Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: /XCDIfNua2KwUmyd3VIltwj+cq5QZqJdUJ/SanaJ/d0=
Subject key identifier: 1F:18:2C:72:81:F4:A6:1C:75:C1:BB:08:D6:21:16:74:21:4B:63:CF
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019DA8307BC541B1B28C629209AF948137B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0DBB
Signing time: Mon 20 Apr 2026 00:00:42 +0000
Manifest this update: Mon 20 Apr 2026 00:00:42 +0000
Manifest next update: Tue 21 Apr 2026 00:00:42 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: ivH6RcgzycumJeSngYc3S2GhZWjRLersF5oGKWPbY+g=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:30:7b:c5:41:b1:b2:8c:62:92:09:af:94:81:37:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Apr 20 00:00:42 2026 GMT
Not After : Apr 21 00:00:42 2026 GMT
Subject: CN=1f182c7281f4a61c75c1bb08d6211674214b63cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:23:0d:20:f3:40:ae:52:71:4b:72:ea:15:
b5:b7:1e:d8:4e:90:27:e8:81:78:59:79:fa:8c:64:
a7:81:68:e0:a9:79:fb:75:32:a9:a1:53:91:47:26:
7d:03:04:5f:7a:1a:73:ef:28:30:24:c8:1c:08:87:
9a:b7:9f:62:12:3c:ec:c6:74:df:4e:75:75:a8:83:
73:55:3c:db:b2:7d:3f:b9:7f:7a:a6:73:d6:fe:a8:
d6:e5:20:58:5a:26:58:8f:f0:4a:f2:10:76:14:25:
de:75:26:e8:4a:c3:ac:50:44:a0:28:0d:9a:0f:c5:
a2:75:7d:9b:f0:0d:c4:d3:a6:d2:83:48:e0:9e:66:
2a:00:ec:b8:33:22:10:83:3f:98:6b:bf:cb:36:38:
70:87:38:72:ef:9d:23:42:ea:8d:43:60:aa:a2:d4:
22:61:4e:ef:16:ca:b4:e0:f4:30:5d:3f:3a:a4:07:
9f:27:99:3a:ee:49:a1:dd:20:77:b9:38:86:f8:fc:
4c:a7:db:6f:b6:89:29:00:58:30:0b:9e:46:ab:13:
72:b7:c9:db:d1:17:df:ae:15:9e:bc:09:75:e3:6b:
6a:58:14:f7:87:b7:cf:2d:97:04:07:3c:ad:a9:cf:
b9:7a:c9:e1:2b:89:9e:2f:68:e2:dc:69:0a:70:ba:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:2C:72:81:F4:A6:1C:75:C1:BB:08:D6:21:16:74:21:4B:63:CF
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a0:79:f0:db:62:ed:81:8c:a5:08:2c:77:77:f1:5c:89:71:
29:6e:0c:e6:5a:a7:77:13:90:f1:dd:48:3e:0d:55:9e:a5:cb:
39:e2:38:84:4a:1a:7e:94:51:a9:f0:ee:69:ea:1b:29:83:be:
54:bd:0d:e3:6a:dc:19:81:d4:c9:cf:7b:d0:22:f4:a3:33:7c:
94:b0:ae:0b:cb:8d:c4:98:d5:1b:21:d6:36:8a:8d:41:7d:19:
a9:b5:91:76:d5:62:7b:f7:04:ec:2e:eb:64:a1:5f:73:ab:b4:
0a:59:b4:a6:11:84:a2:30:f9:fc:dd:25:aa:30:6d:47:49:87:
d0:82:57:72:62:1b:77:19:8d:e4:d6:1f:c2:f3:d9:74:e7:98:
2d:23:8f:09:4a:7b:5e:4e:79:de:66:f8:b3:bb:61:4b:57:6a:
6d:39:d4:4a:00:19:c8:c3:17:4b:7b:bd:df:14:3b:52:dd:86:
81:e5:ea:7e:54:e7:21:56:1a:a8:f7:0b:a6:61:7c:77:24:7d:
68:c4:f3:4b:43:c2:0f:af:c9:3c:30:a8:88:6c:a1:4b:2e:d2:
40:f4:b2:31:93:a8:dc:93:f3:3f:27:a1:36:a5:f7:95:88:2b:
b5:2c:c0:94:21:38:e3:9f:17:2a:6f:61:ce:6d:51:0a:fe:4a:
30:44:20:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 06:18:52 2026 by rpki-client