Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier: XmzMD+TIoNRR74cMFhgkKQdxGPZtJHzUvUfYhvEg8/Y=
Subject key identifier: 98:E9:65:67:4C:88:39:57:9D:D4:52:CB:CA:8A:A6:89:74:BF:24:AD
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 019DD01A438480391CFD152D726E9433BB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number: 17F3
Signing time: Mon 27 Apr 2026 18:01:15 +0000
Manifest this update: Mon 27 Apr 2026 18:01:15 +0000
Manifest next update: Tue 28 Apr 2026 18:01:15 +0000
Files and hashes: 1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: ZvexEthAjDFMNOD1jf2IznTzJd7n1qaCXHiTKIKzO4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:43:84:80:39:1c:fd:15:2d:72:6e:94:33:bb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Apr 27 18:01:15 2026 GMT
Not After : Apr 28 18:01:15 2026 GMT
Subject: CN=98e965674c8839579dd452cbca8aa68974bf24ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:8d:90:30:55:62:2c:fc:86:0f:a3:18:c7:
d2:2d:c4:de:aa:b3:58:74:56:8b:23:f9:e3:ab:72:
ce:4b:1c:06:3c:9f:ae:ae:bc:30:3f:75:9c:0c:89:
89:88:23:48:0c:e0:6a:ad:23:c2:9e:17:55:e4:aa:
a2:5c:a2:c2:c4:73:5c:f6:3d:11:d7:b4:32:18:28:
ed:d0:9f:bb:eb:57:d1:bb:7d:29:e8:ab:38:1a:57:
63:d6:7d:f1:44:37:0e:c6:05:91:00:e1:5c:3a:1b:
6d:c4:7e:bd:db:f6:72:45:d2:09:a0:13:60:70:e4:
67:3a:cc:1a:24:54:16:4b:87:ce:f6:97:72:80:be:
37:b0:ee:f3:3a:47:92:d3:bd:a5:12:0c:9b:08:15:
c3:d4:aa:8f:13:83:73:ff:0b:f1:8f:2b:3d:bc:60:
ee:58:f4:3c:00:b7:78:32:8d:b2:13:d3:99:25:cf:
9a:3b:7b:50:14:29:28:92:e9:ce:d1:93:ab:b6:47:
55:26:3f:6f:82:6b:40:ba:4a:84:5d:9c:75:17:af:
8a:18:19:c0:a1:3d:f3:99:59:c0:79:8f:80:88:67:
e1:71:a6:fc:cf:71:8e:d0:4d:e6:71:8a:bd:8f:83:
75:5b:d2:b1:61:64:fe:59:2d:53:6e:23:4a:34:2c:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E9:65:67:4C:88:39:57:9D:D4:52:CB:CA:8A:A6:89:74:BF:24:AD
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:50:7b:90:be:d6:72:e0:44:02:c7:50:70:6c:da:62:9a:0a:
2c:3e:9c:72:1e:db:c9:c9:67:2c:80:93:8b:44:e0:73:bd:53:
db:af:e3:24:20:67:23:46:8d:2b:c3:2f:1b:a7:d4:a8:11:8c:
48:c9:16:6e:95:f1:1b:7c:61:72:28:14:07:68:54:49:9a:b1:
ba:0a:fe:e2:41:07:df:85:e6:10:97:e8:b2:dc:81:21:aa:4f:
b1:ac:ae:92:5a:9a:83:55:7e:88:e5:01:3c:bb:66:3c:d2:62:
45:b6:06:13:fc:f1:a9:1e:c5:9e:6d:bd:db:bd:64:7e:12:b3:
9d:05:22:f0:c4:9c:27:d5:9f:60:49:07:48:e5:18:69:82:cb:
de:1f:5e:f5:9b:d1:0b:50:13:94:c5:95:fd:bc:54:df:b3:8e:
30:a7:fd:f8:de:58:ea:7c:50:0e:40:15:ac:b6:f5:4f:15:d4:
16:43:5a:98:78:98:e3:7c:ba:44:00:27:74:17:24:24:63:90:
80:8d:05:b7:e0:d6:b0:d3:07:5c:84:37:d9:25:fd:1f:67:08:
08:1b:53:59:c5:69:dd:73:69:7c:b5:5b:7e:72:a7:11:0e:72:
ee:07:36:48:7d:ec:4c:16:99:81:b0:ab:18:5f:ed:a4:65:80:
41:d4:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:22:23 2026 by rpki-client