Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: +0ta9Gm0J5x7u7Q5Zbl4RsvQMPNl+6l4OBuM/5X3SUI=
Subject key identifier: 4A:FD:89:8A:31:80:57:0A:35:AF:60:A4:E5:46:D3:B5:0E:F1:BA:89
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019D99D01C6C2E90BB913486DCDFDB1CB045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0EA7
Signing time: Fri 17 Apr 2026 05:00:45 +0000
Manifest this update: Fri 17 Apr 2026 05:00:45 +0000
Manifest next update: Sat 18 Apr 2026 05:00:45 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: xKZC4E6yDQFnbBTfPu5yJnAbe/ahImQ0nd7F1sGu0nY=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1c:6c:2e:90:bb:91:34:86:dc:df:db:1c:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Apr 17 05:00:45 2026 GMT
Not After : Apr 18 05:00:45 2026 GMT
Subject: CN=4afd898a3180570a35af60a4e546d3b50ef1ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:e4:63:83:00:42:74:1b:05:ef:37:ae:9c:
83:00:77:8a:0b:82:b7:47:54:14:fa:a0:bc:8d:70:
4e:81:22:9c:f4:df:a5:c5:f4:28:cf:b5:14:e1:8d:
a2:bb:1b:96:fb:da:39:a6:b2:f3:55:c1:15:cf:8a:
31:f9:cf:f4:7d:fd:07:f1:aa:61:79:9d:fd:9f:92:
e7:b1:51:f3:36:82:26:dd:60:06:41:36:ab:f1:bd:
29:94:cf:72:a8:13:a2:1c:b6:da:ac:ed:ee:b3:8d:
b1:0d:5b:97:eb:2f:0c:00:23:62:59:f4:37:00:47:
70:14:59:1c:ab:2c:4a:b2:bf:58:d6:cf:5a:e5:78:
e1:c1:58:b2:ef:43:dc:74:6d:1a:3b:37:30:c0:2e:
91:69:99:4b:cb:e7:6b:a5:a5:24:c1:8c:46:ac:a2:
36:2c:f2:ee:73:19:c2:a8:37:bf:14:11:99:9b:b0:
0b:06:49:0f:73:b2:9c:c5:93:01:c8:ea:73:88:07:
df:b4:5f:01:f2:84:f1:e5:7a:73:a9:4a:28:36:fc:
f2:4a:ab:8c:3b:9b:64:3a:99:ce:c3:73:af:f6:cb:
46:d8:c4:a4:9b:b5:e8:16:53:f7:fe:ee:dd:0e:86:
8f:2f:36:4c:56:e9:77:8a:82:63:97:57:bb:36:14:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FD:89:8A:31:80:57:0A:35:AF:60:A4:E5:46:D3:B5:0E:F1:BA:89
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:26:5f:67:cc:4d:ba:47:de:48:60:8f:e3:9d:61:23:05:f7:
d9:78:3e:cf:2a:2e:33:eb:99:d6:be:e7:d1:10:0b:98:33:24:
99:77:c0:4a:01:5c:66:c2:59:fd:87:72:d6:cc:a7:d2:e7:17:
ea:79:a2:52:8d:a5:fa:79:c9:93:f8:98:80:a4:81:21:38:ca:
81:fc:57:5b:bf:32:cc:a6:15:d4:57:d9:ca:ce:9e:b9:1d:d1:
b7:fe:ff:03:36:9f:9e:bb:0b:7f:9b:fd:24:d6:44:d7:ea:a6:
7c:d5:f8:9b:e9:70:d2:1c:e5:74:3d:79:34:16:06:5f:28:90:
f1:5e:a0:5f:ca:26:fe:79:20:dc:49:1c:2e:b9:67:f6:11:36:
25:85:24:e9:b1:cf:cf:1a:11:25:d9:2a:65:5e:25:f1:1f:c7:
90:cd:54:6d:b0:e9:10:10:77:3c:5d:29:85:55:47:b6:10:5f:
9b:cf:bc:b4:a3:9f:5d:e2:b4:d6:4b:27:14:ff:14:b9:23:71:
7c:1e:8d:e3:3f:39:08:37:f4:e2:42:fc:85:21:26:91:e4:d4:
6e:3b:6f:ec:74:9d:cb:b8:93:8a:9c:bf:39:03:c2:a9:9d:8a:
3d:39:0f:af:72:a3:c2:c0:1d:ed:29:47:c1:d7:a7:59:bd:e0:
0c:17:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:56 2026 by rpki-client