Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: s9Cm5EZxyatfmHlHTlWxtxWPpehbdkcNdRMmhUxdlh8=
Subject key identifier: F4:68:0E:9B:7D:0B:9E:96:78:59:C5:A2:9C:59:A5:2C:D6:01:E6:10
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019C75FCD6F2A49DAA77F997B7A283748BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 1C
Signing time: Thu 19 Feb 2026 13:00:30 +0000
Manifest this update: Thu 19 Feb 2026 13:00:30 +0000
Manifest next update: Fri 20 Feb 2026 13:00:30 +0000
Files and hashes: 1: PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa (hash: 4mulaDEjjaiJyNExN4M0awWM7+bcCqHjl7wFr6Imm1M=)
2: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: W3RAoBjV3M7R6+wS5kF065DyGmNYVQoG38x48NFVG0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:fc:d6:f2:a4:9d:aa:77:f9:97:b7:a2:83:74:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Feb 19 13:00:30 2026 GMT
Not After : Feb 20 13:00:30 2026 GMT
Subject: CN=f4680e9b7d0b9e967859c5a29c59a52cd601e610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:f4:30:5c:a0:86:2b:1a:19:13:36:3e:af:
2c:2e:3d:3e:91:f0:4b:95:da:ef:ae:98:c6:ec:4d:
77:72:34:22:51:33:30:28:ad:e7:a3:e2:cd:a8:64:
a6:3f:1a:58:37:9d:cc:05:5b:53:6e:bb:03:41:97:
2b:1c:56:fe:18:88:74:e5:ee:19:74:f2:b3:b0:f8:
89:a5:ec:05:c1:78:8f:e2:dd:7e:e6:46:13:e0:60:
43:ee:7d:1f:42:61:3b:b1:bb:54:dc:e4:66:d6:1a:
df:ff:99:c5:19:86:17:6a:02:17:81:ca:c6:72:0a:
38:7b:c3:08:6c:2f:c2:f6:d0:b6:5f:90:8c:d2:35:
4c:af:ba:c6:1f:9a:c5:ae:0d:ed:7b:47:3f:e5:3f:
01:b6:89:e4:5a:43:7a:da:82:1c:1d:0c:26:04:e9:
80:f9:da:ef:82:82:a1:78:0e:3b:9e:56:89:62:6a:
6b:fd:f5:21:37:9d:18:cf:2f:aa:7e:83:aa:9a:38:
ab:85:ef:d5:f3:86:bb:07:68:d8:12:59:52:d9:78:
05:ea:3f:82:85:f6:4c:cf:3d:7d:d4:9f:f2:4a:52:
32:f8:0f:38:e5:9b:f5:f4:8c:98:e7:65:8c:eb:c0:
ef:e1:34:99:4f:d2:af:72:25:3d:4a:3e:ee:d8:70:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:0E:9B:7D:0B:9E:96:78:59:C5:A2:9C:59:A5:2C:D6:01:E6:10
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:15:0d:dc:6f:8a:b3:28:1a:65:62:d8:52:1b:6f:6a:6a:
b6:d4:1e:20:16:cf:aa:3d:7a:62:10:cf:39:43:8d:95:56:9e:
5e:fb:5f:ec:ea:34:d2:fc:41:0c:6a:e3:de:12:c4:d1:5c:40:
56:0b:02:ea:34:8c:f1:40:17:9e:8c:fa:0a:6f:d3:84:d1:b0:
98:7b:ea:86:93:2a:58:4f:6e:33:c3:94:50:ff:23:8e:40:a7:
c7:4e:17:3c:dc:5c:6f:6e:1e:77:db:e6:10:66:04:5c:91:8d:
f2:9f:14:4c:82:91:e4:e0:af:e3:f1:ac:dd:ec:22:63:ad:f6:
d2:f8:82:ae:30:85:6b:3f:cf:ea:9b:97:7a:b8:b8:c9:db:be:
66:cb:6c:05:d9:4d:c2:93:c7:1c:8d:32:bf:14:ae:7f:20:83:
23:f9:c8:39:9d:bf:cf:a1:25:38:91:0e:12:45:45:2f:42:66:
18:d0:9a:71:7d:c0:50:66:50:c2:a4:db:6e:d0:7c:c6:50:34:
39:33:2e:83:87:0c:24:c0:a8:08:76:48:3f:18:07:5e:ce:9c:
eb:41:5d:e2:a0:91:a2:c5:68:cc:c2:e5:93:a2:84:56:bf:98:
18:1f:2c:44:f8:91:1a:3c:15:97:89:e9:d8:f0:8c:1d:aa:a3:
a0:53:fa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:23:42 2026 by rpki-client