Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: TwdN3CltF8ImagmqjG5NcTMjX036bojhNvalHkQ7X0U=
Subject key identifier: 1D:4F:8A:D1:5C:03:B0:F0:8F:54:AD:2B:28:8C:0A:28:2E:14:D3:81
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 019DA30AEBCCE4BCF6A1DDFED01EA02A926B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 0897
Signing time: Sun 19 Apr 2026 00:01:34 +0000
Manifest this update: Sun 19 Apr 2026 00:01:34 +0000
Manifest next update: Mon 20 Apr 2026 00:01:34 +0000
Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: c3zMiHeRW3i7WIdubiE19f9SemKpmecn+9nswGm1D/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:eb:cc:e4:bc:f6:a1:dd:fe:d0:1e:a0:2a:92:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Apr 19 00:01:34 2026 GMT
Not After : Apr 20 00:01:34 2026 GMT
Subject: CN=1d4f8ad15c03b0f08f54ad2b288c0a282e14d381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:f9:d3:59:f9:23:08:23:bb:a1:c5:32:f9:
23:1e:f4:4b:a0:2f:f8:13:bd:7f:ce:6f:82:70:37:
d9:63:57:17:f4:87:7b:05:43:3d:52:da:db:d0:93:
3e:df:9e:d7:73:af:1c:78:ed:db:27:e7:dd:c1:42:
52:0b:5b:b1:83:4d:99:74:f0:2e:e8:c2:82:ca:5b:
f8:d6:f0:38:9b:c3:72:71:b4:ff:86:3d:ea:68:07:
8d:c2:2a:f8:6a:dd:f1:4e:e3:21:aa:a4:06:72:1c:
a8:2b:f2:ff:3a:b4:54:28:39:73:0f:c3:cc:4e:f6:
f3:ba:20:a0:ae:70:55:b4:aa:9e:f5:fc:c6:3a:d2:
5e:97:0b:a7:85:f6:bd:28:37:d3:e9:ca:c6:da:f2:
8f:e9:c2:8b:d3:76:53:e4:d6:95:f2:c0:94:2c:62:
31:3a:91:9b:af:b6:80:eb:fa:69:bd:a4:1d:45:5a:
be:06:a9:12:9e:dd:88:e4:71:3d:b3:d9:09:02:fe:
09:3e:89:a4:19:c1:27:06:b5:71:2c:a5:84:72:2a:
ca:85:8a:33:1c:79:e6:a6:e9:2f:e7:c1:09:cb:79:
a4:dc:a4:a9:cb:c6:69:5b:dc:0d:7f:af:a1:aa:3b:
18:4e:38:8a:e3:5d:e6:ea:7d:13:71:8b:94:aa:6c:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4F:8A:D1:5C:03:B0:F0:8F:54:AD:2B:28:8C:0A:28:2E:14:D3:81
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f4:81:1f:eb:30:5b:34:29:e8:78:46:d0:54:ee:a8:92:c7:
2a:6d:41:c9:8c:c2:78:ce:78:e6:20:1e:87:b1:4d:8c:52:94:
bf:81:92:2a:86:7c:ed:c4:14:86:78:b4:08:df:28:c3:68:45:
dc:81:ca:08:4f:96:2e:99:ac:01:26:e1:68:13:a0:a6:06:1e:
b9:a3:31:3d:31:83:f2:c6:20:24:eb:d9:17:ae:4f:d7:d9:83:
00:64:d8:9e:ed:c0:aa:0d:51:30:8c:3d:59:9a:c8:19:c0:bd:
f5:58:e0:7c:c0:d0:6a:69:70:d7:26:ca:99:9c:7c:6e:a7:0f:
f1:74:20:63:9e:b9:c0:cd:45:77:64:29:25:3b:7a:fb:6e:00:
79:52:74:4c:0a:f7:84:1e:2a:b1:c4:22:ef:aa:31:0b:9b:ee:
5e:1c:33:1c:43:16:1e:98:a2:01:6d:13:bb:31:26:bd:7d:53:
fb:e3:82:a8:ac:50:42:38:16:6e:fb:6f:74:cd:b3:ef:8e:e3:
25:2e:0c:ce:6a:75:37:cc:92:7e:62:f4:09:49:48:65:24:5d:
03:86:75:6f:e7:e1:aa:3d:48:b2:57:49:98:ca:1c:fc:58:c0:
bc:85:87:43:85:8a:8c:8b:4c:e5:f2:db:d8:e9:a5:d8:e2:d0:
01:8e:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:03 2026 by rpki-client