Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: s5/yv7Mx02QNkqlZ5u7mZ5PJeaIbu0A4y5vC8VeKSF4=
Subject key identifier: FF:35:A8:90:0E:50:DA:71:CB:59:B7:37:41:CB:19:48:E5:48:39:F0
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019D9E1B699B726F1EFD0A432034C8870060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 1328
Signing time: Sat 18 Apr 2026 01:01:29 +0000
Manifest this update: Sat 18 Apr 2026 01:01:29 +0000
Manifest next update: Sun 19 Apr 2026 01:01:29 +0000
Files and hashes: 1: Tj86XfWCuCApPHfYX3OGv6qhNv0.roa (hash: KavhnQrG+XPERodqs0bRhCLXxZdjDwTVYFBmFO2dVKc=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: A9JMtdFGY8H0jY9vRF19e1tfsoM8Y6Gba1ZA0EI848s=)
3: lz8LsNgX1D_wsrCHWat-j5v2uVI.roa (hash: vw9y4aHyYuZp50dhE6CiKPwsukwzG4Dv5+i3W21W3u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:69:9b:72:6f:1e:fd:0a:43:20:34:c8:87:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Apr 18 01:01:29 2026 GMT
Not After : Apr 19 01:01:29 2026 GMT
Subject: CN=ff35a8900e50da71cb59b73741cb1948e54839f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:b3:a4:11:e5:b3:1a:87:2d:06:26:62:96:
88:a9:f6:31:31:87:c7:f4:65:31:e2:99:31:4c:0a:
01:c0:b2:e1:75:8e:76:82:1a:df:0f:e8:07:65:fe:
73:d8:48:2b:73:8a:81:41:a7:d7:5f:55:38:8e:b8:
8b:9b:4b:f7:04:15:01:9a:22:56:b0:0a:6f:c8:42:
b5:d1:3b:1f:6e:53:f4:1d:65:ed:05:4e:a9:09:43:
29:82:d6:28:5d:4c:83:70:c9:f4:9c:54:32:2d:05:
d4:79:6b:50:60:26:40:27:87:44:22:fd:6c:a0:36:
e5:46:8a:a6:ac:a1:96:4d:86:1e:3c:fb:36:ea:f1:
30:0f:c4:0e:ee:0a:d8:f7:99:43:08:91:11:62:e6:
d9:5d:66:d9:d9:73:af:57:16:3a:bd:2c:49:e6:b9:
bb:7c:d1:61:98:6d:85:7a:c5:e8:37:8e:46:a7:16:
a8:96:7b:8f:10:63:b5:9b:51:83:e8:fd:31:52:a1:
29:1a:29:34:0c:09:13:57:4d:15:5b:02:1e:20:43:
55:e7:f7:f1:a7:88:65:c9:32:9c:d8:31:81:9f:e4:
c2:90:12:d0:4e:fc:88:44:15:b3:6e:9c:4f:f7:8c:
db:7f:00:28:39:07:6d:53:98:84:c9:dd:3f:88:eb:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:A8:90:0E:50:DA:71:CB:59:B7:37:41:CB:19:48:E5:48:39:F0
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dc:7f:e7:94:f8:d9:c4:b9:62:7c:97:70:66:f6:9a:42:99:
e1:b8:9c:3e:a9:f9:6b:c5:69:62:ed:bc:ea:30:ca:d4:27:7b:
bb:e2:82:fb:9f:7c:2b:9d:0d:88:48:8b:87:77:d8:54:8b:5c:
4b:65:1a:1d:80:ef:7f:9e:88:eb:f6:bf:55:a2:f8:44:6a:10:
8a:ff:c5:cd:5a:29:85:89:d8:17:ef:40:ca:8a:bd:ba:07:f1:
8d:61:7c:0b:17:a8:a3:14:db:3b:da:0b:71:65:87:f6:13:9a:
dd:3b:1d:ce:0e:27:b2:ec:39:8f:bc:c7:8a:a4:40:95:95:bf:
85:fb:54:98:11:91:3e:35:2c:71:96:dd:7d:11:3d:8d:22:5d:
0f:18:51:6a:85:d0:c9:da:62:d0:30:d8:7d:33:4a:62:5c:42:
3b:1d:41:97:fa:6e:f9:b3:eb:58:70:15:cf:68:f8:e3:32:ff:
9f:77:00:a6:71:7d:96:cd:d5:2b:2a:de:10:a8:8e:1c:77:db:
92:11:20:84:65:03:15:a3:01:e3:70:07:fa:ec:4f:94:af:66:
5d:4a:f2:d6:e5:5a:e3:d2:18:41:86:ff:04:76:5f:67:0b:ef:
d6:e9:0b:e2:ae:4e:a4:82:7b:cf:ea:b8:a6:77:92:bd:0a:18:
d9:04:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:19:14 2026 by rpki-client