Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier: 9vjl5sD9GtP3Y9edCeb2/ZrwOvO23tkRTn+eYGUnmhc=
Subject key identifier: D1:57:7F:D8:B5:D1:7D:40:C9:42:DC:D3:EB:CA:05:D0:2E:07:A0:8A
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 019DCFE303C20505D3EBAA22A47682C07889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number: 039E
Signing time: Mon 27 Apr 2026 17:00:54 +0000
Manifest this update: Mon 27 Apr 2026 17:00:54 +0000
Manifest next update: Tue 28 Apr 2026 17:00:54 +0000
Files and hashes: 1: GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa (hash: afD0B4wX8ENk5NOyojNKqywcV5cJB2IJVzbUoTBJNnw=)
2: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: Ndz7OpNbzLAn0F+rxY96tmnhrMEE2HV+4tDVqY2jutA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:03:c2:05:05:d3:eb:aa:22:a4:76:82:c0:78:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Apr 27 17:00:54 2026 GMT
Not After : Apr 28 17:00:54 2026 GMT
Subject: CN=d1577fd8b5d17d40c942dcd3ebca05d02e07a08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:d2:6b:0d:c6:cf:3a:c2:2b:9d:f3:46:d2:
cc:eb:05:26:4a:77:ae:e9:b6:50:39:76:be:86:66:
4a:9a:e7:74:a2:e9:c4:71:d4:34:49:09:fb:d4:3a:
b8:c8:22:4a:24:6d:7f:2c:20:7b:82:5b:c6:cd:21:
69:eb:fe:0e:9f:6d:5f:06:2e:9b:db:65:79:71:e3:
af:54:ea:4d:ca:72:90:c0:4f:c4:17:0b:46:2d:e2:
ca:a9:26:49:70:c9:eb:26:d7:88:3e:8e:c8:7e:8c:
fd:09:16:ff:01:4f:e9:2c:2d:66:00:a7:48:5a:b0:
25:cf:a5:68:13:8e:6b:9d:37:cd:f0:87:91:1e:f2:
e6:1f:2b:38:db:4f:30:43:6c:60:9d:38:49:4d:64:
d2:53:52:99:80:c5:0e:ad:90:28:83:d1:4c:52:fe:
cf:cc:54:11:bb:96:4b:08:04:dd:2b:72:53:8a:b4:
60:47:5d:cb:f5:99:f9:31:44:80:be:dc:30:86:57:
aa:c3:b0:f7:a6:23:ea:d6:23:95:f0:7f:c8:dc:25:
20:1d:60:16:b8:e2:aa:26:5d:bb:a6:1a:0a:39:fe:
1b:54:2c:fd:e5:91:95:43:98:5a:63:cd:85:a8:2e:
47:31:aa:7d:84:58:14:d1:e8:60:aa:c4:00:25:7c:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:57:7F:D8:B5:D1:7D:40:C9:42:DC:D3:EB:CA:05:D0:2E:07:A0:8A
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:91:11:cd:99:94:e3:ab:a5:3a:19:d5:bb:7c:02:a5:dd:c3:
1a:e9:09:03:d0:26:d9:7b:4e:44:63:da:7f:9d:09:de:c4:c0:
86:d5:cd:e6:e8:c4:c8:d2:99:aa:b8:9c:69:ac:71:be:6a:10:
4a:f8:29:74:81:e3:c0:c6:37:48:a0:25:86:54:41:c2:2e:69:
10:02:58:8a:69:73:2f:6b:cf:4d:22:16:a3:ff:c0:cd:38:5a:
03:7b:80:9f:12:ef:b2:d8:f6:13:5d:42:46:68:f5:83:4e:3a:
a0:97:d5:15:5c:8a:0a:b1:fd:ff:c3:4a:35:4a:da:f6:8f:98:
25:cc:66:73:21:22:ad:c1:0e:83:ab:cf:d7:97:02:e7:c4:fb:
26:af:af:39:9e:d2:21:46:f5:1b:0a:14:d5:61:be:fa:0b:6b:
c8:9e:f3:b0:13:e3:20:01:02:c6:20:94:ea:71:89:0f:c3:0c:
4d:81:60:b9:d0:61:c7:50:26:97:cc:c6:6d:85:f0:3b:5e:f5:
32:1f:57:4d:a1:f7:e6:7c:85:64:9d:d2:cc:06:eb:d5:88:c3:
78:2d:f0:43:26:10:24:5f:61:94:b7:fd:42:72:72:ec:01:76:
3e:b6:9f:94:46:50:4f:65:70:46:b6:0f:39:fe:75:08:ff:d0:
42:0a:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:09:02 2026 by rpki-client