Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: 1u+sn6SmvoZP1M8n0nwO7ROcJdHmtxsHzPxBrqdGglI=
Subject key identifier: 31:A2:CA:03:56:FB:D3:37:83:A8:9B:83:7C:7A:8B:97:85:D8:67:40
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 019D9962ACCB8D2C259359BFD603FCA7C51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: CbUjr1UvlkF8n-aSwRMeoAKRr08.roa (hash: uLotTSOrlblRssB3pzAzK8VGcBOkdwWIKgpcVkQ5HL8=)
2: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: ZSx7HOJ15xntP02MZzSaNh+jTufg7sNk9yP1rbvG2q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ac:cb:8d:2c:25:93:59:bf:d6:03:fc:a7:c5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=31a2ca0356fbd33783a89b837c7a8b9785d86740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:f3:9e:97:cf:82:e5:b1:0e:00:ae:f9:70:
81:86:1b:8c:c2:47:05:26:fc:f7:1f:d7:08:d6:94:
c0:39:51:91:4b:00:17:72:ff:6e:f7:53:c4:fb:60:
bf:c5:f4:d9:05:a4:5c:22:b1:5b:74:ca:67:57:98:
01:e4:2b:3c:b8:6e:43:c9:d9:e5:2a:bd:64:46:65:
d7:2a:e5:ec:70:fb:b9:cd:99:e1:96:32:07:98:8b:
16:22:e5:76:0b:27:81:ea:90:21:cf:27:65:c7:be:
a9:ca:2b:b9:79:7a:66:74:22:8a:3e:fd:72:55:fc:
2c:71:ff:b2:9e:f6:9c:79:7e:b8:c9:52:72:5e:a2:
bd:66:af:4d:da:ca:b8:ed:45:da:89:6a:2c:41:ec:
97:c6:4b:45:8b:2d:ba:4c:5b:d4:fa:60:f7:35:e5:
71:0b:ec:03:a3:5f:dc:36:02:a7:cc:a2:8b:52:37:
6b:88:e4:2f:3c:e6:25:a9:0e:32:ec:ea:4f:21:4a:
d4:61:b3:22:66:24:f1:bf:8f:84:92:9d:a2:7f:46:
60:b8:5a:08:62:1a:02:44:fe:28:4d:f6:da:12:12:
bc:e4:09:5c:ba:05:21:84:08:00:50:b3:65:4d:c2:
6c:48:98:85:c0:0f:52:58:18:3c:dc:c4:00:4e:cc:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A2:CA:03:56:FB:D3:37:83:A8:9B:83:7C:7A:8B:97:85:D8:67:40
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:d0:3f:0a:ee:dc:b8:a9:ca:d9:89:6a:1f:ee:1c:fe:dd:
3c:4b:31:01:59:1a:8d:17:4e:6d:95:43:0b:96:cc:02:07:7c:
54:ee:bc:96:c0:4b:d6:fb:cd:88:4b:d3:36:bf:f4:e2:45:00:
61:f5:c3:4d:c5:ff:1e:38:40:2f:d5:2f:36:f6:0b:54:ac:15:
3a:b2:1e:b0:57:d7:26:83:c5:25:e1:6b:cd:c1:7d:cc:74:e0:
09:8b:2a:11:99:41:3d:35:08:e2:4d:b9:ef:da:5a:8e:32:a6:
f5:0b:08:a8:df:f3:38:c6:0b:fa:6e:c2:97:3e:25:fe:22:ca:
3c:c0:69:25:2e:1e:66:4f:21:ad:84:5b:53:06:53:ea:86:58:
c2:ba:d5:84:76:2a:47:2f:74:93:5d:77:89:d0:85:5b:ed:26:
3c:59:76:ed:6e:fb:0f:2d:a2:81:58:d5:88:07:41:26:a8:2f:
14:87:b1:41:10:27:9f:ba:c0:80:4e:11:67:d0:27:fa:68:b2:
ec:a9:20:c2:f6:22:1d:5e:a4:aa:2d:44:6c:e5:0e:a4:f7:5b:
e0:6e:8e:09:52:36:8c:1c:c3:d5:dc:cf:b7:f3:e7:f9:c5:95:
fd:ba:4e:b1:9d:0d:e2:34:54:0c:30:cd:aa:7e:a7:38:91:e1:
6e:b5:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:36 2026 by rpki-client