Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: xW//958SVUFry+NtHnttmtYkomQOHdQC5wXnKMygjMg=
Subject key identifier: 52:66:D5:D9:8A:2D:EC:07:F1:67:41:91:F0:14:5D:C4:37:82:CF:92
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 019DCE2B92A6C04A1D90C492F7AF9CD9D384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 0720
Signing time: Mon 27 Apr 2026 09:00:55 +0000
Manifest this update: Mon 27 Apr 2026 09:00:55 +0000
Manifest next update: Tue 28 Apr 2026 09:00:55 +0000
Files and hashes: 1: 9NPHRkfYiZLbitvXWdqmvdRg9Bw.roa (hash: m+oR/0vItE/UTBoixTdgEHtMhVdXVl9biRTYld0wnz0=)
2: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: cLrsQ9Cc7NkvsdpGTh2iYqT/EY8efOykaUk6OFwsEvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:92:a6:c0:4a:1d:90:c4:92:f7:af:9c:d9:d3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Apr 27 09:00:55 2026 GMT
Not After : Apr 28 09:00:55 2026 GMT
Subject: CN=5266d5d98a2dec07f1674191f0145dc43782cf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:ee:18:1c:46:8a:a6:d2:c9:0a:d9:85:c3:
a4:e7:ff:0d:df:02:31:c2:6d:d0:35:05:f6:75:58:
c6:33:b4:87:4b:b7:4c:55:75:0a:f8:26:ca:e7:73:
dc:f7:07:d2:18:0f:f8:14:8c:41:eb:01:28:c2:77:
f7:ee:e3:ef:cb:df:ff:5c:5f:a9:f4:49:25:0d:05:
18:ea:9a:98:e1:4c:ae:62:37:3a:b5:6b:6c:99:ac:
d9:7e:19:18:3b:dd:a9:2e:8d:ec:6a:14:38:cf:f2:
18:fb:a5:85:05:49:84:c7:ca:db:0e:d1:82:38:2b:
89:93:65:97:a1:0e:99:79:61:10:4c:0e:0a:c8:ae:
85:c8:31:ad:68:f5:14:a0:ac:11:51:fe:ba:2a:51:
f9:7a:0e:f4:c9:b0:b3:fa:13:88:7d:90:f2:a3:44:
8d:58:e7:44:e2:19:53:86:9f:3d:91:b3:d9:66:ae:
2a:bf:3e:fc:10:99:a0:f4:53:15:80:96:38:f0:7a:
d0:27:b7:4c:de:5b:e4:f2:47:82:e0:bf:95:cf:67:
cb:ee:ec:49:ba:c7:af:3f:37:a4:2a:2b:69:52:11:
fa:bd:31:95:56:73:39:85:20:51:38:24:7b:12:dd:
a1:33:7d:ee:ac:ff:5c:1a:6b:66:a0:6a:32:7c:ee:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:66:D5:D9:8A:2D:EC:07:F1:67:41:91:F0:14:5D:C4:37:82:CF:92
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a7:03:ca:af:a6:13:45:31:88:44:bc:92:3e:fd:4d:3b:62:
3d:ab:e9:fd:6e:a8:ee:46:dd:6c:c9:ec:c4:ba:3e:fb:b1:43:
93:c6:b8:36:f0:3c:82:0e:65:ee:3a:45:63:dd:ef:2e:64:ac:
94:f0:62:f4:b1:2f:c7:f6:f5:d0:0e:a7:c6:4e:24:1e:99:46:
a4:dd:b1:6d:77:32:2c:e7:a3:ee:79:c3:00:62:b4:a7:ff:20:
fc:07:f1:57:ec:ad:a3:a4:ef:6a:d5:41:72:7c:85:f2:3d:5a:
39:9a:c8:2c:40:b3:1c:c4:06:84:96:cc:d8:02:04:48:cb:72:
28:21:68:d6:94:ec:af:66:c2:55:18:45:f4:a9:f2:c3:bf:d4:
6b:00:77:62:90:c1:26:e3:b1:2e:9b:16:67:80:da:97:c5:cf:
09:fd:b5:01:57:b0:c5:50:8f:1b:cf:c7:50:3b:00:dc:1a:e6:
d0:f6:9b:c6:70:57:be:a0:c5:70:5a:0a:91:ef:71:e0:48:b4:
84:21:8b:82:02:1c:64:93:d7:16:d6:1e:68:3c:49:c5:43:43:
5f:42:3a:27:cd:3f:92:1f:0c:2f:99:b6:23:72:e2:b9:d2:c4:
12:a5:53:52:2a:ee:20:bc:9f:bd:22:d4:64:89:f9:a4:1b:0b:
93:78:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:27 2026 by rpki-client