Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
File: Xhd799BDVEHRrbFIoizv4dbcwPs.mft (raw, json)
Hash identifier: IY2d9sY5C2Q48/mfBejktxzn9kQgWRNb6e766HT8n5w=
Subject key identifier: F7:B5:8C:74:D3:FC:A1:1A:A3:39:56:DC:03:10:6B:9B:AD:A6:79:8C
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 019DDC55C667446EFAC563811814C3F2DBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
Manifest number: 16
Signing time: Thu 30 Apr 2026 03:01:41 +0000
Manifest this update: Thu 30 Apr 2026 03:01:41 +0000
Manifest next update: Fri 01 May 2026 03:01:41 +0000
Files and hashes: 1: TYV20I1tmXmrFyD5hD9FE4IPKWU.roa (hash: cuvSEP8hQjrQh4a+NJD6WQS8i4OZ31Rtmx8MtCDraCQ=)
2: Xhd799BDVEHRrbFIoizv4dbcwPs.crl (hash: ZWEVqGN33UU8iC1N8H9QlCCSgfeHnKmuADbwmF4nzBE=)
3: s8rf2tML831KhZ_f-0fAXEJkgew.asa (hash: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:c6:67:44:6e:fa:c5:63:81:18:14:c3:f2:db:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: Apr 30 03:01:41 2026 GMT
Not After : May 1 03:01:41 2026 GMT
Subject: CN=f7b58c74d3fca11aa33956dc03106b9bada6798c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:6d:bc:15:d3:92:50:6b:2f:3e:83:de:ef:
f7:65:01:94:ef:d4:c5:92:af:65:4c:a2:c5:b8:a5:
6a:3c:6e:d8:c7:54:9b:25:cd:4b:ce:64:2d:ec:f5:
6b:81:dd:b9:38:3a:7f:23:f6:c2:ab:68:e4:05:4f:
c4:73:4c:c8:b8:cf:f1:af:e0:eb:df:fa:ca:79:7c:
47:94:be:4e:be:85:7a:19:fe:d1:9a:bd:26:ff:85:
0f:5f:7e:5a:bd:7b:94:12:0c:cb:03:06:48:6b:2a:
49:55:01:44:91:bd:c8:12:e4:05:9b:51:ad:09:1a:
cd:cd:49:1f:1f:6c:bb:4e:1d:5c:1a:7b:56:06:f9:
c6:01:9f:2e:b8:60:bd:05:a6:e7:7f:6a:97:a1:49:
22:70:af:a2:2d:21:4f:a5:30:cf:d7:28:1a:3c:c2:
f8:cb:88:84:83:c9:db:3a:90:e1:4b:96:a2:1b:62:
ec:57:fa:71:9b:5b:86:95:3a:55:a5:bd:ce:4c:19:
14:3c:91:fd:0b:0a:c9:86:cf:07:7b:b9:3d:2e:55:
30:da:47:f7:47:04:ed:f5:6a:60:06:e7:04:2f:51:
eb:65:c2:eb:ed:05:ab:e1:98:6e:8b:e4:c0:46:2c:
df:63:f1:46:42:00:36:cc:90:cc:15:90:16:c9:d4:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B5:8C:74:D3:FC:A1:1A:A3:39:56:DC:03:10:6B:9B:AD:A6:79:8C
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f4:24:3c:52:28:97:9d:8a:2e:c7:40:62:e1:fe:b9:b3:8f:
f1:b3:b8:37:fe:b8:5c:ee:4a:39:b8:6f:57:53:09:c6:55:f4:
53:e8:43:90:ee:e7:78:f1:32:f8:fb:9a:d8:1a:ff:fa:04:a5:
32:96:b4:a6:ce:df:c6:bd:3d:2c:f5:6d:e0:93:e7:7a:70:68:
2d:76:1a:94:75:99:b4:bf:ac:0b:3a:20:9d:14:b1:3d:94:74:
69:1e:b5:62:a6:fd:77:9a:18:f7:0a:99:e5:72:72:a3:4f:8b:
53:e0:88:ba:ea:20:e0:52:e5:e3:41:6f:56:0a:c2:c9:bb:fb:
e9:fe:41:f0:5d:9e:d0:57:1b:26:8a:dd:d3:bc:4b:ca:05:a3:
28:bc:64:e5:38:c2:20:5f:f6:53:0e:3d:9e:40:25:01:28:15:
2f:14:bc:00:e0:73:33:cd:87:a4:d8:8c:5c:c6:4c:bf:0d:9d:
c3:99:49:e3:ae:45:81:7e:99:a7:3c:4b:e7:9b:be:c9:50:79:
5e:b1:fc:1a:07:66:70:40:b0:51:1c:c2:bf:7b:68:16:63:c2:
ca:4f:eb:91:f1:ef:83:8e:12:9c:46:21:fc:02:1f:53:b8:54:
42:66:17:00:8a:f5:26:17:41:c3:29:a9:56:14:8e:c0:60:9c:
05:5c:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:47:20 2026 by rpki-client