Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: QNSW4AgQ6tjv3ohx7vX/JrjDXaV7gx9567N49SyOvMg=
Subject key identifier: 37:7E:63:5B:EC:22:E1:34:77:AA:36:36:CE:BB:DD:9F:9C:78:2B:D0
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019DB08F34A5941E00C6FCE4189A945EFC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 0803
Signing time: Tue 21 Apr 2026 15:01:08 +0000
Manifest this update: Tue 21 Apr 2026 15:01:08 +0000
Manifest next update: Wed 22 Apr 2026 15:01:08 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: AAWTlk+jaMfNVOrDE0Sz2aMvsmTMGWwCaFJizS6dHqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:8f:34:a5:94:1e:00:c6:fc:e4:18:9a:94:5e:fc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Apr 21 15:01:08 2026 GMT
Not After : Apr 22 15:01:08 2026 GMT
Subject: CN=377e635bec22e13477aa3636cebbdd9f9c782bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:a0:b9:2d:ee:07:bb:4e:2c:91:86:fe:78:
47:9f:8b:4a:38:01:b1:5c:3b:ca:f6:5e:f9:e4:ba:
1a:f5:7c:56:4f:c8:02:3f:93:49:2e:14:72:4c:dc:
87:f0:cf:67:6b:25:b7:08:80:d7:46:c8:6a:f7:b3:
3c:ab:f2:2f:f1:35:f7:dc:74:6f:1e:46:92:5d:6c:
4c:e6:72:43:da:fb:52:ef:c5:0b:29:bb:87:98:02:
1c:4e:0f:ba:60:d7:14:15:1a:58:56:63:2c:ed:26:
fe:2b:74:61:ab:a2:96:a3:8d:13:a3:5d:ac:40:ba:
e6:8a:e4:b1:55:4c:9b:fc:a9:5c:19:a1:57:a3:79:
51:63:cf:f9:4e:4e:51:b2:3f:27:4d:60:55:91:c2:
64:c0:2d:96:f1:28:0f:99:b7:4a:c2:28:4a:a7:a8:
13:fb:26:6f:aa:bd:54:11:36:89:9e:fa:bf:a6:df:
f5:9c:da:85:42:62:73:f4:1e:ea:ef:dc:51:63:0e:
34:93:0c:a8:51:df:34:d1:ab:9d:59:d7:e9:d2:cd:
18:7c:e3:18:c1:be:bd:9d:9a:d5:fd:6e:29:fb:3a:
81:2c:44:7c:ea:e1:00:af:21:8f:a1:e5:19:69:49:
f5:28:d5:c0:5d:a7:6f:4a:19:44:4b:16:4b:7d:90:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:63:5B:EC:22:E1:34:77:AA:36:36:CE:BB:DD:9F:9C:78:2B:D0
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4c:48:f8:3b:b4:07:00:9f:80:96:ce:d5:2b:c1:b3:6e:2b:
ee:3d:af:9f:9f:f7:55:c3:18:c5:41:fd:f3:43:27:4b:d8:63:
eb:57:7b:18:9c:ed:59:b8:cb:63:b6:8b:5e:7b:6a:98:2e:63:
2d:ca:87:24:32:2c:0e:e3:cf:37:35:5e:fc:7e:b9:6f:57:2f:
47:3b:98:5a:8f:bd:0e:c7:e8:15:0e:b7:47:ee:ed:13:7d:2f:
b0:57:60:11:18:8a:c1:a9:9f:ca:65:f6:14:02:95:f3:56:d2:
87:a0:5e:2f:18:03:af:81:95:e9:ec:a4:b6:07:ca:87:f7:d1:
26:bd:69:0d:68:c8:04:79:03:87:d2:40:07:08:18:6f:3a:08:
9a:a9:8c:41:6d:9c:ab:ad:9f:5b:af:32:f5:0e:1c:cb:0c:27:
78:94:75:da:6b:10:9f:8f:0a:72:9b:6a:ba:bc:c2:9b:e9:1e:
d5:e4:bc:8a:1f:8a:a1:69:81:f6:ee:37:62:ef:fb:65:0e:e1:
41:25:8e:fc:4c:66:1c:4e:f7:ea:5a:48:80:50:f4:81:83:8a:
e3:2f:cf:72:ec:04:fc:31:9d:eb:fa:4c:aa:34:d7:70:f0:2c:
9c:6c:6f:bc:70:4c:ee:f8:9d:79:b3:a1:85:c6:6d:31:d1:f4:
a6:cb:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:09:09 2026 by rpki-client