Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier: vW8Payzn5fGo8s56pi/2djUpVWN1kwNvuLQaKQitIkw=
Subject key identifier: 3F:1A:5B:0E:05:58:92:83:B7:8F:08:86:93:81:FE:19:91:56:57:AB
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 019DD164605CA9DC68FCB8E791D8178BE43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number: 18FF
Signing time: Tue 28 Apr 2026 00:01:49 +0000
Manifest this update: Tue 28 Apr 2026 00:01:49 +0000
Manifest next update: Wed 29 Apr 2026 00:01:49 +0000
Files and hashes: 1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: FAr3zpCDPRG7XBVXOmO95Vpo8BfTaecn5CoCFqeuB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:64:60:5c:a9:dc:68:fc:b8:e7:91:d8:17:8b:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Apr 28 00:01:49 2026 GMT
Not After : Apr 29 00:01:49 2026 GMT
Subject: CN=3f1a5b0e05589283b78f08869381fe19915657ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:73:32:55:8f:a8:07:19:62:5d:65:8e:9c:
c3:32:f0:be:a9:7a:49:02:58:04:9d:71:14:d8:f9:
8e:17:b0:bf:5f:68:68:f2:ae:8d:b8:c1:ed:b7:d9:
b3:f0:f9:85:2c:39:f6:2a:26:77:2e:5a:b8:00:c6:
40:2f:ac:cb:a9:60:83:2d:0b:5b:65:00:f7:c3:0c:
dc:f6:79:3d:eb:44:f3:b0:d5:9f:98:49:96:21:a2:
4e:6d:75:82:4d:d0:94:86:8f:11:3f:99:ea:7a:68:
e7:bc:82:e0:4f:f3:e7:10:3e:ea:24:44:43:01:6b:
cc:63:ae:f1:c7:8d:07:74:59:86:a6:c1:7a:32:62:
80:f0:50:d3:2e:b5:d9:3f:f6:12:4d:5b:b5:39:8a:
04:a8:b9:1b:24:c7:a0:a2:a4:d9:4c:13:51:47:16:
62:ec:09:2c:ae:e4:7d:f3:38:b0:93:a2:c5:2d:bc:
46:08:16:d4:35:0c:70:52:5c:98:64:e1:54:bf:a9:
f6:d4:89:2d:23:d8:82:13:63:87:41:05:a3:24:33:
89:f0:65:5f:a1:8b:62:c6:eb:bf:4a:32:68:4a:12:
60:f7:ad:4a:09:b1:e7:9c:74:24:80:02:ac:bc:ee:
70:3a:14:63:19:87:1b:cb:ce:88:dd:8e:dd:04:cf:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:5B:0E:05:58:92:83:B7:8F:08:86:93:81:FE:19:91:56:57:AB
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:43:04:75:cc:34:ba:eb:41:1b:4e:12:3c:b0:59:6c:34:
35:4a:30:67:f4:38:26:d4:c0:80:66:4b:c6:dc:bd:0e:69:3f:
55:23:78:95:7f:78:d6:bb:47:d9:85:c5:85:1a:86:15:3d:78:
89:dd:be:c2:70:f5:32:42:11:38:18:48:26:f9:06:97:6c:d4:
bd:42:c6:f1:ec:9b:c1:cf:ca:73:ac:66:a9:1c:68:49:f6:fe:
b1:11:11:77:3f:ab:1e:d0:00:6e:7a:e2:fd:1b:60:d9:79:5c:
23:90:16:50:9a:65:ef:52:8d:66:96:44:2f:4d:ba:28:ac:7d:
4a:b0:23:10:49:67:3b:12:a0:b6:29:70:a2:55:f6:96:70:64:
7c:bf:cc:f5:76:8b:8f:ee:34:a3:f9:91:d8:ac:ef:a6:e0:f4:
e2:fa:67:51:2c:1c:4b:4c:08:d2:06:e9:f6:94:9b:25:5d:9c:
7f:7b:0e:03:f4:de:3e:77:81:ba:ff:91:0a:f8:ce:f4:5f:2d:
17:3e:3a:6e:5d:d5:84:62:38:68:dc:4c:40:76:ea:29:94:6e:
d7:56:7c:14:6c:65:c0:70:11:a9:2f:23:d7:f3:ae:20:42:fe:
a7:8d:1f:ca:d3:d5:51:08:03:9b:d3:d4:42:c6:e8:78:ea:1b:
c0:16:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:22:57 2026 by rpki-client