Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: aaDvqZFNdEjspfB6R2Fex9K85Wy1ivOM3qcJToj+WHE=
Subject key identifier: 60:26:E8:82:03:DE:90:41:7F:72:D4:60:AE:EB:FD:F1:C5:F2:F1:16
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019DCCE195E57CC81BF9C434CF71A83B5721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0AFF
Signing time: Mon 27 Apr 2026 03:00:29 +0000
Manifest this update: Mon 27 Apr 2026 03:00:29 +0000
Manifest next update: Tue 28 Apr 2026 03:00:29 +0000
Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: SJfUhLY1TljNuofNeTDhqNpHo99Lg9Wq9FqTlGFoluw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:95:e5:7c:c8:1b:f9:c4:34:cf:71:a8:3b:57:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Apr 27 03:00:29 2026 GMT
Not After : Apr 28 03:00:29 2026 GMT
Subject: CN=6026e88203de90417f72d460aeebfdf1c5f2f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:74:90:ed:e3:06:a0:1e:24:f9:10:94:bc:
81:18:12:4d:84:25:0f:04:77:35:80:95:6e:23:77:
51:f4:c4:be:6b:5d:8d:42:5d:66:3e:5b:81:cb:34:
f2:8f:a8:b6:17:25:6d:86:db:cc:88:1b:9f:55:65:
64:5f:fe:02:52:13:de:c0:86:3b:9f:bf:d8:2a:63:
88:66:30:bc:95:70:b6:93:21:73:81:83:84:f3:66:
bf:5f:fb:3e:98:5d:a7:e5:cc:b9:87:96:b3:38:8e:
c5:c3:b6:9f:6b:8b:f7:64:38:e1:26:5b:9b:f6:79:
fd:a6:f6:fc:45:3f:35:d3:7b:bf:9f:e7:1b:1f:30:
9c:c9:0c:f2:c5:c0:e3:f3:00:05:8c:a4:78:2b:d8:
77:f1:8e:49:6b:f0:44:7a:4b:00:06:62:4e:d7:30:
6e:ea:d8:99:16:78:24:cc:86:b8:8e:1b:ee:28:92:
44:89:2c:67:22:94:bf:a5:26:f2:bf:0c:64:e5:e4:
2b:9b:51:02:9b:bc:fd:3e:e4:6c:9b:6a:10:a9:07:
87:43:a4:85:7d:f5:9e:f1:22:9e:eb:69:d1:b4:30:
5f:8b:26:0e:88:38:6a:8a:ef:0c:eb:6a:ee:3b:a0:
2d:f1:d2:bc:3a:69:33:12:2c:47:56:45:5e:70:b1:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:26:E8:82:03:DE:90:41:7F:72:D4:60:AE:EB:FD:F1:C5:F2:F1:16
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:ff:7a:58:d2:54:a1:27:ab:10:3b:12:08:46:52:5f:e7:
29:6b:a9:8b:c7:2e:9c:0b:d6:4b:72:24:c7:ef:c0:cb:e2:69:
90:e1:9f:ac:b9:c9:53:50:b1:c5:05:89:1f:09:04:b3:2e:c9:
7b:1e:a8:e4:d0:b1:35:c0:e5:57:3c:a0:f0:7c:2f:c6:bf:7e:
60:f4:5d:a9:b1:01:96:64:ef:ba:8b:62:f0:de:23:d0:1e:b7:
47:de:c5:8f:d3:fe:18:ed:c5:7a:57:ef:3e:83:4c:78:dc:72:
26:c6:eb:b5:dd:95:0c:3b:aa:25:17:f4:64:59:8e:0a:d9:11:
ef:cb:b2:be:7e:8c:96:18:ac:a5:1c:71:9d:5f:ec:f0:fc:8f:
87:ac:9e:c9:84:88:26:2e:e3:4b:7a:53:b6:66:b7:ce:27:af:
a1:c9:e9:56:b3:b5:ee:a7:e7:43:84:a2:8f:f2:e8:4e:b0:7e:
03:73:c2:ca:95:7e:86:55:61:91:8c:32:3e:31:91:d1:7b:50:
5a:7c:06:41:b8:51:6d:60:b0:f4:86:59:b1:25:82:10:41:7b:
9d:7e:59:7c:ea:43:4a:31:67:4f:d5:1e:b9:0b:08:20:87:fa:
fa:35:54:cd:ef:8f:0b:2b:f5:62:98:bc:fa:94:84:6f:bc:e9:
98:d0:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:14 2026 by rpki-client