:a0:55:78:f9:67:10:
ce:54:2e:4c:c7:bf:5e:1e:e5:c7:79:28:68:92:c1:
4c:9f:f4:bb:95:d0:24:c1:69:2c:f5:6c:f4:c6:8c:
ea:48:fa:90:93:74:53:68:2a:93:14:0e:2d:06:c8:
0a:7a:d3:40:35:97:35:ab:05:19:67:4b:c9:8d:6b:
9a:45:62:72:2e:53:61:27:a6:f6:9c:53:1f:50:7b:
a5:9e:b9:8a:8a:3a:a9:5f:22:06:c5:07:5e:2e:f9:
3b:71:40:e3:04:3d:b7:4b:54:c1:73:6c:ef:4f:5d:
90:27:e6:f8:ac:0d:a6:11:73:32:83:19:d8:c4:31:
da:9c:c7:f8:60:5a:c9:73:96:a6:6c:64:23:51:03:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:B9:13:01:36:23:A3:05:DC:8E:13:AB:73:9B:ED:6D:70:77:B0
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:52:b5:90:64:c4:53:0c:55:b0:de:77:4f:73:b2:6c:b3:d0:
89:d2:36:58:b0:ed:99:9f:36:b2:ed:36:41:ab:c5:c6:9e:0e:
89:d2:ce:1f:4f:e6:12:32:70:da:b4:76:a1:87:91:63:c6:2b:
c7:72:51:ba:8a:8b:ca:48:9d:bf:01:3f:62:d0:72:60:b4:9b:
03:73:8a:7c:89:c6:f0:d1:5f:b2:af:ce:bb:bf:85:8b:02:66:
98:2d:77:7d:6f:8c:54:88:ea:01:3d:d8:5e:b9:16:02:af:2e:
c2:c8:f2:6a:6c:d3:02:6f:37:9c:cc:8b:a4:cb:a0:c1:17:82:
e1:06:ff:44:f1:cb:42:33:b1:7a:5f:a9:ec:0e:9b:80:c5:11:
ac:37:14:d2:7f:86:d1:a9:17:d7:c6:e4:43:36:dd:54:58:0e:
62:56:2e:ed:58:7c:e3:4d:12:f2:07:6a:bd:e3:bb:10:9c:86:
c0:86:f7:85:75:55:8b:f1:1b:a3:96:06:6a:d3:00:b1:48:1e:
36:66:5a:0c:36:98:ec:20:12:84:18:56:73:99:b8:a0:86:0d:
ad:48:4f:c0:a2:bd:87:71:5d:ba:5b:f9:53:71:f7:4a:6b:2e:
5a:d4:20:bc:f1:e2:ca:1a:a8:26:6f:51:54:88:b0:9a:30:cc:
ba:73:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:34 2026 by rpki-client