Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: /W210o/KYrcUIeQuwF7ftQNrvRL1GvPkKW4MiVSgjqQ=
Subject key identifier: 8D:AD:23:61:F7:AB:3A:98:10:46:C5:92:99:0F:29:78:44:FB:59:3A
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019DD01A28E2C9A6C0CA4A09550A683E723C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 18EB
Signing time: Mon 27 Apr 2026 18:01:08 +0000
Manifest this update: Mon 27 Apr 2026 18:01:08 +0000
Manifest next update: Tue 28 Apr 2026 18:01:08 +0000
Files and hashes: 1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: W1v5JL5t2m00fQO3oXWTFB4wCnt6TZELo3CpIr4dSfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:28:e2:c9:a6:c0:ca:4a:09:55:0a:68:3e:72:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Apr 27 18:01:08 2026 GMT
Not After : Apr 28 18:01:08 2026 GMT
Subject: CN=8dad2361f7ab3a981046c592990f297844fb593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:d9:74:e9:f9:68:11:92:71:12:dd:99:8d:
14:66:cc:56:37:f9:92:0b:23:02:44:90:5f:84:51:
b2:2b:1d:dd:63:cc:1b:d6:11:c4:98:f6:5f:9f:a6:
03:ae:7c:c7:10:c9:bd:fc:36:9f:82:e3:ac:72:41:
22:02:3c:95:e9:ae:88:b9:3a:34:ba:87:e1:19:52:
37:6e:92:02:a7:ae:a7:d8:49:2c:9d:a0:99:9e:01:
0e:4f:f8:84:68:35:e8:16:4b:bc:db:29:a0:20:80:
b9:aa:81:0c:0e:f8:31:2b:05:11:6f:15:ad:01:51:
0f:4d:f3:3f:c4:98:bb:13:44:02:8d:45:0b:8a:74:
de:6a:2b:98:c7:84:04:d3:ba:1f:52:d8:b5:2c:4f:
ee:cd:6e:cf:10:fe:9d:e0:26:d5:32:57:0b:64:05:
28:f0:c3:04:1f:e9:1b:d2:32:d8:70:95:73:7a:6a:
5c:2b:cd:95:2a:b2:83:ee:c0:96:a7:86:d6:8d:8a:
24:ef:09:0d:83:ec:f6:e6:8a:db:14:d6:9d:25:24:
05:33:30:fd:35:4e:56:8d:d5:d7:52:df:0f:8b:5d:
ae:98:4e:b0:27:9b:b8:dd:33:a0:08:48:77:5c:cb:
ae:cd:cb:8c:c4:26:64:a8:e2:2e:70:4c:22:5a:c0:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AD:23:61:F7:AB:3A:98:10:46:C5:92:99:0F:29:78:44:FB:59:3A
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e8:4a:84:ce:53:ba:67:b1:5b:85:c5:62:d3:e3:ad:a2:de:
a1:fa:40:e3:ba:aa:9f:99:d7:f5:da:a4:96:a2:b3:97:97:6d:
01:75:31:6c:a8:68:03:ef:6e:e3:cf:2b:4b:61:f6:69:57:01:
5e:5d:53:74:7a:30:61:64:8a:7b:c7:2f:73:46:49:6e:84:14:
76:b1:fd:6e:1b:29:1c:a7:a5:d1:5a:74:de:00:ef:cc:c5:dd:
7a:2a:ad:b8:5c:1f:0c:9c:4c:33:ef:0c:4c:db:1b:a2:87:1f:
da:2e:59:82:8e:4d:26:4a:75:47:99:60:fa:17:d3:91:92:d3:
f6:00:b9:6e:2e:55:5d:54:29:ac:8d:5a:b1:d6:e1:ad:7b:84:
c3:56:32:d3:42:21:08:28:d0:83:f6:56:ca:6b:29:f8:26:c3:
70:ac:fd:63:dd:2e:81:bc:b6:2b:18:82:2b:32:17:fc:ad:a8:
49:0b:bd:b6:86:a0:6e:7b:ab:8c:c7:0a:7b:20:5a:0e:27:47:
79:12:52:e3:04:4e:f4:b8:14:86:8f:44:88:8e:53:2a:84:bd:
82:a1:4c:41:68:a9:36:14:db:0b:ad:83:1e:81:cc:e4:56:50:
bb:02:61:34:87:de:44:01:90:d6:f4:34:e7:d7:38:5c:e9:9a:
69:21:94:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QGijiyabAykoJVQpoPnI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjYwNDI3MTgwMTA4WhcNMjYwNDI4MTgwMTA4WjAzMTEwLwYDVQQD
Eyg4ZGFkMjM2MWY3YWIzYTk4MTA0NmM1OTI5OTBmMjk3ODQ0ZmI1OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr/ZdOn5aBGScRLdmY0UZsxWN/mS
CyMCRJBfhFGyKx3dY8wb1hHEmPZfn6YDrnzHEMm9/DafguOsckEiAjyV6a6IuTo0
uofhGVI3bpICp66n2EksnaCZngEOT/iEaDXoFku82ymgIIC5qoEMDvgxKwURbxWt
AVEPTfM/xJi7E0QCjUULinTeaiuYx4QE07ofUti1LE/uzW7PEP6d4CbVMlcLZAUo
8MMEH+kb0jLYcJVzempcK82VKrKD7sCWp4bWjYok7wkNg+z25orbFNadJSQFMzD9
NU5WjdXXUt8Pi12umE6wJ5u43TOgCEh3XMuuzcuMxCZkqOIucEwiWsCdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2tI2H3qzqYEEbFkpkPKXhE+1k6MB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoehKhM5T
umexW4XFYtPjraLeofpA47qqn5nX9dqklqKzl5dtAXUxbKhoA+9u488rS2H2aVcB
Xl1TdHowYWSKe8cvc0ZJboQUdrH9bhspHKel0Vp03gDvzMXdeiqtuFwfDJxMM+8M
TNsboocf2i5Zgo5NJkp1R5lg+hfTkZLT9gC5bi5VXVQprI1asdbhrXuEw1Yy00Ih
CCjQg/ZWymsp+CbDcKz9Y90ugby2KxiCKzIX/K2oSQu9toagbnurjMcKeyBaDidH
eRJS4wRO9LgUho9EiI5TKoS9gqFMQWipNhTbC62DHoHM5FZQuwJhNIfeRAGQ1vQ0
59c4XOmaaSGUZQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:06:20 2026 by rpki-client