Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier: tqzETeCl9yLMGB5UySo8SWHLMXv5+MZXvzOjkD9xb/Q=
Subject key identifier: 5E:D9:03:E4:DB:0A:55:63:63:4C:FB:34:79:AB:30:67:EE:44:32:31
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial: 019D99D099F42710655ED0C5B660192EF81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 05:01:18 +0000
Manifest this update: Fri 17 Apr 2026 05:01:18 +0000
Manifest next update: Sat 18 Apr 2026 05:01:18 +0000
Files and hashes: 1: V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa (hash: ry1QmNgsoyY18ZwPnwsZ1kzSR5GRuG7sj4PvQ3AErOM=)
2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: 6CNpjN0eV+LnHWEdUYrLC81wPwaXQ7wWwiIadhLDBmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:99:f4:27:10:65:5e:d0:c5:b6:60:19:2e:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Validity
Not Before: Apr 17 05:01:18 2026 GMT
Not After : Apr 18 05:01:18 2026 GMT
Subject: CN=5ed903e4db0a5563634cfb3479ab3067ee443231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:6b:6d:04:a4:df:c8:2f:83:1a:72:c7:70:
8b:d1:3f:00:a8:af:2a:f3:77:77:e2:5a:aa:3a:1b:
51:d1:ea:3e:30:ef:fe:0c:06:9f:41:b6:af:87:bc:
64:fa:63:40:d4:d0:26:93:1e:ff:da:a9:31:04:63:
c3:03:e6:46:7c:50:f2:2c:39:83:1f:25:8e:3a:d1:
a0:7e:7e:a1:bd:48:c4:6c:c3:92:b6:23:e6:14:ba:
78:8b:34:99:09:f9:2e:d5:d8:cb:30:39:d2:8d:ef:
74:ad:dd:6a:65:88:f6:f3:32:a3:00:4a:4e:d0:65:
94:8a:e1:12:42:57:78:e7:23:3b:56:59:4f:e0:c8:
b1:e9:f2:9b:72:23:6c:0c:f2:bd:21:57:c0:2b:c5:
3d:b0:66:0d:df:b9:50:15:d9:cf:42:e9:4c:a5:f0:
26:a1:73:db:48:c7:a8:7f:8c:9a:6a:08:f9:c0:38:
d5:d9:a9:3b:15:54:4a:92:ba:2e:70:f0:d1:cc:02:
92:01:d3:f0:90:e0:c6:18:60:06:96:7c:f0:1d:76:
7c:74:20:d6:6c:e7:11:cd:ad:79:53:a2:14:76:ea:
28:02:2b:30:16:ae:6d:95:ed:52:78:f9:93:87:a2:
6f:93:ae:9a:e5:11:e9:b1:5c:d7:41:a8:3c:c5:52:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D9:03:E4:DB:0A:55:63:63:4C:FB:34:79:AB:30:67:EE:44:32:31
X509v3 Authority Key Identifier:
keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:40:54:15:dd:0b:47:0e:f6:9e:2d:d7:9b:3d:f1:70:ff:98:
27:f8:07:75:19:6a:e2:04:1e:05:db:3a:90:bd:24:16:2f:7b:
17:df:78:32:83:87:e0:e6:08:52:5d:2d:dd:5b:80:4f:2d:6d:
71:a9:80:c1:fc:a1:e6:cd:ab:12:b1:16:10:a8:c6:a1:a0:a5:
cf:9c:4f:e2:92:29:c1:a1:22:61:0b:54:2a:7d:37:6e:0b:78:
6b:90:c0:d1:17:a3:3e:c6:a1:a4:5b:dc:a9:1a:ba:e8:db:f2:
ae:de:ef:41:58:dd:69:0c:c6:9b:6c:e0:31:d8:46:6c:a8:3c:
bb:24:c6:e0:15:81:87:ea:3e:41:5a:0c:5d:78:6c:bc:c7:f9:
11:b1:1c:54:f1:a1:18:eb:35:a5:c1:7f:e1:3c:02:b9:4a:d2:
d1:58:3c:fe:87:d1:84:cf:2d:41:aa:81:ff:1c:98:3c:33:48:
7c:67:ab:30:60:25:39:45:7e:4a:a0:b1:94:8e:a3:01:89:d1:
47:b9:c3:6b:5a:64:60:3b:36:0a:70:9f:43:1f:f4:fc:7d:1b:
dd:57:f6:ab:bf:7c:17:d0:bb:74:04:86:cc:af:66:89:25:39:
a2:aa:91:5c:ba:f8:33:c0:03:3e:1f:17:de:7a:a9:bc:dd:e0:
0d:24:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:34 2026 by rpki-client