Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: k5uH0+JLXP7FlOSvAB8qlxIDkXmbEfmyDLLMWp9jr54=
Subject key identifier: 29:6B:22:EC:67:AA:86:49:C6:FB:40:8A:74:0D:D5:C6:88:41:10:CE
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019DCDBDA3C8BE11CE97B425DF87AAB92EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 07:00:50 +0000
Manifest this update: Mon 27 Apr 2026 07:00:50 +0000
Manifest next update: Tue 28 Apr 2026 07:00:50 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: eyvakyfUqlrg3DLcc75IZIsvDd3CDxolU57457R1wUQ=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:a3:c8:be:11:ce:97:b4:25:df:87:aa:b9:2e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Apr 27 07:00:50 2026 GMT
Not After : Apr 28 07:00:50 2026 GMT
Subject: CN=296b22ec67aa8649c6fb408a740dd5c6884110ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:b0:0b:d6:7d:98:2c:71:86:f5:af:fd:33:
26:97:a3:53:1f:ea:38:91:b9:37:11:20:6c:17:4a:
9c:a3:f2:1b:64:62:07:af:04:fa:aa:76:6d:f5:40:
51:19:95:0d:b8:d5:9e:bd:7b:27:5a:f0:f3:6f:9e:
dc:bc:0b:19:c3:90:72:e6:53:3b:fe:75:d0:09:0e:
09:b1:dd:98:30:52:64:a5:12:a8:27:01:99:49:0e:
c7:17:79:68:3c:fa:a5:05:ac:60:70:1c:5e:e1:c9:
36:51:0f:80:8b:14:c4:5a:74:0c:ab:9a:ae:c5:8f:
c0:5f:9d:43:11:3a:96:8c:e9:85:e4:fc:28:48:a0:
e4:11:17:83:40:b2:21:fe:a0:05:ce:6f:18:3c:1b:
60:e8:58:08:b8:68:da:86:a5:f9:6c:a3:ca:f8:50:
85:cf:73:a9:8f:47:c5:a5:52:f5:e2:8f:a1:4a:b1:
0b:6f:fd:67:ba:e6:95:6f:fc:24:e7:5a:2a:89:ac:
06:31:a3:fb:b7:2d:88:cb:a1:6a:9c:38:94:cb:21:
0d:fa:a1:f7:f1:77:58:b0:56:c0:eb:58:84:9e:d7:
16:e3:c5:84:0a:07:7d:1c:63:17:2a:3a:c4:6c:e6:
52:77:70:e8:74:43:ed:0e:e9:6e:70:16:e8:a2:90:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:22:EC:67:AA:86:49:C6:FB:40:8A:74:0D:D5:C6:88:41:10:CE
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7b:93:84:2e:e6:65:dc:5c:ac:29:f1:a4:b2:d4:d6:64:dd:
2c:a2:f1:ca:be:ca:74:0d:23:c6:76:d9:64:14:70:12:fd:f3:
02:38:37:57:31:88:aa:ed:a4:b0:23:ce:79:99:0f:ff:dc:ec:
c0:31:6b:c7:76:91:ec:ca:4d:48:8c:4c:49:81:e3:3a:fd:da:
52:f2:27:b7:97:92:f6:de:e0:e5:31:ab:e2:d9:86:5d:a9:70:
72:cc:22:6f:e5:0c:e6:c2:15:19:03:04:91:de:41:77:61:8c:
a6:65:ae:02:bf:27:6d:6b:40:74:2b:4a:12:5c:94:b5:3b:4b:
4b:4c:44:89:32:2a:7e:5d:16:62:a2:85:be:dd:95:1b:39:d6:
31:af:7b:44:63:0b:51:0c:2b:e5:89:23:31:db:bd:07:10:6d:
1b:9c:a3:de:30:37:47:72:99:df:e5:7b:2a:4f:af:dc:c0:fa:
87:7b:bf:88:1c:2a:35:ca:b2:d0:83:7c:29:36:e2:66:4e:f9:
a8:35:3d:69:87:2c:8a:f9:a2:a7:3c:6c:01:f1:fb:2f:42:f1:
4a:49:14:87:29:38:82:e3:61:2c:19:0e:8d:64:8b:13:56:c0:
11:03:ec:76:21:d9:5a:4d:2c:d4:20:69:cb:7a:96:08:0d:32:
34:4e:20:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:13:39 2026 by rpki-client