Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: l1FpLyutb9em0zsI27Jbo8CY3lVk+EnFi10ToNs6nU8=
Subject key identifier: 9A:D6:1D:7D:38:A7:56:17:F2:2F:96:51:6D:68:DA:BD:D6:88:78:B5
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019DCAF39549CC1691DBBE6CF0BC22CF060E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 18ED
Signing time: Sun 26 Apr 2026 18:00:54 +0000
Manifest this update: Sun 26 Apr 2026 18:00:54 +0000
Manifest next update: Mon 27 Apr 2026 18:00:54 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (hash: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4=)
3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: H1PvCEMTVYVchx6eAewiPXYjXO5icmaup1KiBRHBfI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:f3:95:49:cc:16:91:db:be:6c:f0:bc:22:cf:06:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Apr 26 18:00:54 2026 GMT
Not After : Apr 27 18:00:54 2026 GMT
Subject: CN=9ad61d7d38a75617f22f96516d68dabdd68878b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:8e:5d:fc:83:e9:f4:3f:8f:55:f3:66:7b:
2d:3e:83:64:be:6b:94:5f:95:a2:ff:fa:2c:86:7b:
ad:54:4d:00:85:d3:7d:59:41:70:6c:77:b0:17:36:
3d:56:ec:9f:da:02:13:4e:f4:73:b1:8a:25:16:46:
40:96:eb:e8:c2:54:76:1f:22:f0:b6:d1:0f:82:c4:
28:bd:67:d8:36:0b:c6:a4:ab:aa:ac:5a:c9:c3:f1:
b0:ef:6e:1d:ef:ca:e1:c5:d8:38:91:01:43:d1:5b:
a2:c1:8b:09:cf:c7:85:ff:07:84:15:c0:6b:57:1a:
41:a4:f4:be:4d:bd:fa:1f:d1:18:8d:66:7c:e4:01:
95:f2:ea:8f:6c:de:82:5a:b1:aa:20:11:4a:a0:57:
f6:79:6d:a7:b4:12:75:38:36:2b:54:ee:09:62:fb:
e6:d3:aa:7f:89:d3:22:65:e1:93:44:3f:e1:30:8b:
3f:a9:ba:a1:cb:47:6d:5e:a6:5b:c0:5a:7c:5d:2c:
8c:4e:13:6d:5d:4f:e4:82:51:30:ad:76:bf:b8:77:
76:76:3e:69:33:8e:e4:5f:48:0a:d1:a3:0a:fa:6f:
ed:1f:45:5a:14:b2:15:98:b9:48:7e:9f:c7:ab:35:
36:ca:fc:59:68:30:7f:e4:19:f2:46:d7:d7:fc:10:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D6:1D:7D:38:A7:56:17:F2:2F:96:51:6D:68:DA:BD:D6:88:78:B5
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1f:d9:cf:8c:37:7d:63:31:60:26:d3:9f:47:95:5f:81:7b:
59:17:0d:e8:35:86:9d:e8:77:c6:30:9c:42:00:35:c0:6f:78:
8d:9a:17:83:da:90:ad:50:02:39:a6:0a:e5:67:f7:65:e7:eb:
fb:0b:b7:a3:f8:6e:63:39:8b:09:4f:63:ec:1c:b1:fa:df:01:
7d:c5:51:2a:0e:ba:6b:4f:50:51:5d:d9:a8:bc:6d:a8:6f:fc:
c7:e3:09:65:c2:c2:58:f2:50:a3:03:41:d0:9d:e8:12:c1:59:
94:dc:c7:88:f6:73:f1:6b:2a:10:75:71:16:22:02:4e:e3:77:
9b:8b:30:d2:90:c1:cf:87:18:18:56:63:93:d5:3e:7e:ff:1d:
9c:00:7e:7b:a0:9b:ac:62:74:62:d9:7e:c4:81:2a:e5:8c:e2:
a2:4c:02:91:9a:bb:c4:34:41:f6:50:8a:7c:c4:3a:cc:1e:99:
06:f8:94:3b:46:6c:98:16:e3:f1:7c:91:75:18:74:02:f1:fe:
a3:e7:0b:e0:43:55:a7:20:c7:8b:3a:41:4e:ed:83:82:f0:88:
46:63:c6:32:ae:31:b2:ea:e2:f2:61:e9:ec:13:8b:21:1d:a8:
b7:d5:26:b1:fb:d4:5e:77:d1:16:e0:eb:bb:2f:ef:6b:ff:97:
52:d9:d0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:16:59 2026 by rpki-client