Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: 8/DBe+Apwu9nPCbXIKIDM33siI1Zio0/R9Ighxdf0J0=
Subject key identifier: 6C:A2:A9:79:E3:CE:67:94:12:E9:CE:7B:68:8A:D0:FC:52:79:63:00
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019DCCAB3B050303C0B2826F998AC78B49BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 18EB
Signing time: Mon 27 Apr 2026 02:01:06 +0000
Manifest this update: Mon 27 Apr 2026 02:01:06 +0000
Manifest next update: Tue 28 Apr 2026 02:01:06 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: afrQqcdywaXEYy52FCCQYwBkt6enOqpDVlgJfQwiz4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:ab:3b:05:03:03:c0:b2:82:6f:99:8a:c7:8b:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Apr 27 02:01:06 2026 GMT
Not After : Apr 28 02:01:06 2026 GMT
Subject: CN=6ca2a979e3ce679412e9ce7b688ad0fc52796300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:2e:03:5d:4f:0c:7d:37:98:a4:fc:1a:d4:
6b:de:9c:7e:0f:fe:3b:bb:5b:9f:2f:23:52:30:49:
24:bd:07:61:77:40:e3:ac:05:dc:65:0d:a6:10:0c:
95:5e:99:93:4e:f2:81:35:40:43:2c:26:04:54:dc:
a8:47:9b:fb:ac:67:52:74:32:a8:ed:2e:28:b7:52:
41:76:bf:ae:13:30:65:c0:9f:27:dc:1b:18:4c:5a:
2f:bd:ae:3c:93:01:d0:c3:44:db:0e:a9:2b:8a:55:
59:51:7e:7e:79:7a:60:e8:3d:46:68:ec:88:b2:d1:
e3:f4:b1:f9:ac:c2:bb:24:ae:c1:43:2f:52:15:3d:
68:8c:fe:bb:36:c9:e6:fd:cd:50:0e:93:19:4e:63:
62:97:5a:c5:3b:f4:14:be:71:86:7a:7a:7a:a4:d6:
b3:7c:82:c2:66:c9:6f:17:92:09:f2:0b:39:22:b7:
d1:a1:1d:0b:1f:35:46:cb:11:71:3e:ea:78:4c:fe:
a8:25:08:0f:25:09:ce:a0:8f:43:16:fe:f3:b4:f9:
cd:54:f2:c1:03:ac:9d:5e:ab:41:04:2b:cb:1b:c5:
f8:11:91:43:ef:b7:94:56:7c:b9:c1:64:1e:ee:66:
51:4e:8f:68:04:db:7c:ce:9a:64:4c:51:d7:43:79:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:A9:79:E3:CE:67:94:12:E9:CE:7B:68:8A:D0:FC:52:79:63:00
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7a:26:c2:f6:8d:25:2d:1a:e5:65:0c:02:2e:78:e7:85:f3:
68:76:a3:db:e5:cb:45:e1:bb:55:de:2a:4c:fe:d2:fb:f8:db:
37:c7:6f:64:39:6a:6d:23:90:e7:5f:82:39:e3:9e:86:5f:41:
c5:6f:f2:6f:75:41:06:b8:10:9b:8d:9d:72:08:65:4c:55:12:
0c:57:38:55:df:9b:01:55:78:51:46:aa:b6:4d:37:67:d6:ab:
60:2f:1b:a2:6e:15:90:7e:83:7a:12:db:87:ad:2f:4a:a7:a4:
67:2e:16:03:b8:f5:87:a7:bc:b7:37:5b:8a:2c:a5:08:97:78:
d2:35:c7:a1:12:0d:09:b8:70:2c:32:90:8f:95:c8:dc:c7:73:
19:6d:c7:c9:2e:b7:fc:99:34:16:20:17:c7:e0:3f:cb:d8:4a:
eb:20:a7:dc:a5:56:e5:c3:d0:a5:88:2b:85:e5:57:7d:9e:88:
42:fa:e6:35:d8:1e:e9:cc:d7:7f:f1:24:33:5f:65:78:6f:16:
de:ed:22:b9:a8:0b:99:9b:f3:a5:f9:36:6e:dc:5c:a3:b0:2a:
13:d2:3a:41:a1:88:32:79:4b:c4:14:fa:b4:78:7d:0c:cc:3a:
0c:4c:2f:bc:76:c5:a9:c7:7b:84:ed:33:a8:f4:26:0e:e1:1a:
c2:df:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:20:17 2026 by rpki-client