Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: //CUm55v0o0Z3vQRR1zh4n+8E0W/i2aazrsYHKav4T4=
Subject key identifier: 42:27:0E:A0:2E:54:13:59:30:43:61:08:4A:39:AD:40:21:CE:7C:22
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 019DBE81F84ED2657206DD385841ED4AECB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 0DCA
Signing time: Fri 24 Apr 2026 08:01:21 +0000
Manifest this update: Fri 24 Apr 2026 08:01:21 +0000
Manifest next update: Sat 25 Apr 2026 08:01:21 +0000
Files and hashes: 1: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: DUF2kxnwjJIAEnawD8QX7UPXvsIY2ZmRk7ZgDPcb16Q=)
2: at5a5rELRNEAw0rbmlFozDBKmf0.roa (hash: fph6BRKPR1DclmnZB61WzWIE1l0c6loKAE1iu+Pb6gg=)
3: fN1BCGt6X78bmo40K4mqUHAHyNE.roa (hash: 4u131ZUFsLjOVWZz34pEcO0mSEYVLQJpztQcoDh3/Iw=)
4: o__yenjb_byTDMgOBxUzVji8MJk.roa (hash: i3sG4QUVi7SpGaea2GgrwUuE6uMpXt1hzOEHLJcR4vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:81:f8:4e:d2:65:72:06:dd:38:58:41:ed:4a:ec:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Apr 24 08:01:21 2026 GMT
Not After : Apr 25 08:01:21 2026 GMT
Subject: CN=42270ea02e541359304361084a39ad4021ce7c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:35:2e:ae:a4:5d:26:9c:9b:d0:e3:c6:a2:
94:ec:e5:56:f6:f0:0b:95:31:ed:21:eb:7a:7f:d9:
c1:e6:34:50:76:7b:30:f5:ae:fa:c5:0a:4b:2f:06:
00:ee:04:21:40:e4:99:1a:58:83:12:e1:00:0d:9c:
5f:40:44:5f:6b:52:7a:ba:d9:a2:3f:ed:f3:3d:2f:
8f:19:e4:03:87:27:05:52:a6:9b:1b:3b:75:30:54:
7a:18:60:ef:a3:06:cf:49:00:f9:83:c2:04:c1:da:
0b:12:75:e0:fd:90:cc:3f:30:32:c3:5b:43:1e:54:
15:da:c9:66:4c:a9:66:1f:49:71:b9:7e:59:a8:c4:
38:2c:8b:34:b5:85:22:15:e3:50:f7:d9:1f:f0:f8:
c1:de:39:65:39:0f:4c:d9:3e:6b:b0:00:2f:6e:08:
a2:df:9d:94:2d:0e:c8:5e:31:15:36:df:bd:8f:99:
05:65:17:ec:13:1a:35:9c:be:be:6e:a6:aa:58:cb:
20:76:bd:da:c8:9b:49:c6:a6:8f:16:cc:e5:14:cc:
66:a1:04:0f:76:f1:76:70:43:ac:f9:cc:14:64:cf:
cb:8c:04:56:5b:36:da:89:74:7b:3f:f8:f8:04:01:
a2:96:bd:8c:f6:cf:d2:05:f2:50:11:d4:c5:b8:bb:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:0E:A0:2E:54:13:59:30:43:61:08:4A:39:AD:40:21:CE:7C:22
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:90:86:c9:11:44:85:94:06:df:35:e5:43:8b:bc:11:84:12:
96:28:f8:d2:f2:a4:e6:34:98:32:87:b5:72:af:40:2b:4d:44:
ba:aa:8d:6a:08:0b:fd:c9:7c:e5:8e:83:8d:94:a0:ad:a7:6e:
da:9c:93:db:64:6e:d4:d2:a3:47:ba:67:04:5f:4d:d3:88:4d:
83:88:ec:ee:31:ad:33:ad:ac:f0:1c:68:dc:7a:8f:29:ee:f5:
98:e4:bc:14:a8:e8:d2:72:dc:cf:9f:23:64:e7:56:65:3d:19:
5b:7d:c7:6f:1c:a1:79:15:9e:72:63:3c:76:6b:1d:d9:e9:ee:
aa:27:40:6d:0c:fb:15:ce:ae:07:46:76:af:1c:99:84:d6:34:
d4:14:8b:89:97:a0:2f:d4:a2:61:cb:8d:0d:fe:be:4b:95:bd:
1e:1c:ce:9b:a8:b4:5f:0a:da:e9:92:41:f2:33:3c:d9:48:dc:
21:cc:90:9a:4c:fa:70:6c:87:d0:d7:14:ed:6b:7d:4c:45:51:
9a:18:d0:53:51:64:58:79:ff:b2:7d:68:e5:bb:7b:c7:6f:fe:
60:25:b1:58:2f:55:d1:13:c5:00:f5:b7:9b:67:4e:6b:01:b2:
a7:60:d4:66:52:f5:70:87:f4:67:7b:72:e7:cf:bd:ad:3e:42:
a9:cb:21:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 15:32:51 2026 by rpki-client