Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: KUtFlw6ivKet4bLbEelC+PN72btdPmEWVSLGKjIn/TU=
Subject key identifier: E5:37:1C:0C:38:16:0C:8F:2E:E2:4C:AC:7B:AE:70:7C:42:60:29:1E
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019DCCE1F8186FEE380D4645495D75D735BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 18EE
Signing time: Mon 27 Apr 2026 03:00:54 +0000
Manifest this update: Mon 27 Apr 2026 03:00:54 +0000
Manifest next update: Tue 28 Apr 2026 03:00:54 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (hash: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4=)
3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: jCv+xLtn85GAQMDNRKhsyYA6Rqt5p811wShohXYzgio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:f8:18:6f:ee:38:0d:46:45:49:5d:75:d7:35:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Apr 27 03:00:54 2026 GMT
Not After : Apr 28 03:00:54 2026 GMT
Subject: CN=e5371c0c38160c8f2ee24cac7bae707c4260291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:4f:1b:87:c7:2b:36:46:60:57:d6:37:d7:
a0:73:72:76:49:78:dc:c6:e0:23:ff:e2:1c:42:20:
8b:6a:82:a0:0f:74:73:f2:29:65:a9:82:47:18:d0:
b4:0f:b4:0e:7d:62:31:f5:2c:67:54:d2:4c:25:47:
b8:90:c3:67:e3:20:13:71:2f:ab:cc:eb:f1:8b:94:
8f:19:45:bd:5e:61:df:6e:21:8d:d6:54:f9:e8:92:
a5:53:bf:1a:b1:5e:73:4d:b2:5a:0b:e5:38:98:57:
09:63:f7:de:da:1a:55:d8:cb:50:20:0d:ec:89:e1:
74:e6:f0:da:4b:d6:af:54:bb:d7:ca:9b:21:de:20:
31:2a:b2:ec:ce:49:e3:91:f5:ce:de:69:a7:3b:2b:
06:0d:d7:da:b5:71:f0:52:00:f3:03:54:2c:22:45:
6c:9d:b4:70:76:8d:53:da:5f:c1:ef:85:28:cb:a5:
88:99:63:89:d3:60:fe:4d:99:f1:93:b3:38:ba:c8:
f7:a9:26:70:47:40:c8:70:ac:e3:c8:85:f2:ae:b9:
73:89:c8:26:4d:9a:b2:e0:2d:b3:b2:32:31:78:f9:
35:ae:17:c1:62:bb:03:dd:c1:25:d6:02:cc:22:f0:
35:bc:42:3c:56:2c:39:fa:cc:29:d1:2e:39:1e:31:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:1C:0C:38:16:0C:8F:2E:E2:4C:AC:7B:AE:70:7C:42:60:29:1E
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0b:2d:ab:b6:27:5c:7e:ae:17:f3:e2:d8:51:e9:70:09:57:
a7:f1:90:e8:67:7a:7b:11:12:e4:71:2f:54:84:68:83:3e:e5:
30:7c:94:9c:26:48:2c:c0:7a:a5:cf:2f:d6:17:ab:c6:81:ee:
07:55:ed:0c:71:55:ef:4c:5b:0a:5b:57:9f:84:67:15:cc:21:
c3:09:e7:a8:d1:71:3d:d3:a0:7e:14:be:c9:ff:12:18:da:e2:
d6:88:1b:4a:78:a1:d5:81:7e:1b:e3:f3:2c:10:79:ab:ca:a2:
94:91:43:7d:70:28:ad:59:7a:99:b3:33:2a:12:30:5d:34:ec:
8a:34:44:36:22:df:73:c4:5c:af:88:88:a5:49:47:56:3d:1f:
15:30:6e:9a:8d:fe:cc:8c:05:9d:01:51:ce:c8:13:19:50:22:
13:58:b1:42:b6:94:1d:cf:37:4c:ee:8e:be:ca:8d:63:a4:8e:
28:d6:d9:df:72:ea:2f:41:2d:65:a5:2c:4f:a9:6f:64:fb:93:
c3:c3:a2:d4:86:06:67:8d:b4:57:d3:e3:81:69:ca:8d:a6:7a:
ba:cc:2d:55:0a:a6:87:0a:3a:b6:2a:93:ce:dc:2c:18:65:32:
aa:eb:70:79:f8:a5:a2:a3:a5:c8:18:81:df:d4:b2:2c:44:7e:
97:c6:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:23:59 2026 by rpki-client