Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: NI7YoHeFp4wOpgd2t8osA+hXUbqRxd3Y+cHqwL7hXl0=
Subject key identifier: B3:98:A9:04:A9:14:70:11:98:FD:C2:4A:B8:74:6F:BE:89:C6:EF:34
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019DCF47DE5F42DA0EA3CDFC6E244203EC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 14:11:26 +0000
Manifest this update: Mon 27 Apr 2026 14:11:26 +0000
Manifest next update: Tue 28 Apr 2026 14:11:26 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: +7PEgk/zr61iXfnmo70ywr42ArTMTch7LdNYeQO9OzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:47:de:5f:42:da:0e:a3:cd:fc:6e:24:42:03:ec:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Apr 27 14:11:26 2026 GMT
Not After : Apr 28 14:11:26 2026 GMT
Subject: CN=b398a904a914701198fdc24ab8746fbe89c6ef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:c7:ca:4f:a5:cd:f4:14:30:dc:75:aa:73:
1e:a5:dc:54:9e:a8:43:fb:e0:33:1c:1d:ec:4d:e2:
56:0b:08:dd:9f:0b:2e:f2:92:fa:3e:13:39:a4:4f:
2d:44:03:64:db:62:54:bf:01:71:8b:7a:aa:55:25:
cc:d0:7c:2f:b6:63:ec:48:e3:11:ac:db:f6:b9:b4:
db:15:14:73:cf:87:f8:49:5f:b1:59:1a:67:9e:57:
d2:c6:96:d1:a5:c9:c3:11:ce:ae:38:1a:71:fd:1f:
ac:a1:fb:46:90:e8:24:fb:54:f2:ac:d1:af:11:73:
ac:09:b2:fe:ef:4a:ff:ed:89:59:95:bd:f0:ba:8e:
0e:26:c7:f3:7e:66:97:2c:4f:e1:a3:23:af:3f:29:
25:9f:c9:e6:61:a3:48:b3:c6:46:a5:f6:3e:37:b4:
cd:1f:5e:fc:4b:57:ae:bd:89:06:fb:01:8a:82:76:
53:7b:72:64:12:9b:08:e5:54:77:42:97:7d:25:aa:
8d:e7:b8:d0:d0:9e:ef:ec:b5:16:da:08:86:1c:58:
c7:d0:fc:3f:17:fb:06:f1:8d:ca:28:b3:ff:3c:62:
4a:3e:15:22:f7:3b:3c:e7:02:bf:91:65:f6:b6:48:
ab:de:98:57:ee:8b:30:01:07:59:19:c7:69:15:8c:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:A9:04:A9:14:70:11:98:FD:C2:4A:B8:74:6F:BE:89:C6:EF:34
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:f6:b2:6e:81:83:bc:59:af:15:ca:ad:e4:87:58:cf:12:
26:92:b5:00:6d:45:ee:6c:8f:de:c2:55:8a:da:4e:f0:00:d5:
1d:60:ba:e2:3f:06:b6:c6:90:a9:60:62:1c:83:71:e6:bd:54:
34:60:a1:ad:db:f0:f5:d1:67:72:b0:b7:5b:0e:3b:78:64:68:
7b:28:6e:2d:3e:16:52:83:2a:a5:3a:ce:24:8d:d8:5e:fb:e9:
e8:55:df:2c:fe:60:5a:67:a7:66:07:64:fd:76:6c:51:29:57:
1d:81:ca:f9:d1:85:ec:8d:30:0b:02:f8:66:8b:8a:36:31:7d:
16:34:ae:fe:ad:98:f6:ed:52:93:88:2e:00:2c:30:85:15:a4:
27:d4:8e:2e:3a:4c:3a:af:78:26:c0:0a:21:83:c2:0c:13:3e:
5e:97:44:ab:89:b7:e0:62:32:20:35:41:a3:0a:3b:46:03:2b:
e7:fd:dc:88:d5:01:c9:b7:3c:8b:03:57:65:7b:0f:35:0a:fb:
2c:c5:ae:36:3f:1d:4e:98:34:dc:ec:0b:90:ce:46:ca:82:a9:
26:30:df:90:2a:fd:dc:2d:29:e2:29:4b:8e:cf:85:30:56:ce:
d3:53:9a:da:e2:71:ef:a1:1c:b1:25:07:89:09:b7:cd:0e:d1:
6d:9d:de:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:43 2026 by rpki-client