
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: m0peXhgNTRIgmHJ8Kr28oU3bvpgRZDORdJJbxy+INdY=
Subject key identifier: 3C:4E:C9:2D:2A:E8:B2:29:8C:5C:2C:5C:F1:FE:F4:11:55:D2:ED:1D
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 019DD19AE42E1553E126E9752D79FC4CB877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 18E7
Signing time: Tue 28 Apr 2026 01:01:22 +0000
Manifest this update: Tue 28 Apr 2026 01:01:22 +0000
Manifest next update: Wed 29 Apr 2026 01:01:22 +0000
Files and hashes: 1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
2: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
3: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
4: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
5: jG6aepPboty3bhwMFNAy4j7PZLg.roa (hash: RpAm5WQYOjhIalUzLd+dhvF8WQ0tVlQHMoKb6uwbMJc=)
6: r-DgonvlWJqtYHHlaiaRiANzpGc.roa (hash: fwKAaMm3Gqo5hD8uzSgECi6owDeeT3DsiPyBbjJxWhQ=)
7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: pnEKuiugTcwp7i/DMNB1b3jE+1eodleMU5m42ndrKdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:e4:2e:15:53:e1:26:e9:75:2d:79:fc:4c:b8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Apr 28 01:01:22 2026 GMT
Not After : Apr 29 01:01:22 2026 GMT
Subject: CN=3c4ec92d2ae8b2298c5c2c5cf1fef41155d2ed1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:1f:19:2e:ca:84:b7:91:6b:35:1a:8b:74:
61:28:2c:9f:b3:b5:fd:fb:19:df:3e:44:ec:0b:85:
81:72:8c:c7:9c:8a:3a:bd:16:b1:11:a7:41:12:4a:
f2:3b:bb:17:38:92:7d:30:0b:75:72:d0:31:31:a1:
4a:08:06:71:15:e4:34:bc:18:89:eb:8e:60:73:90:
01:6c:7a:33:5f:e1:33:bf:4a:ec:f0:98:88:56:4c:
56:7b:dc:4b:a5:52:60:06:29:69:7a:0e:a0:92:d5:
60:51:b6:1c:4a:1d:74:87:f2:76:80:9b:da:05:de:
d3:97:c1:26:3c:e1:1a:98:e1:a0:dc:c1:39:14:e9:
ff:7e:4d:fd:01:26:ae:a5:6e:28:d7:d9:91:ee:94:
b6:35:f0:40:53:4a:52:c8:e1:7d:f3:b1:ca:b3:18:
fd:27:21:48:29:1d:72:3b:3c:67:9a:28:7f:c2:5f:
52:f2:99:da:f8:15:bc:3c:34:5e:3a:55:36:29:14:
c4:2f:e5:10:14:59:4c:ca:6a:d6:3f:9e:c3:df:78:
c9:2f:2c:41:45:c0:b7:1e:47:c5:e5:0a:a0:2c:93:
ce:14:ee:38:26:99:da:9f:4e:ec:95:02:34:a0:f7:
16:49:74:ac:24:b4:ac:c5:04:f4:91:a8:6a:76:62:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:C9:2D:2A:E8:B2:29:8C:5C:2C:5C:F1:FE:F4:11:55:D2:ED:1D
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:46:9e:9b:5e:b2:dd:03:45:15:c5:58:28:66:19:6c:b1:53:
ef:d0:30:b9:f2:28:51:d8:24:e5:fb:7c:cd:53:14:f9:9e:88:
c2:fc:54:a8:ce:a6:0d:b2:d2:d6:d7:7a:87:e2:53:0c:29:25:
c0:13:23:82:ef:ba:2c:24:70:e3:99:5e:7a:44:a6:16:57:17:
69:fd:43:5f:ef:1b:1e:bc:95:73:b8:81:53:82:54:ff:26:ec:
02:75:c7:6e:98:52:98:39:c6:75:7a:ac:76:45:f9:b2:52:99:
e3:f9:c6:1c:6d:f9:07:05:b4:c0:9d:80:c7:b7:ce:f0:51:74:
90:b4:3a:70:e8:91:85:e1:4e:34:38:5f:02:34:95:44:20:d2:
8c:0b:9d:d5:ca:f6:27:09:75:01:a1:ca:bd:f3:71:d8:7b:d3:
a2:35:74:fd:75:cb:a1:59:4d:d5:6c:3a:b9:d9:be:08:36:89:
1e:54:5a:f9:73:2b:4e:50:b9:20:de:32:39:9a:96:58:48:49:
6c:e4:70:eb:c7:fc:a2:6f:24:03:5f:4c:55:8c:88:9f:56:a4:
19:a8:af:87:5f:4c:39:55:88:d8:d3:d8:b1:b3:7a:22:d2:18:
f8:24:b4:8c:08:2a:4e:61:e1:ae:77:c2:e3:00:bd:5c:d7:94:
da:d4:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:43 2026 by rpki-client