Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: AMJ2Euvl+P0tUt3jAinQq7rVJ9IO3Y1klw+2fBmahSA=
Subject key identifier: FA:57:D7:46:A6:14:AF:4F:7F:3B:D0:62:7A:32:49:A0:EB:06:D4:C8
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 019DCD4FBB895C91E8C8847D25B0FD6C0776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 05:00:47 +0000
Manifest this update: Mon 27 Apr 2026 05:00:47 +0000
Manifest next update: Tue 28 Apr 2026 05:00:47 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: /Z0pPa43eyUFdt8kHsjQVTsSBmbC+TxluK+n8oy3VJ8=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:bb:89:5c:91:e8:c8:84:7d:25:b0:fd:6c:07:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Apr 27 05:00:47 2026 GMT
Not After : Apr 28 05:00:47 2026 GMT
Subject: CN=fa57d746a614af4f7f3bd0627a3249a0eb06d4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:e3:89:83:81:3b:54:e4:7c:ef:5a:d9:fa:
44:f4:53:5b:1f:17:ce:68:0f:30:c2:67:89:63:fd:
63:02:b0:ff:05:e1:c3:d7:31:e1:15:83:1c:fb:8e:
d2:9e:ac:64:c8:14:4d:4e:be:83:ba:7e:aa:49:7f:
4d:38:06:9c:83:b4:1c:04:e4:44:12:98:5d:a6:57:
7f:42:ac:0d:f3:c9:67:18:0d:a2:e1:5f:fc:89:46:
e1:44:07:ba:49:8d:b9:c8:de:0c:77:ed:db:9c:c5:
6d:de:20:98:46:f4:2f:54:3a:0c:45:53:e4:fc:3b:
dc:ca:6b:3f:39:ef:a1:f3:3c:e4:41:4b:37:54:1f:
a6:39:06:08:c9:b1:31:74:f8:b3:cd:42:cf:aa:5c:
1f:f1:c2:8d:c8:50:8d:af:de:1e:f2:63:52:9d:f4:
16:15:f9:78:3c:d1:0c:df:74:2b:f2:6c:5b:25:f6:
d8:0d:91:a0:5f:ab:10:6b:be:0f:00:7c:85:6b:c3:
8e:a6:8c:f8:ce:1e:b0:43:78:60:37:e2:fe:02:bd:
26:24:48:54:b9:ee:d1:1a:ee:d1:86:f9:d0:af:d1:
d8:ca:18:28:83:29:0e:17:22:ec:b9:c3:b4:d5:aa:
53:db:01:89:13:e0:34:88:0d:ca:47:cb:aa:7e:40:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:D7:46:A6:14:AF:4F:7F:3B:D0:62:7A:32:49:A0:EB:06:D4:C8
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fd:77:40:11:5b:23:42:7c:b1:26:d4:08:f1:10:f8:85:f1:
dc:7c:c1:38:e2:5c:52:6c:1a:2f:34:24:fb:0b:8e:be:8d:8b:
f4:f9:ca:4f:d4:75:b5:83:1f:70:93:c1:cb:db:d5:0f:db:40:
52:db:0f:17:d8:65:83:19:de:e1:27:72:7a:19:67:c2:dd:7c:
ff:cf:4c:52:5a:ce:25:0a:30:99:ba:8d:4f:c1:b1:9d:37:e7:
be:34:10:92:c3:53:ba:5f:14:49:be:f1:94:d3:39:a9:11:18:
1f:f5:86:41:ec:00:03:e0:3b:5a:6a:3f:76:9d:50:7b:5f:fd:
6e:41:1e:57:f2:72:c7:2f:93:27:74:51:16:b2:bd:bd:00:a0:
42:ce:7b:ce:b1:4f:f0:f9:8e:a0:61:e0:0d:49:95:b8:cb:03:
24:94:dd:a5:7c:65:ae:71:78:23:0e:c2:57:85:c6:af:60:84:
5b:31:cf:7b:50:ec:91:91:31:65:37:46:24:32:15:ff:df:95:
d7:8c:c6:83:ae:c9:d8:2d:12:14:f0:04:7d:03:6c:f7:8e:f8:
93:32:6a:11:6d:40:e5:04:35:a0:e1:a8:be:ff:d2:60:f7:56:
f1:b6:6f:70:a5:fb:9e:cb:bb:71:9e:a4:4c:8f:36:fe:84:4b:
91:c9:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:36 2026 by rpki-client