Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: cryeg7DTpH+dcDn6WsHXhv0sk95OxbOtlelevUDPNNo=
Subject key identifier: 54:27:0A:CC:0B:BC:EE:53:36:19:77:41:50:EC:C8:49:EF:02:75:5D
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019DCE99A2732F211EB14D689F2FF26A15BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 11:01:08 +0000
Manifest this update: Mon 27 Apr 2026 11:01:08 +0000
Manifest next update: Tue 28 Apr 2026 11:01:08 +0000
Files and hashes: 1: 5anfbEI-jaspGpdleX4CIuBsAPM.roa (hash: Hflhls/SMNWgATvG3eTRW4iTnqTJ1x1t05I3Ae6Iogc=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: 3jYiGThKcnRLX5yXiZCd2liirYKZEptfkNbr+fJdyVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:a2:73:2f:21:1e:b1:4d:68:9f:2f:f2:6a:15:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Apr 27 11:01:08 2026 GMT
Not After : Apr 28 11:01:08 2026 GMT
Subject: CN=54270acc0bbcee533619774150ecc849ef02755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:52:57:c8:b0:12:01:86:b0:7f:2e:7d:a2:
d6:e0:58:8d:64:33:ce:d3:b3:19:ef:cd:e1:83:9e:
2c:23:fb:32:eb:ec:9f:75:46:aa:01:ef:9f:67:9b:
ec:48:e8:56:f3:39:66:24:ed:f6:1e:58:6d:04:3a:
34:91:fc:78:2b:f0:70:9a:24:d4:a7:73:b7:4c:4c:
9b:45:e6:d6:d9:52:c5:29:a2:44:e3:49:25:79:81:
a6:5a:97:f3:37:80:23:d6:73:af:53:63:d8:d1:7a:
43:fb:e0:9a:21:e6:a0:0b:e0:d6:fa:d2:e1:14:fe:
9b:26:b4:e3:79:49:ab:7f:f9:dc:d5:9d:11:9e:95:
3e:d9:94:02:d3:ff:44:07:0d:06:62:25:5b:11:52:
d5:ca:d1:30:8c:fc:dd:59:6a:42:bb:a4:19:d8:47:
bb:d3:86:ac:83:52:5b:58:c9:ba:1d:7f:69:cf:82:
02:f1:4b:0c:5e:06:17:80:a7:3b:f1:02:c6:a7:da:
7d:b6:08:74:62:44:20:32:cf:fc:0d:8c:53:a6:ee:
ea:31:50:ca:29:83:32:2b:93:f2:59:fe:fc:98:be:
00:4d:aa:9b:9f:cf:0b:3c:eb:ca:f3:89:8d:36:62:
85:ea:d0:93:1b:b0:eb:c8:3b:9a:0d:d4:3c:95:2b:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:0A:CC:0B:BC:EE:53:36:19:77:41:50:EC:C8:49:EF:02:75:5D
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f8:fb:3e:3b:67:fa:f8:4f:3d:e1:49:8d:e2:42:37:b8:52:
db:cc:93:a8:c6:89:0f:9b:a7:79:a2:ee:3f:9a:9a:3a:c4:bf:
19:45:d1:a7:20:b7:75:c9:00:52:bc:ff:49:2c:b0:47:8c:c8:
23:f5:aa:93:c0:0b:6a:69:34:ac:af:fb:a6:fa:54:ce:af:6a:
f4:dc:d1:e9:a0:ce:17:82:37:07:57:96:f0:34:04:c4:d7:17:
2e:da:00:d5:40:95:9e:eb:16:bc:91:8d:b3:cc:91:a9:77:32:
b4:fc:fb:92:16:45:61:ae:c4:46:84:37:46:9f:b9:73:ad:8a:
01:4a:08:ad:f7:ea:57:bc:c8:4a:7a:6a:3f:fc:3e:52:c2:99:
38:d1:3c:67:28:75:06:d8:0d:59:b5:b4:01:15:4b:31:60:ee:
f5:a7:aa:4d:a7:f0:c0:4c:e5:64:35:5b:84:dc:81:cd:6d:79:
24:b9:01:1f:2b:ba:60:90:bb:61:00:eb:f7:78:51:ae:68:e2:
7d:ad:a3:ce:9c:15:c7:10:5a:e7:2c:ed:a4:8f:86:22:40:60:
0f:f6:86:74:a3:e7:d9:89:55:c3:f7:26:f4:f5:7a:5f:9e:db:
e6:e7:fe:2e:54:21:50:c9:fc:cd:aa:b4:62:2c:21:2b:75:3a:
48:20:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:02:04 2026 by rpki-client