Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: u/7r7PO1tX2ugn0hQMOHVhkXrmisQV1m4T9IQizKqUU=
Subject key identifier: 91:DC:D6:A1:1F:25:5E:92:F5:99:98:45:FE:2B:3E:C8:87:BB:3F:B8
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019DCE2B312A044398024C71237741B88F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 09:00:30 +0000
Manifest this update: Mon 27 Apr 2026 09:00:30 +0000
Manifest next update: Tue 28 Apr 2026 09:00:30 +0000
Files and hashes: 1: lXZ70sH06yN7K7WcAZYGhagQGQU.roa (hash: eJ37tNCDP1cEuP29zNg/vJT6DSno9tiJhEXL9Ek6IDY=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: OtBneR37H916RHZo7PxoIm3nSV655tX2Ai6BW+S2uWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:31:2a:04:43:98:02:4c:71:23:77:41:b8:8f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Apr 27 09:00:30 2026 GMT
Not After : Apr 28 09:00:30 2026 GMT
Subject: CN=91dcd6a11f255e92f5999845fe2b3ec887bb3fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:c2:dd:81:84:ad:81:51:a0:d2:1c:64:3c:
1c:0e:38:dd:27:91:c6:5a:12:2e:a6:92:5d:db:42:
e6:bc:50:9e:7d:3a:6a:2d:7e:0a:3e:32:70:60:ce:
49:5f:9b:f6:7e:ee:f3:02:d7:79:1b:7f:9c:71:0f:
c6:18:10:fa:2f:73:fc:07:6a:9d:b4:a2:8d:45:32:
b8:50:07:50:12:b0:4b:56:ee:56:d7:fc:e1:6d:1a:
27:5a:0a:93:fc:f8:32:87:d8:08:bb:f1:3f:df:7c:
7d:cb:d0:b6:01:c8:24:e0:db:b4:f2:73:10:d9:0e:
3c:9f:bf:1a:c1:55:77:98:ff:fd:68:ba:95:96:06:
d3:a2:3b:4c:83:bb:34:a1:5b:2f:c6:9e:5a:5c:c7:
93:51:84:05:cc:20:0c:4d:0c:70:7c:8a:f5:ca:16:
19:48:01:b4:24:8a:b5:76:05:b2:cb:43:55:e4:57:
96:b9:89:db:d2:09:71:8b:86:d6:21:fd:68:cb:46:
8d:9d:68:5c:81:9b:80:fe:46:86:eb:c7:16:ba:69:
36:07:d1:b4:6d:78:c4:65:f9:70:9b:f3:d3:fc:58:
c6:c7:b4:96:74:d1:1f:22:60:ff:28:d2:b3:e1:e1:
ae:f6:3c:f9:e7:e8:b7:95:b8:96:56:24:a0:85:04:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:D6:A1:1F:25:5E:92:F5:99:98:45:FE:2B:3E:C8:87:BB:3F:B8
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0a:49:96:29:f0:e3:b0:b9:1c:ab:93:a2:5c:82:96:c9:8a:
d4:3f:1b:61:76:fd:4c:ad:35:55:ee:17:74:45:4d:33:43:76:
69:d5:f4:71:59:1f:49:d4:83:c3:a3:33:4f:a1:bb:eb:69:12:
4c:ff:fc:94:85:e0:f3:27:6c:7a:3a:6f:10:1d:3b:c7:ac:d7:
5c:e9:75:71:df:8b:97:42:08:98:57:af:2e:7d:43:80:e8:b6:
f9:20:90:ff:cb:b4:0d:fd:da:7c:07:56:dc:0b:9e:49:c5:88:
df:40:85:2a:a0:2c:a0:8c:61:76:67:07:45:7a:d9:dc:0e:a5:
51:ec:bc:c6:7b:21:f5:a3:67:22:21:d8:6c:73:b2:da:b9:5a:
d7:5f:6b:db:94:cd:ee:0f:8b:71:fa:0b:74:80:a9:d6:aa:cc:
7c:c3:3a:58:84:e8:df:44:ea:31:8d:73:84:fa:da:77:80:0d:
e0:a4:2d:0c:34:19:81:62:d9:71:6f:9f:ee:fe:0d:90:71:e5:
ee:db:d3:32:f7:33:9e:5c:1e:b8:46:3a:a7:e4:ee:12:79:e8:
78:d4:9b:89:e5:50:b8:ac:ba:64:68:1f:2c:e5:72:1b:1e:60:
b3:92:38:fe:d5:80:bd:5b:dc:f4:1c:3e:4a:be:fd:cc:e3:21:
e9:b8:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:12:46 2026 by rpki-client