Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: Eso2tLmMh5Ic1yFieN0SwORh7f17ETvOekFli7Lcu0I=
Subject key identifier: 69:67:CC:01:F5:3A:A0:66:3A:A5:CB:1D:C4:F6:DA:1A:12:FB:B8:A1
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019DD0BEB0EEBBBB2D50FBD6089099A97345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 186F
Signing time: Mon 27 Apr 2026 21:00:51 +0000
Manifest this update: Mon 27 Apr 2026 21:00:51 +0000
Manifest next update: Tue 28 Apr 2026 21:00:51 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: SDnxpdn0n9k0oCl/K1U71Aj0FFFIAQTgtrUnF4eQGDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:b0:ee:bb:bb:2d:50:fb:d6:08:90:99:a9:73:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Apr 27 21:00:51 2026 GMT
Not After : Apr 28 21:00:51 2026 GMT
Subject: CN=6967cc01f53aa0663aa5cb1dc4f6da1a12fbb8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:e6:21:9f:c0:06:af:49:b5:a7:9d:c7:d1:
4b:09:b0:1f:73:c1:7f:0f:d1:77:1c:d9:d7:df:d8:
e4:4d:f3:62:a7:83:88:a7:31:7a:be:da:13:5c:33:
d5:64:6e:7b:63:b5:92:22:66:00:c1:ca:f2:f2:d0:
84:e1:ce:e9:f1:ed:ab:e8:b9:fb:c4:fb:50:48:fa:
51:05:30:6f:fe:a8:ed:5e:d0:31:72:a3:bd:11:d9:
d1:08:27:29:fe:92:21:6c:ec:dd:39:4d:69:0e:29:
a3:8b:31:51:5f:b5:75:4e:c9:72:0e:a6:84:7b:f3:
d7:9c:54:d2:87:82:22:4c:4c:f6:28:52:aa:a1:a2:
d3:c1:58:38:1f:2d:a4:5b:e1:31:7b:73:b8:71:57:
6e:74:5d:6d:5e:68:5f:f9:0a:74:8c:d1:81:00:b9:
ee:8f:e4:87:28:57:11:16:68:c1:b7:bb:4e:04:10:
36:8a:dd:19:c4:4b:01:dd:f8:97:60:0d:e1:0e:16:
19:04:60:a1:9f:e2:1c:f2:5c:b4:99:72:fd:e4:5b:
88:67:c3:c7:33:da:7e:f3:68:3a:ca:9f:e2:95:1b:
5d:60:74:97:5f:50:c4:ad:34:d6:a2:18:fe:54:80:
a7:02:0c:b0:aa:c5:41:9d:d7:50:4b:80:fb:af:47:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:67:CC:01:F5:3A:A0:66:3A:A5:CB:1D:C4:F6:DA:1A:12:FB:B8:A1
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:60:c7:ef:25:55:8f:31:22:f4:b3:49:46:1c:59:94:58:ad:
f8:f5:74:3c:cf:3d:aa:fc:90:ef:af:ff:8c:7c:8c:93:2b:2f:
85:49:08:2a:7d:8e:e5:7d:64:23:e4:bd:af:e5:59:0d:8d:3f:
68:0e:b3:3d:43:27:dc:0f:8f:5f:3f:62:09:1c:89:9d:47:db:
1d:07:80:dd:6d:b5:ff:32:d1:67:30:b3:84:f7:f4:32:ac:33:
29:9e:25:b0:57:74:f9:a3:f4:1a:44:c7:69:27:67:37:85:0e:
ac:13:d7:68:ce:b3:16:c7:88:c9:92:f3:cf:89:d9:97:fc:89:
1b:67:92:43:97:5a:30:d4:5c:8c:e6:d0:b0:8c:b8:6d:a8:c9:
14:ce:f2:3f:ce:90:8b:19:f4:c8:58:43:37:68:88:3f:11:0b:
17:7c:8a:23:61:db:99:1a:dd:83:40:74:72:b8:ae:22:05:09:
8f:be:da:b3:a3:8d:6c:6f:95:e5:d4:ff:d2:94:6d:4d:93:fb:
18:15:ba:26:d9:f4:1b:a6:4a:b6:6a:de:c5:07:67:05:87:0d:
3b:6e:18:ea:48:53:44:cb:36:64:18:39:2a:6a:05:c6:80:c1:
ac:01:db:89:45:e4:40:08:37:3b:e0:23:37:af:13:e2:f3:95:
62:66:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:43:55 2026 by rpki-client