Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: cqKSLnzSDXVObXk+ts9rvmp+STOlNSQmLmDxugRd2BE=
Subject key identifier: B6:98:BF:2B:C8:5C:0A:CA:D5:CE:58:25:52:D0:5C:00:E4:21:76:63
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 019D9AE2AA26AA846AF8B1D2B5C144DFBADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:00:39 +0000
Manifest this update: Fri 17 Apr 2026 10:00:39 +0000
Manifest next update: Sat 18 Apr 2026 10:00:39 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: 8VTtaHjSbDH64hna6C5BLfUuAMq0mkeC8iwE8aNcQsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:aa:26:aa:84:6a:f8:b1:d2:b5:c1:44:df:ba:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Apr 17 10:00:39 2026 GMT
Not After : Apr 18 10:00:39 2026 GMT
Subject: CN=b698bf2bc85c0acad5ce582552d05c00e4217663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:71:c6:c5:2a:63:e1:ba:fd:30:90:5c:f8:
43:06:5b:1e:82:77:f7:b0:ea:e5:9b:6d:b0:8e:de:
22:81:51:90:ea:d5:8e:a9:67:23:3e:7d:30:3d:0d:
da:e5:be:5f:2a:1c:b2:38:9b:3d:12:41:ac:5f:b8:
04:1d:9a:70:4c:95:10:e6:ff:cf:99:bd:61:f2:a6:
4a:ad:21:ed:46:20:ed:35:79:a0:a8:cc:77:4f:54:
51:06:7c:49:8f:c1:bd:57:29:f8:04:94:60:ed:d0:
fd:18:c5:c8:65:97:6a:b9:e2:c6:96:b7:8c:26:09:
e0:da:21:3c:08:22:ae:db:7c:d0:4f:76:48:fa:43:
52:b1:d8:9f:5a:35:9d:a7:48:ad:52:2d:2b:4d:07:
c2:f7:45:52:e9:09:26:d6:cc:3c:1c:36:30:63:0d:
b6:53:8c:68:a0:18:0a:a0:f5:c8:90:be:c1:d4:2a:
ae:16:55:f9:26:a9:a9:eb:18:9d:a9:19:52:27:10:
70:75:05:af:7e:4a:92:28:ed:0f:03:26:5f:67:1a:
72:d1:2f:a7:bd:d4:aa:1d:30:58:d1:1d:7c:2c:f7:
3d:a1:7b:7c:e2:8e:bf:ba:c6:b4:6f:71:e5:0c:f8:
25:dc:33:86:6c:33:87:1c:17:69:e9:0b:32:d5:6d:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:BF:2B:C8:5C:0A:CA:D5:CE:58:25:52:D0:5C:00:E4:21:76:63
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:ba:4d:4e:17:a1:6f:32:d7:3e:52:cd:38:61:73:3a:c4:
7c:61:23:16:42:be:1b:6a:e3:ec:37:c0:f5:84:b7:a7:9a:c8:
c1:13:48:8b:4f:f6:13:a7:7a:17:50:c5:5f:da:6f:16:32:5f:
5a:37:93:d1:c7:3d:03:fe:ad:da:7e:4a:63:7a:86:d7:96:e5:
d4:8d:f9:46:25:d8:42:9e:f5:6d:3e:c3:b7:07:36:08:31:a7:
1d:db:17:81:32:93:90:e2:12:75:ad:21:fe:f2:ad:61:cc:55:
57:29:82:0c:f0:42:30:19:a4:5d:30:d5:a5:52:58:82:96:51:
23:86:f0:71:0a:93:bd:8c:94:db:a5:67:37:c9:0d:fb:d0:b7:
87:eb:b8:07:76:fd:2d:f2:3b:83:eb:ee:0c:89:b6:c0:a1:89:
c5:9d:80:ac:ba:4a:2c:d9:84:5f:b6:5b:d9:54:80:1c:f2:09:
51:16:f9:3b:e5:73:cc:cd:f6:06:1c:7d:14:7d:1b:6c:10:e9:
e6:37:d2:81:f4:7e:ca:20:8d:7d:09:89:0f:c8:30:53:07:12:
28:d3:09:f3:b2:38:90:50:9a:fa:c2:93:62:ea:dd:b7:a4:36:
3c:eb:9d:de:4d:53:f5:a6:9a:81:22:8c:fc:70:63:94:3a:45:
b1:f1:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:47:10 2026 by rpki-client