Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: OasQf3rlobz/RGxxZtHrAW4mS+7XDCs3FbU2y26X1rg=
Subject key identifier: 1D:4E:63:17:75:CA:2E:32:80:3E:08:D0:38:65:99:62:EA:2E:B6:4D
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 019D9A3DE21A0729C595639894095E48623C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:39 +0000
Manifest this update: Fri 17 Apr 2026 07:00:39 +0000
Manifest next update: Sat 18 Apr 2026 07:00:39 +0000
Files and hashes: 1: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: /560q2FJcFlS1BtlZC53TvSHTlgHy+OL+muMEl4CkAg=)
2: b2Q2Eat3_cux0yjgVGOzDFtgpic.roa (hash: jMq1XWA6LmE8jKy6nS6lDU5q1VTY7iuwpA5ReXp7Ws0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e2:1a:07:29:c5:95:63:98:94:09:5e:48:62:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Apr 17 07:00:39 2026 GMT
Not After : Apr 18 07:00:39 2026 GMT
Subject: CN=1d4e631775ca2e32803e08d038659962ea2eb64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:52:21:c3:68:0e:07:b9:fc:e8:db:49:b9:
0d:ed:07:75:ce:b2:05:31:72:c8:98:4d:df:c9:17:
8b:60:55:97:b7:91:f6:7c:1d:66:25:54:17:74:7a:
ee:c6:6e:cb:38:ee:01:ac:99:ec:1e:7c:df:aa:21:
d4:17:f7:9c:84:27:3f:96:c3:5d:7c:63:73:ff:2f:
ce:25:ff:b7:71:6e:83:93:df:b7:b8:df:09:3b:08:
1c:83:cd:1b:c9:dd:ea:3f:10:b3:fc:3b:eb:32:f4:
3f:c5:a4:54:cc:02:cf:fd:90:aa:26:a8:56:54:e4:
4c:30:29:6b:0d:59:ed:52:ae:ba:fa:c4:dc:06:96:
a1:3a:34:2a:a1:04:0f:56:d8:75:30:25:93:b4:b9:
c1:fa:9d:79:5e:6a:b4:77:18:32:4e:5d:e4:23:cf:
9c:c7:a1:ad:af:79:5d:ca:f6:cc:89:fc:5c:1a:c2:
7b:7e:4e:25:29:72:f0:f3:7f:52:60:f6:50:4f:1f:
be:b7:20:49:80:e4:4c:d0:40:25:23:7c:ce:21:0f:
eb:15:83:91:0e:b8:f9:e8:21:7f:36:47:02:59:a3:
d9:7b:08:28:53:16:79:01:83:7c:17:5d:5c:54:3b:
b5:12:59:dd:9c:23:3c:ee:ec:28:ce:a1:a1:cb:5e:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4E:63:17:75:CA:2E:32:80:3E:08:D0:38:65:99:62:EA:2E:B6:4D
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:be:43:96:8e:20:65:ec:f5:78:2a:8a:f3:38:06:cf:56:bd:
8f:23:c8:02:ab:ec:7a:1d:2e:28:5b:da:1c:90:3d:f4:f9:1a:
59:65:b9:87:99:de:c2:a6:d5:74:fa:1e:8d:7c:88:8f:fc:58:
99:c2:4d:eb:0b:bc:f3:5d:20:88:51:44:4b:5b:6c:e7:6f:1b:
94:20:42:88:b0:e5:fb:54:83:3b:ea:32:64:43:21:5a:39:b3:
8a:1a:1e:15:a5:ab:ff:73:77:74:bb:e1:2d:d9:c7:d5:d7:b2:
4c:50:25:76:47:62:85:de:af:6b:f5:cb:a9:7c:c9:57:c9:4e:
f5:2e:a6:ca:a1:a2:bd:36:7b:4d:20:3c:50:00:9c:1a:dd:6f:
db:8e:95:ab:b9:0e:88:b7:6b:47:bf:3a:95:6e:85:a0:e8:57:
6a:4b:88:83:3b:32:77:dc:1d:46:50:fb:f6:09:d2:2a:2b:d1:
16:df:30:24:f5:3d:8a:c6:b1:3c:aa:88:90:ea:39:5c:82:94:
89:ed:a3:9d:eb:1e:bd:e6:35:83:9e:ea:db:ed:64:f0:5e:b5:
51:00:fb:51:95:d9:a5:32:6c:da:43:b3:a0:f0:c0:f1:35:d6:
6b:f4:72:7a:06:35:6f:51:54:3f:0d:29:b6:10:bf:86:de:b2:
c3:7f:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:44 2026 by rpki-client