Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier: o9oY6arjPZu2zgmY1KX1LWZBgzL255eMvNcSABHBn8Y=
Subject key identifier: B9:EC:A9:80:FB:91:D4:39:88:71:1F:4D:71:62:B1:29:C7:FC:EA:19
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 019DD2085CCCB4F14E97C2D1EAEA3578B8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number: 17F4
Signing time: Tue 28 Apr 2026 03:00:56 +0000
Manifest this update: Tue 28 Apr 2026 03:00:56 +0000
Manifest next update: Wed 29 Apr 2026 03:00:56 +0000
Files and hashes: 1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: TlTV+vDpot0tjjwKSKutxUHqRmey/vETCzfetEPQQFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:08:5c:cc:b4:f1:4e:97:c2:d1:ea:ea:35:78:b8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Apr 28 03:00:56 2026 GMT
Not After : Apr 29 03:00:56 2026 GMT
Subject: CN=b9eca980fb91d43988711f4d7162b129c7fcea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:aa:2f:e3:55:ea:20:c2:e0:30:55:05:1e:
17:57:26:27:9c:e2:b1:26:b6:52:c4:a2:5d:1b:a5:
0c:5f:65:96:02:b4:b1:0e:e1:2b:f5:3d:de:0a:04:
85:fa:7f:f9:9e:2e:a1:5a:17:8b:1f:8b:10:3b:50:
2f:6d:ce:b0:0e:cb:ba:c5:15:64:9d:56:63:c7:25:
3a:28:12:7f:c5:9f:58:0e:1d:92:fd:87:93:f1:b3:
59:e8:0c:2d:83:43:74:54:60:38:66:a0:8b:ab:8f:
14:bf:9f:dc:c1:20:5e:eb:d1:01:3d:c6:e1:42:b5:
19:63:7b:b6:f1:91:fc:ff:8d:5d:f1:c5:ca:fc:e1:
14:c1:63:50:e8:cf:fd:b8:fa:03:5a:b8:dd:33:0c:
95:75:02:ee:cd:9a:e4:c7:9d:a8:3e:59:ef:28:e8:
2b:74:a7:97:2b:5e:4a:70:d6:f9:16:d5:e6:19:fb:
d8:97:36:eb:7d:0c:a5:e9:86:ed:5c:90:4c:e2:0a:
1d:fb:bb:56:dd:67:1b:62:26:6f:03:76:5e:7a:78:
91:27:7e:5e:32:f6:ec:08:fa:cf:85:49:07:90:5e:
6b:f9:a3:b0:40:79:99:69:4c:36:81:d3:21:52:0d:
98:ea:b3:06:56:93:ec:c6:39:f0:fc:13:2b:d2:84:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:A9:80:FB:91:D4:39:88:71:1F:4D:71:62:B1:29:C7:FC:EA:19
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:91:f8:64:a5:45:8f:f6:9c:7d:89:6f:e9:1a:59:c7:ea:1a:
37:4a:44:67:1f:9e:c6:ce:61:a9:d5:c6:8e:31:f2:2d:6b:9b:
d4:4b:e3:e6:bf:17:e4:6a:a8:f3:7e:b6:72:57:43:58:21:c4:
83:a2:21:35:86:91:1d:54:91:fa:7b:5d:c1:ff:3f:50:2c:90:
c3:f9:30:55:29:6b:3a:26:5f:5a:f7:13:a1:4e:32:ee:1b:82:
a6:10:7e:de:3a:d0:2d:ce:84:5e:17:5a:13:9e:69:0c:9b:f7:
0d:f9:d8:b7:95:d0:43:29:52:f3:68:0a:ab:51:73:cb:a9:ab:
24:c5:59:77:9f:69:28:fe:56:71:b3:d3:3d:23:c8:01:5a:e6:
01:01:40:d9:82:25:19:df:54:ae:4a:f0:f8:dd:66:c8:f2:1a:
1b:a0:2c:40:f9:83:33:73:d1:c0:2d:52:ac:2e:6f:cc:f4:f0:
ea:f3:c4:40:7e:38:b8:b0:11:7e:8d:02:45:a6:da:76:f4:0a:
91:ed:5c:da:16:cd:ac:af:74:0f:58:7f:89:18:3a:ae:62:31:
fe:0e:2a:75:aa:d9:65:a0:d6:33:8d:4b:8d:e6:4b:cd:ea:73:
a8:0e:1e:aa:3e:e0:79:d7:0c:32:b4:4d:af:01:7d:18:1d:5b:
5a:78:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:46:00 2026 by rpki-client