Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: Wvoomy0lYJGAdWRQBkJ/erlUhTweeY0Cdx18ZlcjkiY=
Subject key identifier: 0E:C8:3E:96:FA:18:21:BF:E5:71:15:3B:7D:B0:2E:87:1D:DB:60:07
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019D9962387793CBD5D5642B1AFB933474AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: oE6u0zU+12wvmRPfwThzNVFsXQnFoBR0FVYDdV4pQlU=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:38:77:93:cb:d5:d5:64:2b:1a:fb:93:34:74:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=0ec83e96fa1821bfe571153b7db02e871ddb6007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:04:3f:19:5d:af:71:6c:16:04:c6:eb:95:
ea:cc:29:34:1b:aa:9d:4c:57:eb:dd:88:f9:27:43:
05:e9:20:0f:f0:83:8b:5f:bd:36:18:09:15:e5:af:
a6:45:06:af:25:e7:95:a3:7a:5e:b9:95:44:63:13:
5b:ce:74:2e:2b:5d:1c:6c:cf:9d:65:98:82:a0:cb:
ab:bd:90:93:7c:01:d0:73:32:a3:69:60:12:0f:84:
28:12:db:35:ca:f3:9f:38:5f:d6:9d:96:68:bb:a3:
1e:f7:f9:f6:9b:96:fb:d4:1b:8f:28:0c:e9:8e:45:
b0:10:94:4d:dc:a2:b0:df:b4:14:af:b3:0d:d4:90:
f8:52:bd:47:5f:41:4e:06:59:df:19:0d:1f:24:b8:
bb:6c:b7:a7:c9:91:7b:11:28:6c:e4:b6:42:bf:1e:
91:66:6e:5f:f5:47:4f:79:77:3d:c6:b8:c7:ce:0d:
35:9c:d0:2d:e9:be:ce:19:81:c1:90:35:6d:cb:5f:
d0:26:2b:cb:0a:d4:d3:a0:68:2a:fa:15:f6:ce:27:
fe:59:74:01:69:b6:aa:bf:48:84:f6:9d:b4:ab:4f:
4e:72:e3:49:21:64:47:7c:5f:6b:fb:93:3a:5b:86:
02:53:6f:bf:dc:3b:77:5f:f6:b6:95:83:57:fd:df:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:3E:96:FA:18:21:BF:E5:71:15:3B:7D:B0:2E:87:1D:DB:60:07
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:74:3c:da:77:f8:2d:80:e4:94:11:87:db:95:1e:d0:31:22:
8d:b3:ff:a3:77:a1:00:2d:79:16:b8:fe:cc:ac:c6:fa:5f:13:
be:de:9c:1f:d4:e5:d1:f8:b5:2c:19:d6:9f:e7:47:ce:65:0a:
0d:59:19:57:09:9e:96:5a:d5:9d:3e:0b:70:d7:cf:3f:5c:f3:
d8:06:c4:53:1f:31:7a:83:b5:68:55:8d:5e:d2:7e:22:c2:e5:
d0:66:21:8f:74:de:e1:32:eb:01:82:19:9a:50:a8:81:3d:14:
66:ae:f6:ed:f8:4f:70:8f:24:ca:c0:da:94:e3:90:f8:74:09:
49:2b:df:53:1b:06:eb:7b:ef:db:62:b1:ce:db:b6:c8:0a:af:
97:a0:ae:39:ed:9c:78:9f:af:0b:17:3d:dd:31:6f:26:03:cd:
fe:bc:0b:cf:a1:10:6c:31:20:52:2f:98:ec:13:3f:d3:d0:88:
a3:13:23:98:56:88:20:5d:29:88:fe:9d:36:96:e6:7f:da:cf:
10:ce:01:9e:a7:b9:c7:ed:2b:1a:67:8a:61:e2:f3:5f:c0:21:
80:c5:e0:bf:31:d8:98:64:10:fe:62:db:1d:e6:07:e4:d4:82:
c2:33:0b:8f:07:7f:c6:1a:9d:5f:d7:66:be:4b:ef:19:fe:1e:
93:d4:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:23 2026 by rpki-client