Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier: RbISH2T7wl+usu0JSXd3UJR9UJFKiOscLHy3A+Vmfak=
Subject key identifier: 5B:93:B9:39:72:9A:EC:CF:48:06:FB:FE:71:8D:67:4C:B1:39:5E:30
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 019DCC7497D3E79EA4A8B65C25D9E5227744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number: 0855
Signing time: Mon 27 Apr 2026 01:01:26 +0000
Manifest this update: Mon 27 Apr 2026 01:01:26 +0000
Manifest next update: Tue 28 Apr 2026 01:01:26 +0000
Files and hashes: 1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: 2LMtIPLyPauuEUFwRRDDKF9CgsIp88PbSmSgnenisrA=)
4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:97:d3:e7:9e:a4:a8:b6:5c:25:d9:e5:22:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Apr 27 01:01:26 2026 GMT
Not After : Apr 28 01:01:26 2026 GMT
Subject: CN=5b93b939729aeccf4806fbfe718d674cb1395e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:63:19:9e:99:70:fe:ba:57:ce:89:7f:c8:
36:23:60:f7:7a:28:c1:30:85:a6:e5:f4:a9:41:c7:
31:68:51:a9:cd:dd:a7:8c:e6:6f:ec:15:82:62:cf:
8a:65:3c:f1:d9:64:11:cb:5e:6e:35:14:91:d3:4a:
52:17:80:eb:08:48:bb:c2:63:23:af:5f:23:29:c4:
24:15:dd:fb:f4:39:a2:06:c5:45:59:4c:d6:db:6b:
39:ab:fa:c4:d1:83:83:95:ad:4d:70:b6:10:eb:e6:
2f:53:8a:c9:de:52:f5:1a:fe:7b:65:d0:2b:a7:1c:
e5:76:1d:57:c3:6c:85:86:34:17:0a:83:36:eb:9b:
d8:29:da:b6:0d:fe:ef:bd:13:1e:00:c2:94:70:68:
54:da:77:3f:61:13:71:8d:7e:54:c4:21:30:b5:38:
31:48:47:88:2c:be:51:18:bd:d1:45:03:f4:c1:0a:
c9:4b:f2:49:12:d7:c0:c2:b5:8b:88:06:80:2f:f7:
0b:2e:4b:d2:66:09:c9:b7:63:1e:97:95:94:2f:d0:
6c:d1:4e:46:1e:94:a7:8d:23:f4:d3:6a:f3:b8:02:
1a:5f:e3:ee:6e:9f:79:58:12:3a:92:47:06:07:30:
88:40:5f:c0:41:52:fd:4c:59:da:14:65:e4:1e:76:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:93:B9:39:72:9A:EC:CF:48:06:FB:FE:71:8D:67:4C:B1:39:5E:30
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a5:51:e6:07:73:29:e8:d0:22:85:97:73:b5:7c:80:9b:61:
cc:09:7f:de:bc:dd:7a:9c:7e:db:3f:1e:ad:0a:78:88:a7:5f:
ce:ad:74:08:4d:3c:42:31:30:00:52:4f:8f:6b:a5:a8:ce:33:
35:e5:df:8c:e6:4e:db:5e:8b:f5:95:b6:e9:43:75:8a:a7:0e:
49:53:2b:8f:0b:ec:ed:b2:50:1b:b8:74:71:64:76:55:f7:34:
e8:a4:45:38:1f:45:7b:5c:21:43:2e:1b:33:99:47:06:ae:71:
48:b9:4a:92:05:b5:44:37:d0:0c:ba:4d:c4:89:63:ca:f9:28:
fe:53:0d:ab:ea:5d:bc:89:97:1c:35:dc:21:18:8f:bf:e1:40:
66:d0:93:0a:e6:42:90:20:86:67:67:74:21:8b:08:f4:54:a9:
c7:58:ba:ba:a9:dc:21:0c:b6:ff:b3:d5:6d:d2:1f:17:ff:9b:
45:3b:c8:51:58:66:2a:50:fe:a5:1e:22:24:09:7f:6a:fd:c7:
f8:bc:3c:f3:97:51:97:47:0a:bf:eb:73:c3:5e:d8:d9:66:ae:
bd:27:7c:e5:06:3d:d5:b2:ea:74:88:09:7f:4d:5d:e2:a4:50:
c9:a6:8a:6c:48:c8:ad:2c:fe:fd:8e:e8:b8:ec:37:b9:ee:7e:
e5:88:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:11:57 2026 by rpki-client