Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: kAiCePzw662YadQdLnWFXT08aP6fY9m6My8gSNUbYPU=
Subject key identifier: 69:E6:99:BE:52:FF:AD:CD:1C:15:3D:8C:C7:E9:13:50:48:C3:5E:E8
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019DDD9F03B481FB5C45B62204775C0CBD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0CCD
Signing time: Thu 30 Apr 2026 09:01:19 +0000
Manifest this update: Thu 30 Apr 2026 09:01:19 +0000
Manifest next update: Fri 01 May 2026 09:01:19 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: aW1X6mk6VrwCvsb0jes7/kEhQV7520SjeVtHaFMqqm0=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9f:03:b4:81:fb:5c:45:b6:22:04:77:5c:0c:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Apr 30 09:01:19 2026 GMT
Not After : May 1 09:01:19 2026 GMT
Subject: CN=69e699be52ffadcd1c153d8cc7e9135048c35ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:a0:71:ed:22:f4:93:d1:22:e5:9b:a6:ab:
67:84:22:cb:fc:3d:2f:e2:c9:3e:f4:e2:ab:bb:8a:
ea:7c:6c:8f:a4:23:8d:52:d2:7d:b8:c2:40:17:ce:
5f:12:51:1e:7e:7a:b7:26:d1:d9:b5:15:7d:86:45:
9a:fc:ff:0c:d5:70:06:2c:fe:ea:0f:2d:ba:c3:a5:
c3:a6:88:0d:29:0a:fd:18:d0:67:c1:b5:92:14:dc:
41:64:ef:52:05:7d:8c:c6:4e:e6:11:0c:b2:8f:0a:
c7:89:6f:85:27:9f:2e:a8:1f:ef:02:6c:f0:45:ad:
58:e5:12:f5:4c:ef:d3:29:dc:75:97:99:d9:2a:d5:
e0:96:b2:c0:92:24:66:5b:a8:ca:88:78:08:27:0a:
45:92:90:57:1f:b0:3e:57:df:8b:c2:3b:e0:6b:d0:
e0:a9:bd:cc:bc:d3:a8:a2:6f:91:54:a0:dd:05:8b:
8b:cc:f3:04:8d:38:c1:6e:4d:d1:76:f8:10:64:39:
46:3e:0a:b7:55:76:b2:23:58:21:fb:1f:59:83:50:
e1:29:b5:da:cc:a6:30:dc:c3:cf:cd:48:07:5c:20:
6a:6c:20:1b:99:84:92:c0:5a:0f:6d:4f:48:24:c6:
f2:ed:01:8a:2f:01:59:e3:fa:e0:47:47:2e:2e:a9:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E6:99:BE:52:FF:AD:CD:1C:15:3D:8C:C7:E9:13:50:48:C3:5E:E8
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d2:57:a9:c5:4b:21:b3:de:cb:df:64:e0:ea:2a:d1:04:68:
0c:99:63:cc:90:7d:3a:d5:57:48:92:4d:f7:d4:0f:f5:a8:7a:
e7:e8:90:3b:cf:05:ae:c8:97:ed:54:f6:64:5b:3f:22:50:a4:
52:a8:28:0d:b0:e3:10:90:8d:eb:6f:d4:df:a9:1f:17:ff:54:
8f:33:5d:2f:b5:7b:b7:14:a1:1e:11:5d:73:60:d0:5b:a8:30:
05:30:fe:f4:bd:88:65:62:13:6c:51:75:f8:b0:8f:9f:11:cf:
13:c4:13:58:f0:f3:0d:ee:be:91:eb:56:1f:f8:c3:63:d3:68:
19:2e:17:49:0e:23:1b:0b:49:5c:89:f8:19:e8:56:9e:a7:2c:
86:2e:9d:e9:d2:fc:5f:80:ec:fe:f4:91:95:c7:fd:c7:51:cc:
8a:2d:de:72:6c:04:d6:a8:41:f8:62:00:81:f4:5f:1d:1c:74:
10:43:cf:a6:40:14:47:ba:f4:e2:c5:41:b7:66:6a:64:11:f6:
2f:0f:cb:ff:8a:7f:0c:2c:06:f7:2e:ad:7a:8f:e8:82:5b:e7:
ac:15:a6:43:6f:a4:4e:78:06:8e:66:40:e0:6d:50:d0:16:04:
cc:6e:36:10:e8:88:68:8c:96:3f:d1:7e:6b:c1:ba:8c:4c:a5:
7e:6e:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:50 2026 by rpki-client