Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: OIDJ2fj0DBkduJVFo9HVGurqub/5niON5MEvo3yPaDI=
Subject key identifier: A4:81:45:B8:D8:E5:16:1A:13:91:E7:6E:D0:0E:EC:10:BD:C7:95:B7
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 019D9A076810B61DAA3C21D3A885D7B4FF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 0A86
Signing time: Fri 17 Apr 2026 06:01:09 +0000
Manifest this update: Fri 17 Apr 2026 06:01:09 +0000
Manifest next update: Sat 18 Apr 2026 06:01:09 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: WSndTl0Gutq2b5F3MOkbi1YkCmKG2Nj+ddHEuCiIUY4=)
2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:68:10:b6:1d:aa:3c:21:d3:a8:85:d7:b4:ff:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Apr 17 06:01:09 2026 GMT
Not After : Apr 18 06:01:09 2026 GMT
Subject: CN=a48145b8d8e5161a1391e76ed00eec10bdc795b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6e:02:0f:eb:98:e8:21:91:72:1f:93:41:ea:
50:7a:19:17:65:76:ef:5d:08:fe:88:23:5e:23:97:
de:b9:7a:37:dc:c5:17:23:de:05:28:d8:62:ef:a5:
c3:83:4c:17:d1:e2:0b:99:48:cb:a9:de:7c:cb:07:
b5:f6:6e:e7:bc:39:85:4a:08:a7:06:d9:cd:e4:41:
cf:3d:24:3d:58:60:92:5b:bf:83:d2:36:c9:df:b4:
b9:af:d9:f0:d2:c0:38:c5:27:8b:b2:d6:67:fc:05:
33:ac:c6:fe:50:60:32:8e:6c:e7:1c:7f:7b:85:17:
cf:5b:a5:0f:49:f1:82:e9:55:3a:ff:e1:28:73:4a:
78:66:f7:5d:a8:6a:ed:eb:97:d0:41:99:f1:6c:a5:
f1:45:a4:45:f0:2e:98:12:4e:9c:9a:93:a2:59:5a:
95:bb:19:d5:39:3f:e8:31:a5:17:70:76:a1:bf:4f:
9c:46:d1:17:37:38:fd:57:41:d6:50:c9:98:8d:c7:
5a:8b:1f:57:96:fd:34:aa:b1:40:91:a6:9c:1f:f9:
88:a9:76:e7:77:45:86:c3:70:b5:e0:e3:3d:43:a2:
de:8f:a3:b0:a0:7f:c1:22:57:3c:8d:d6:00:ee:cb:
17:40:99:dd:0c:bc:5a:7c:25:28:bb:5e:a3:fb:e1:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:81:45:B8:D8:E5:16:1A:13:91:E7:6E:D0:0E:EC:10:BD:C7:95:B7
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:29:95:1a:c1:f7:c7:b6:74:de:3e:fd:4d:c8:f4:b3:32:30:
02:17:48:74:0c:24:e3:ed:8a:e2:e9:85:cc:43:db:ea:31:0a:
6a:82:63:8e:a1:03:0d:15:eb:2f:de:b6:e2:bf:3c:6f:36:b6:
76:50:e1:c4:b8:e5:d9:66:2b:f1:d7:33:32:c0:4a:9c:53:e9:
6d:74:ee:15:7a:20:3a:df:f6:9c:f6:bf:05:9a:35:1d:75:a6:
2a:43:61:08:5e:61:26:af:7c:ea:b8:ab:c7:2f:e1:40:0d:a6:
27:1d:18:55:41:18:30:c5:9e:81:fb:45:33:d3:b7:29:d7:0d:
ae:ce:a9:98:a0:38:d8:fd:32:97:dd:f3:87:2c:47:ee:7a:0f:
74:97:60:62:1b:d3:2f:7f:0a:c2:41:97:09:9b:84:11:bf:f0:
0d:72:f8:10:70:cb:b2:30:89:7f:d6:bd:ae:32:d7:3f:23:50:
8f:02:0a:e0:b1:12:c3:82:0c:03:52:92:99:25:61:b6:c0:6e:
d1:60:7f:a5:5f:15:09:9f:d7:a7:5f:69:65:05:31:1c:17:bf:
ba:07:aa:e1:52:b3:d1:fd:bb:22:c0:0d:2c:8f:c1:0d:82:5a:
1a:12:b5:6e:9e:fe:a4:09:ec:d2:24:b3:aa:bf:d4:67:91:8f:
7f:8c:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:09 2026 by rpki-client