Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: modao+kNW3l8VN9PRtbXTQ4VT50B+VlU7G8c7IZ5/Pk=
Subject key identifier: 67:0E:27:95:9C:64:AB:F7:C2:43:76:BC:CD:95:DC:2C:6D:62:8E:B3
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 019D98508A9D8C116BCBCFFFC92BC88D377E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:48 +0000
Manifest this update: Thu 16 Apr 2026 22:01:48 +0000
Manifest next update: Fri 17 Apr 2026 22:01:48 +0000
Files and hashes: 1: 1-KKEOWBhq-Xin1u07sp8fmHrvqc.roa (hash: PYl3rvHgnbdTXI4oGxGWGnIZl/efX3OeaWnZ83sqU1U=)
2: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: ui6eyFJdsOA5xQLm5MFgc/RAms8rkHxAm4ZkJPxgPN0=)
3: hRCE6LdZkeQzF92rmCQdMQvaaL8.roa (hash: UB0DT/MFY2dNlWf8e/9nwn7NarMnjJ7fyxrd+zzOII8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:8a:9d:8c:11:6b:cb:cf:ff:c9:2b:c8:8d:37:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Apr 16 22:01:48 2026 GMT
Not After : Apr 17 22:01:48 2026 GMT
Subject: CN=670e27959c64abf7c24376bccd95dc2c6d628eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:7a:61:27:e2:a7:53:e9:a6:78:33:3e:16:
0c:c4:86:5c:5a:e7:d2:7d:f5:fd:3b:66:d6:e3:a1:
65:a0:3d:dd:f0:38:17:9f:1b:d6:1a:d0:87:b3:1f:
b0:3a:7c:06:aa:b3:1a:47:08:93:66:f7:af:8b:5a:
48:0a:a7:3a:fd:af:f1:4e:28:df:18:65:48:07:eb:
58:17:53:e5:e1:9d:96:11:bb:9c:d6:75:3d:99:10:
f6:6f:3d:fb:be:5e:55:7c:fb:78:1a:ef:5d:30:dd:
81:22:6b:60:0e:9f:14:d9:0f:98:30:04:f7:71:03:
ea:4b:28:e7:47:41:67:f1:53:bf:02:39:70:8d:68:
99:97:02:f5:6d:86:8e:e7:9a:16:f6:83:6c:af:3c:
95:77:f8:f4:49:23:28:b9:dd:7c:ff:9a:79:b3:cc:
1f:66:d1:d3:50:1c:f8:b0:91:d7:21:0a:b7:cb:1d:
8d:d7:b2:d0:95:c7:be:2c:f5:44:b4:d6:be:20:24:
2e:5d:f1:42:66:7b:54:0d:0e:eb:0c:d1:ef:91:72:
bd:88:65:57:0d:49:35:17:7e:30:7b:9c:62:4e:d6:
9a:8d:f9:58:60:08:cf:35:bc:47:13:b7:0b:5e:e8:
e1:5a:b7:a1:ca:b0:71:60:f3:d1:b6:53:1e:7c:63:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0E:27:95:9C:64:AB:F7:C2:43:76:BC:CD:95:DC:2C:6D:62:8E:B3
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:9c:52:89:e4:5d:08:c3:56:ee:da:31:99:af:4e:80:fe:
91:06:9d:7a:f8:6a:8e:76:e4:f4:bc:1e:9a:63:18:d7:a6:02:
6a:85:0b:98:c6:9d:e1:46:c3:50:da:e4:25:3f:8a:ee:17:5b:
22:80:8e:2d:22:9e:e2:33:fc:5d:54:49:04:34:14:02:ce:67:
aa:02:f1:c6:cc:c3:fe:91:d8:85:f9:59:bc:a1:96:22:89:0e:
94:3e:ec:29:91:f7:46:ff:57:87:38:63:8d:ae:bd:c0:32:a0:
0c:64:da:f2:7a:d5:68:01:77:6d:d0:6a:6c:1e:bf:4f:e2:e5:
26:bd:be:8b:66:0d:5f:6c:a1:cc:bb:81:d9:6c:d2:d5:f8:45:
b8:73:55:24:7c:e0:16:21:57:0e:4d:57:38:f5:cd:9b:44:9d:
11:8d:e0:e8:4a:5d:0a:d8:91:3d:81:d6:21:b6:81:f5:d1:0c:
0c:10:42:09:52:55:67:3a:bf:5f:63:4f:ce:59:d2:87:f5:84:
af:8f:8c:07:51:06:6c:65:61:5e:6f:9f:64:d8:be:71:5c:11:
4b:53:a0:db:fa:5e:3f:32:ff:ad:4b:02:f0:31:f5:b2:01:94:
4c:22:23:eb:98:15:1f:e0:d5:40:9f:0a:80:0f:c2:80:5c:e6:
b9:2b:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:19 2026 by rpki-client