Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: H58dP4yJkREvkkkSn5nDAwiFvYvzy0JE5fGkMSqDBYU=
Subject key identifier: 69:0F:C4:83:11:9D:F1:92:64:8B:9C:6B:22:7F:5E:01:59:93:7F:81
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019DDC5538C1C661086EB1266E31BDAF7CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 17E3
Signing time: Thu 30 Apr 2026 03:01:05 +0000
Manifest this update: Thu 30 Apr 2026 03:01:05 +0000
Manifest next update: Fri 01 May 2026 03:01:05 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: dVpyCuTT5YWRgQupleHQbgkXKJJvFVctEYItPOUqc6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:38:c1:c6:61:08:6e:b1:26:6e:31:bd:af:7c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Apr 30 03:01:05 2026 GMT
Not After : May 1 03:01:05 2026 GMT
Subject: CN=690fc483119df192648b9c6b227f5e0159937f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:13:25:17:80:10:f7:8a:fd:51:ba:d4:8a:
fb:bd:04:b7:4b:be:89:b0:2a:66:3d:9c:68:86:0d:
06:4f:50:4b:c7:d9:bf:c5:e8:bc:e4:8d:a2:b9:75:
6d:e8:6d:6c:62:4a:63:f5:cd:75:f8:a0:27:67:5e:
1b:6c:b5:3b:f7:8c:0c:b7:c8:af:df:a2:ce:2c:36:
aa:45:b3:5a:2b:81:30:fd:7f:fd:0c:6d:e7:8e:a7:
3b:63:ea:dc:5e:6b:4e:33:9b:b0:e9:7a:a5:d6:19:
0e:c4:48:a0:b0:84:b6:31:ad:fa:30:48:6d:d7:2a:
2e:90:b5:dd:f2:62:f3:02:79:d2:72:27:a9:9c:9f:
d5:ab:14:3b:0f:bc:63:80:4e:5c:58:c7:fa:56:20:
4c:a7:f8:6c:b4:aa:ae:2f:fe:11:ad:66:28:57:a8:
64:d2:15:38:57:f4:54:9e:d3:08:5b:c8:83:df:38:
f4:29:fe:55:dd:18:23:24:d5:c1:28:68:fb:c1:b6:
4b:ca:f1:86:ac:a6:c6:ef:d6:6a:00:a9:fb:52:59:
9a:a7:02:46:e2:93:b4:3d:ff:56:71:20:91:83:8e:
98:87:5b:7e:3c:8b:7f:6a:3f:e5:32:71:37:02:66:
42:cb:3d:41:af:b4:70:9a:e7:15:b7:a6:58:a1:7a:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:C4:83:11:9D:F1:92:64:8B:9C:6B:22:7F:5E:01:59:93:7F:81
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:43:a8:27:65:e2:f1:3a:69:7e:10:81:0c:51:53:87:e5:
72:77:8a:e6:ab:9f:1c:5d:d7:e4:7f:a5:31:b2:84:af:9c:b8:
a9:b1:45:86:c7:6d:60:2b:3c:c7:b5:a0:94:fb:70:39:c0:83:
d1:4f:45:2d:ed:ac:81:e4:5a:09:25:9c:ed:ef:3e:cb:e9:33:
0b:5a:d2:f0:6b:be:22:fd:1b:b7:cf:76:6f:95:45:fb:1a:1c:
6c:fc:50:85:df:e9:a8:fa:6c:41:94:40:60:79:0a:b1:f6:cf:
e8:e0:04:22:72:0f:27:37:c6:b9:49:6f:cc:87:c2:21:b6:20:
3f:8f:6e:f1:1f:6c:1c:c4:3e:2f:a7:c8:97:39:3f:8d:52:ad:
0a:c3:6f:69:32:d0:66:34:25:6d:95:a1:ca:7d:03:20:d2:8c:
45:43:57:62:fc:0a:e7:bc:ed:00:0b:9d:5c:ee:f2:62:c2:0b:
f6:ac:d1:01:e4:60:a6:db:45:42:b0:48:ca:5f:d9:20:a8:24:
6e:02:c4:75:e7:73:f1:04:fc:e3:3f:98:fc:80:e2:96:05:69:
e6:12:97:18:43:f4:73:df:4f:73:16:85:f5:29:38:1c:0f:14:
61:31:f7:08:8b:3b:67:93:72:1e:f0:7f:4c:fe:b6:c0:5f:ec:
d0:50:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:52:04 2026 by rpki-client