Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: iuJv4b4/oZnoeB3H/f9vyy2+TjiPYQZsPzWNmw3Hz8o=
Subject key identifier: F1:BF:8D:82:DA:D7:AC:04:BE:6C:1E:74:C1:C5:48:BE:00:FF:55:DB
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019DCED07B6D04247A50C089673FF395C97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 16B7
Signing time: Mon 27 Apr 2026 12:01:02 +0000
Manifest this update: Mon 27 Apr 2026 12:01:02 +0000
Manifest next update: Tue 28 Apr 2026 12:01:02 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: p8ekJVB4+GcU2mezlrEcWtgEndsryeG0xqoewmtYJKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:7b:6d:04:24:7a:50:c0:89:67:3f:f3:95:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Apr 27 12:01:02 2026 GMT
Not After : Apr 28 12:01:02 2026 GMT
Subject: CN=f1bf8d82dad7ac04be6c1e74c1c548be00ff55db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:e2:5a:3f:b0:33:aa:51:30:ad:cb:37:bb:
cf:04:d8:84:a6:70:da:d2:70:ca:62:2d:25:c3:61:
5b:91:51:b7:fd:0e:8e:ae:fb:ba:3c:d0:13:d6:4b:
46:2a:76:31:a4:a9:3e:14:29:aa:3a:9c:b9:51:76:
70:e1:02:af:51:d2:a0:c4:74:00:a4:6a:26:a0:82:
60:17:d6:d7:a4:19:38:27:a6:c4:12:a8:da:72:99:
52:f5:91:d8:6c:31:02:6b:1f:10:f9:ec:1b:93:9a:
c1:49:2a:91:fc:c0:cd:97:16:80:85:d3:ef:da:45:
72:df:14:3f:dd:6c:82:48:46:a3:d1:78:33:0c:bd:
af:08:a1:65:94:fb:0a:6a:b8:c8:c8:57:74:bb:2f:
92:fc:82:b8:0e:3a:e6:80:86:d1:7d:9c:44:6b:cc:
97:70:f0:d1:1c:9e:b8:0b:98:89:53:bf:33:09:91:
47:ea:fa:99:24:16:0e:48:48:a3:48:ae:c5:c9:07:
ce:03:cf:e8:c1:28:a2:96:0c:dc:b5:6d:8b:a5:6d:
74:88:cf:b5:09:47:4e:93:ba:d3:bb:9e:4e:64:3b:
01:5b:24:e1:78:79:a4:b5:52:24:62:9a:57:a0:8a:
05:87:b4:3f:7e:de:5b:b6:ff:88:ae:3d:87:88:34:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:8D:82:DA:D7:AC:04:BE:6C:1E:74:C1:C5:48:BE:00:FF:55:DB
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:88:e5:14:c8:d7:81:b7:37:e2:51:b6:fe:c9:51:90:a1:
b8:a3:f9:79:5b:27:55:5b:67:81:c9:e2:ae:00:02:f8:56:b1:
3e:8d:13:da:7f:00:0b:de:98:af:b0:f1:4f:7c:b6:5b:b1:e8:
cb:8b:66:6e:a4:2c:1e:94:0a:a0:c0:20:fd:9b:a7:2c:ab:1b:
cb:08:33:bb:3c:36:7f:6c:d2:3e:48:63:7a:4e:f8:9d:6b:8f:
a6:cf:36:59:09:02:1c:2b:e4:f8:dd:0c:70:52:3b:2a:61:66:
f9:ef:45:4c:3b:ca:42:c3:97:02:36:bf:61:25:70:85:c9:69:
08:7b:3d:08:b4:7d:58:22:d3:59:94:e7:c0:1d:18:64:3a:62:
d6:e8:db:40:a1:78:f9:e0:70:ba:40:f2:51:1d:e8:cb:d6:4d:
59:1e:9b:92:64:a8:34:76:ba:d0:e0:73:de:7d:85:68:63:47:
c8:3e:0b:77:43:85:18:1c:4e:3c:54:45:35:79:b4:28:08:fb:
cb:59:46:ee:fd:01:75:dd:42:6b:e6:d8:50:b6:ac:58:84:0d:
fb:45:79:7d:59:ad:df:b1:29:e4:92:b4:7d:32:9e:2e:ca:ff:
03:c9:9b:a3:da:39:0c:29:26:c0:c7:7e:ac:54:5c:61:57:18:
1c:6c:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:06:33 2026 by rpki-client