Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: Bauvr8wMeyI/7RZxBMi68Kp1eGX6+vLFfD1xkJGHJXE=
Subject key identifier: D5:F6:2C:04:31:E9:6A:0C:30:7A:28:ED:07:DB:2A:0A:43:B1:FD:31
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 019D9AE2E69BE7A6E9219A65D9E389964543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0C7E
Signing time: Fri 17 Apr 2026 10:00:54 +0000
Manifest this update: Fri 17 Apr 2026 10:00:54 +0000
Manifest next update: Sat 18 Apr 2026 10:00:54 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: /v7PNy8tz+C2BPnRqj2LxkvZdOX6g84/gkrOiLr+4T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:e6:9b:e7:a6:e9:21:9a:65:d9:e3:89:96:45:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Apr 17 10:00:54 2026 GMT
Not After : Apr 18 10:00:54 2026 GMT
Subject: CN=d5f62c0431e96a0c307a28ed07db2a0a43b1fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:31:af:b2:5c:4b:8c:2d:79:14:f0:1c:c2:
33:90:24:99:17:f3:7a:ec:ab:40:56:fe:1b:e6:35:
20:98:7f:8e:99:e9:b3:48:64:eb:98:af:1f:ab:93:
7b:60:26:bc:87:70:0e:19:78:28:96:62:62:70:1b:
ef:7a:53:36:86:63:8b:ba:db:bb:73:df:34:d3:f9:
cd:25:48:b0:d6:8f:c9:fd:5e:cd:12:0a:f3:ef:84:
70:65:85:57:67:54:98:f5:86:5b:c1:bf:10:de:7c:
9a:55:fc:20:41:6b:9d:f4:52:26:20:09:42:f0:cf:
86:0f:ab:36:d3:68:81:f6:4b:b1:76:1c:8d:7c:a7:
5e:dc:49:2b:ec:af:34:68:2d:a4:0b:80:51:f6:98:
24:e1:78:20:fe:80:6f:58:40:e8:9e:ab:99:16:f0:
99:b2:a0:57:34:6f:11:9e:49:4d:43:b3:a9:84:d8:
64:d0:a7:08:83:14:28:a5:93:62:0a:03:6c:af:c2:
fe:be:b3:6b:8c:43:1a:96:cf:df:b4:06:3f:a9:dd:
a0:5e:15:95:bb:9b:7a:2f:59:bd:b6:de:3d:c1:73:
d0:fb:6a:fd:47:eb:a8:b1:75:c3:dc:5e:33:f5:40:
5b:6e:55:19:a9:ab:95:c5:e0:73:1b:40:6f:73:7e:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F6:2C:04:31:E9:6A:0C:30:7A:28:ED:07:DB:2A:0A:43:B1:FD:31
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2f:5b:8f:c0:f3:54:0a:e6:12:dd:70:50:b5:16:84:c8:6c:
ed:b8:11:7c:9b:a6:b9:23:4b:d7:6c:64:14:18:cb:65:63:41:
48:9b:4d:6a:d9:eb:83:7d:1b:52:80:2a:f8:20:ab:01:f0:3f:
db:36:4c:b6:72:e3:70:ec:ce:9b:81:7e:71:2e:ce:99:cc:27:
e8:3b:f6:fa:37:1f:90:80:c8:83:63:56:96:19:09:b8:59:0a:
e6:8b:02:29:6e:fc:bf:c0:74:db:33:0d:a8:53:b4:e3:56:37:
4b:91:98:1c:47:83:c6:03:d4:5a:a6:31:3e:fd:d9:04:06:97:
35:db:6f:8a:5c:42:16:ef:36:af:77:18:d7:39:37:09:31:37:
f4:26:a3:0f:46:8b:7f:d5:85:14:32:9c:8f:23:18:bb:dd:c0:
a8:ab:99:60:23:f3:a2:71:60:de:7b:01:42:87:09:d0:6a:d6:
81:b5:02:57:4f:c5:4d:e0:75:59:98:fc:52:9f:aa:4f:d4:ff:
b0:8a:60:05:aa:30:46:c6:b9:54:da:a4:d1:3a:cb:63:cf:f5:
90:74:ed:3c:b6:54:9d:df:fc:a3:97:9c:f3:5f:2d:50:4e:f6:
9f:40:55:8d:8f:d4:14:ba:5c:60:09:45:23:0f:34:73:77:fe:
07:0b:2a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:16 2026 by rpki-client