Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: /3v3+0HClwx5+Z6sDofjAfcOPeqJZ4to8RHP5a1jYgI=
Subject key identifier: F2:B3:09:B7:BB:A7:6E:6F:A0:D2:B0:D5:89:6D:BF:51:E4:0C:87:1E
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019D992B42E516F7B6E1893E45C2148CA71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0FE0
Signing time: Fri 17 Apr 2026 02:00:42 +0000
Manifest this update: Fri 17 Apr 2026 02:00:42 +0000
Manifest next update: Sat 18 Apr 2026 02:00:42 +0000
Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: g2flpcJwiIYF3OsHxEe1atSN22KTIT9WJnPhjstmRos=)
2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=)
3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:42:e5:16:f7:b6:e1:89:3e:45:c2:14:8c:a7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Apr 17 02:00:42 2026 GMT
Not After : Apr 18 02:00:42 2026 GMT
Subject: CN=f2b309b7bba76e6fa0d2b0d5896dbf51e40c871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:2a:1a:99:fa:50:d2:76:81:1c:43:7c:e4:
f5:38:4b:ce:f3:7d:f6:84:34:20:ff:26:c4:69:c2:
c0:fe:4d:5e:d5:53:b3:95:30:4a:c6:37:4d:df:f5:
04:11:63:c3:9e:b5:08:f5:07:c3:c4:50:f1:d0:ce:
ae:55:2a:f3:ee:dc:c8:d2:ea:b5:8b:1d:09:dd:6a:
fb:c1:cd:6f:d8:83:09:f9:7e:9b:73:ab:9b:9b:2e:
c0:1a:f3:be:a2:ac:8c:bf:42:a3:91:3c:0a:09:46:
48:9b:62:69:d8:12:22:af:5d:a2:5a:60:73:1d:31:
5e:1d:e3:86:d6:27:86:8f:ef:69:5f:cc:ca:1c:c7:
09:0c:21:fd:d6:b5:d2:78:dd:4d:23:94:fe:bf:db:
58:61:c1:f8:5a:83:c8:17:98:cb:7a:78:8a:f0:6c:
dd:9a:33:f6:ef:f5:04:4b:cc:c7:c1:65:97:1c:be:
27:9c:8c:f6:68:e3:6e:35:26:b8:5b:07:db:33:6c:
06:df:97:14:91:f6:75:93:34:05:ec:b7:a2:f3:90:
b3:f6:f7:37:d4:1b:dd:17:df:8a:e7:0c:56:2d:31:
a5:fc:0c:21:40:54:26:74:f5:a3:f1:08:f9:ac:df:
fb:a3:c4:77:eb:0f:03:29:20:d4:1f:6d:c2:03:f6:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:09:B7:BB:A7:6E:6F:A0:D2:B0:D5:89:6D:BF:51:E4:0C:87:1E
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ba:a9:53:28:0a:f5:8d:d9:d1:e9:52:48:7e:23:aa:f6:ab:
e2:76:28:ef:75:d7:63:f2:1b:b8:74:ac:0a:84:6e:3e:d3:aa:
6e:05:a1:09:68:21:e7:7e:95:6d:2c:9a:7c:d6:17:2a:f0:3f:
0b:43:a7:22:ba:0a:4f:15:1e:84:1c:28:13:25:34:66:83:5a:
e8:2b:93:70:bc:22:8e:35:85:56:fc:ab:01:b2:6f:e6:bd:6d:
15:b7:0e:15:3b:2b:93:2d:e9:7e:8b:68:68:03:37:b5:1c:31:
58:87:d3:ed:37:55:07:d3:b6:9e:f4:63:eb:ac:97:41:74:09:
71:fc:08:03:cf:7e:99:85:2d:ad:ed:0a:24:36:c0:1a:28:81:
d0:53:c4:68:17:ea:7c:8f:7a:ab:78:68:01:d1:be:ac:92:fb:
fa:40:ca:17:74:a7:1a:87:af:fe:c9:4e:19:97:cc:4d:a9:29:
64:96:7d:84:fa:1e:18:a9:c3:af:e5:dd:8e:79:dd:94:25:6f:
59:12:fa:99:cb:b3:3b:4f:55:f8:83:14:01:38:1f:8f:0d:b6:
f3:d9:38:00:69:a7:b4:b3:a8:a8:6e:8a:b0:1e:45:5d:39:66:
eb:f8:4e:b3:c5:65:3b:80:29:70:0a:f3:fa:e8:48:0f:d6:33:
2f:dc:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:42 2026 by rpki-client