Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: BKTo0NI119B4XN+F25UyLRPJdJjVkAHOiBY6JNZ1H+0=
Subject key identifier: 84:0E:39:BE:F2:3A:48:D8:92:13:78:61:84:58:A2:CE:A2:D7:F9:04
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 019DD087EDAE9C1E9D34D7EAE8F24201DE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 05A3
Signing time: Mon 27 Apr 2026 20:01:02 +0000
Manifest this update: Mon 27 Apr 2026 20:01:02 +0000
Manifest next update: Tue 28 Apr 2026 20:01:02 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: +tuWp0aqrj8SjP8UyIh3WGZA3VoB298PTSl38mscpn0=)
2: zrY1kiCbt_RCBDyoPeb6Gt-rfXI.roa (hash: 99km0sbg09Xs5uX9uuCKMjDG2dbDXHFkyqnyOKsmuE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:ed:ae:9c:1e:9d:34:d7:ea:e8:f2:42:01:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Apr 27 20:01:02 2026 GMT
Not After : Apr 28 20:01:02 2026 GMT
Subject: CN=840e39bef23a48d8921378618458a2cea2d7f904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:a7:23:69:f0:42:ff:69:ff:f0:45:f2:51:
90:3e:20:3c:69:0c:3d:2b:d6:e1:b1:bb:1d:74:ec:
bd:2a:c1:66:f7:b8:81:97:76:1d:2e:3d:6f:03:45:
52:e6:8a:5c:1f:05:4b:b8:f8:f9:59:08:35:2d:1d:
5a:eb:e8:ee:e4:e6:a4:c6:2b:02:dd:83:92:34:f4:
97:9f:df:e0:85:5d:36:e4:10:bb:f5:1f:1d:15:ca:
47:53:d6:81:9c:01:d9:eb:e0:f6:20:9f:1d:0b:b4:
fe:57:ef:cb:06:4c:8b:a2:c3:78:ca:c5:e0:e4:66:
c4:06:24:a4:bb:75:03:e9:87:71:c9:8b:c1:87:1c:
90:d8:96:f9:c8:c5:e1:42:54:f2:ea:18:55:aa:e8:
82:5e:1e:f5:a5:1a:42:9c:5d:17:6c:50:be:2b:ce:
4a:99:14:1f:9a:62:ec:09:f8:f1:10:b5:0b:6d:59:
7f:41:bf:45:fc:e0:e5:7e:1a:e1:d6:07:c8:d0:9c:
c5:6f:f4:84:03:30:aa:59:e9:db:85:5d:d8:28:ae:
62:98:7e:52:62:ab:97:08:cd:78:ac:5e:1e:10:9d:
73:1d:b4:39:86:ee:b2:b9:37:8c:6b:58:88:90:8f:
d7:b3:1a:94:cc:58:60:12:01:b0:6a:ae:ff:f2:fe:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:39:BE:F2:3A:48:D8:92:13:78:61:84:58:A2:CE:A2:D7:F9:04
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ed:2f:d4:4c:ed:a5:ff:74:87:bf:b6:d2:f2:a7:1c:a0:c8:
07:72:e3:d0:67:9d:57:f4:b3:c6:d4:d6:42:aa:82:33:56:80:
d1:67:bb:ac:fc:3e:7e:b2:ac:1b:7f:74:7b:8b:aa:13:c0:97:
d9:bb:a6:b7:7f:dd:82:ba:3d:5f:f1:99:49:84:37:97:db:9a:
89:1b:b4:f6:bb:61:c4:c0:af:2e:3f:92:50:cc:a3:14:ed:be:
4a:b3:43:a5:97:f8:0d:a7:4e:d0:14:ab:04:cc:44:e4:b1:bf:
28:aa:8c:2c:91:b5:a7:28:77:4b:a9:f9:93:87:aa:1e:b4:6f:
c4:57:0a:e9:04:cf:b3:54:dd:25:ba:99:c6:c4:ce:32:7d:31:
92:21:1a:ba:1f:91:98:b4:a0:63:74:9a:b8:29:44:37:46:0b:
d6:54:fe:99:1f:38:02:c3:cb:b6:f3:4c:24:36:8f:d7:36:71:
ac:fc:d6:30:13:ee:e5:16:62:8d:79:ad:48:0b:34:c5:b5:8a:
ea:4d:c0:68:6b:d3:bb:a8:fb:fe:ae:a3:5a:d4:51:f3:66:9f:
2d:92:be:90:87:e8:e3:5b:79:e6:a9:3b:04:0a:40:01:55:8d:
99:cc:d7:7c:df:62:4b:be:82:24:1c:1f:b3:04:c5:cc:1b:0d:
36:35:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:17 2026 by rpki-client