Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: 0YJc/0T3h5AylRL/qSyCLGHDL9S9UMzvC1hENo4cWb8=
Subject key identifier: 75:D2:1B:F7:AC:52:F8:BF:87:E3:9D:F3:C9:E5:69:D1:5B:F3:48:45
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019DCC742458113CD2EE4BDFADED5AA17AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 109D
Signing time: Mon 27 Apr 2026 01:00:56 +0000
Manifest this update: Mon 27 Apr 2026 01:00:56 +0000
Manifest next update: Tue 28 Apr 2026 01:00:56 +0000
Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: AtY/zpf82uIJ6bpIfiuDKow3NMTdUcpeQ/sN9YbYRHg=)
2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=)
3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:24:58:11:3c:d2:ee:4b:df:ad:ed:5a:a1:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Apr 27 01:00:56 2026 GMT
Not After : Apr 28 01:00:56 2026 GMT
Subject: CN=75d21bf7ac52f8bf87e39df3c9e569d15bf34845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:ac:19:ff:7f:b3:d1:bb:2e:e0:22:17:a0:
18:31:75:ed:6d:5f:ec:c1:64:65:c3:da:36:8c:2d:
f0:df:51:e4:59:c2:a9:1c:cc:bd:b6:e7:3b:4b:44:
8d:b5:92:a2:4d:ec:4b:ca:52:08:bf:45:6d:87:18:
51:a9:5f:3f:c9:20:41:ef:6c:93:28:d6:2e:20:67:
7d:86:51:8f:f8:01:8c:a5:cc:83:e5:3d:0b:c3:fd:
f0:4e:00:8a:ed:bd:4f:6b:6a:c9:bd:dc:da:e0:cf:
e2:7b:25:ff:04:8e:69:71:00:d7:3d:e1:f7:c2:e7:
ed:25:2d:53:c3:25:93:e0:6c:25:43:10:1d:af:d5:
6c:fb:8c:89:85:01:bf:ba:66:0a:9a:cb:45:ef:26:
73:ee:87:57:86:cd:bb:8b:48:90:02:cc:b7:20:69:
16:76:25:a6:36:38:b2:03:b1:a1:c3:17:d7:46:a1:
42:c9:a5:d8:d9:6d:54:24:f3:37:20:d1:73:2c:ef:
c2:64:27:2c:04:ed:a2:26:20:7c:cb:9d:fc:58:30:
2e:9a:fc:ae:ed:b8:41:22:d8:eb:78:06:21:ea:70:
96:12:d2:f0:36:4b:7b:39:ad:b7:d9:5a:b3:40:5b:
b3:23:8c:91:57:08:05:01:af:c1:6a:44:be:fa:68:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:1B:F7:AC:52:F8:BF:87:E3:9D:F3:C9:E5:69:D1:5B:F3:48:45
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ed:72:d8:a6:23:72:83:ee:36:7f:bb:c2:6a:07:46:f8:62:
f2:f4:73:79:68:7d:7d:99:07:d8:ce:81:e9:7f:b6:23:fc:05:
8b:ed:28:6d:d6:3c:1b:48:1a:c3:51:dc:77:f0:49:e9:ca:17:
66:b6:3e:81:82:19:b1:cb:60:b3:c0:be:be:83:6f:0d:2b:ab:
94:f4:9e:00:d1:f9:88:78:53:4b:a7:ec:3f:7f:b8:a0:ca:a0:
8f:bf:2a:10:b4:3a:9e:e1:77:f9:82:2a:fe:ae:19:16:c0:30:
1f:2a:98:c5:2a:12:4a:92:ff:8a:74:f8:c4:6d:c4:a2:42:53:
90:b8:73:71:64:d7:e5:3b:0b:18:e5:ca:28:7b:e5:c9:a7:13:
18:da:91:08:ce:63:05:df:b4:62:86:ae:ae:82:b2:90:5a:d0:
be:f6:d9:8f:a4:ca:ea:66:98:12:4b:2a:e7:68:35:50:44:7c:
f7:d1:57:19:99:19:a1:e4:96:fc:c6:6c:37:2c:70:c0:c7:b1:
e2:aa:01:78:17:ba:fc:dd:29:fb:e5:75:3c:fe:a2:30:df:45:
df:b4:73:22:55:32:f5:91:0c:07:78:a0:ec:db:de:31:c2:69:
ef:0a:8d:90:f4:3c:3e:b3:e2:4e:8b:a6:84:21:f2:48:52:11:
3e:f4:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:13:34 2026 by rpki-client