Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: BiafGlNJu/2N8lUKaSEnuK6VaBfTHUmN5RJxZVzhEj0=
Subject key identifier: B6:5B:1F:2A:12:F2:12:B0:AE:6C:37:9B:DD:0A:CD:15:5C:19:02:A3
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 019D9A749B65EA07AA374CA95C62383C3E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 0587
Signing time: Fri 17 Apr 2026 08:00:26 +0000
Manifest this update: Fri 17 Apr 2026 08:00:26 +0000
Manifest next update: Sat 18 Apr 2026 08:00:26 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: PHZJ8oSS8M2Ys1D9JM+jN31h06jPGDdKZs1GAG1QHc4=)
2: zrY1kiCbt_RCBDyoPeb6Gt-rfXI.roa (hash: 99km0sbg09Xs5uX9uuCKMjDG2dbDXHFkyqnyOKsmuE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:9b:65:ea:07:aa:37:4c:a9:5c:62:38:3c:3e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Apr 17 08:00:26 2026 GMT
Not After : Apr 18 08:00:26 2026 GMT
Subject: CN=b65b1f2a12f212b0ae6c379bdd0acd155c1902a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d9:00:c6:aa:63:88:00:ee:f6:b1:c5:71:69:
a1:26:b9:d2:8a:8a:cc:68:d8:89:73:9d:c6:44:2e:
89:3b:d7:9a:c3:90:6d:11:83:68:1e:28:3f:55:6d:
37:98:98:bc:86:eb:4f:bd:2c:79:fc:5f:b4:a1:6a:
2a:d8:f3:b1:ec:de:16:e1:3c:79:dd:13:4d:79:9b:
9e:21:e4:a0:1c:ca:46:29:e5:15:d9:6e:f2:3b:0f:
89:83:0b:fc:e8:01:3a:84:d3:c6:53:c3:cd:65:de:
b7:5e:c9:70:fe:94:bc:e6:06:c0:c1:36:0c:8e:8f:
2c:5f:a0:c9:b6:27:73:3b:a1:57:12:70:85:54:dd:
81:6d:b0:77:d8:b2:26:b7:74:6c:0b:72:bb:a5:2e:
e6:0a:d5:4d:d5:88:58:b7:24:3c:0d:5c:15:15:34:
b4:50:5a:0f:91:76:b2:5f:9a:a9:63:40:dd:82:c3:
62:b0:5d:bb:97:50:25:5f:12:f8:3a:8b:b3:c2:d9:
c2:02:15:2b:72:18:52:af:c7:19:d3:2b:63:06:d2:
e4:7a:ea:e9:a2:6b:85:ca:08:63:b0:60:47:28:88:
e0:15:08:22:42:06:87:4d:34:00:4a:cf:24:b9:21:
74:61:94:6f:97:94:cb:a5:13:bd:e1:c2:73:01:a7:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5B:1F:2A:12:F2:12:B0:AE:6C:37:9B:DD:0A:CD:15:5C:19:02:A3
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:25:ba:0e:07:3f:12:a9:9a:85:79:fd:a7:50:05:ac:62:df:
84:db:ba:2d:cb:0d:c6:46:e9:40:3e:37:82:f4:91:16:4f:db:
c7:88:a1:09:b1:ea:ee:2f:b3:9d:57:8e:32:67:7e:70:af:3b:
ac:18:cf:8c:29:ea:a2:14:90:df:8c:a5:1c:6b:87:a8:ce:5b:
0a:a1:c3:a1:af:83:b2:b1:0c:72:63:19:7d:46:2b:da:44:f8:
87:b9:cf:4b:ea:74:80:44:00:73:e2:37:90:19:fe:26:b9:fb:
9f:bc:a1:3b:87:86:28:7c:f3:64:4a:01:92:40:50:41:1a:76:
13:b4:53:c1:e8:9b:a1:ff:d0:3a:3b:53:90:f6:e5:4d:dc:ac:
89:a5:29:45:ff:94:e3:0c:31:e7:28:bc:e2:6e:84:88:d2:65:
64:6e:15:c9:86:91:c9:c1:14:db:97:29:73:46:8c:d3:b8:46:
57:5f:71:40:d9:59:b5:7c:00:0b:5e:e5:1c:07:dd:2a:28:06:
36:15:d8:42:5a:ff:58:a4:07:4b:fd:85:fc:74:23:9b:8a:a8:
3a:36:7b:2c:2a:89:4b:f2:da:36:d3:b3:72:e1:1d:e8:73:3b:
10:b2:8a:65:4e:37:5f:54:d5:de:a6:1f:7b:ee:66:5b:bc:d0:
bf:e4:5b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:19 2026 by rpki-client