Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: k5+w25F/yD75YxsStXjtfW9lYUFQ+QFZl9FscpuzOsk=
Subject key identifier: B6:FB:37:3A:A7:73:73:7B:E1:31:10:F4:85:8A:E4:70:79:9D:88:72
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 019DA29CA74F79DD83AF2866370781F970D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: 0158
Signing time: Sat 18 Apr 2026 22:01:08 +0000
Manifest this update: Sat 18 Apr 2026 22:01:08 +0000
Manifest next update: Sun 19 Apr 2026 22:01:08 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: C0h3kdchcQ5Zv3QheF06gjYw9T55DIK/jb42vVd5jng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:a7:4f:79:dd:83:af:28:66:37:07:81:f9:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Apr 18 22:01:08 2026 GMT
Not After : Apr 19 22:01:08 2026 GMT
Subject: CN=b6fb373aa773737be13110f4858ae470799d8872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:76:39:4d:7b:e5:d6:fc:91:50:a1:0c:f6:
ef:80:39:42:03:09:95:34:90:df:ea:2a:b1:8b:f4:
b2:c8:63:1f:bc:30:7e:b7:e6:1a:93:07:86:94:c4:
f5:4d:6a:ed:64:7f:87:d8:6a:ba:b3:7c:ad:1e:d8:
07:74:45:77:fa:b0:d7:d3:e2:1b:2a:e7:ff:10:48:
12:e0:7a:eb:91:89:6a:c0:72:e5:aa:8c:43:40:94:
6d:ca:8b:31:ae:6b:8b:4e:3e:89:68:01:1c:26:96:
b7:70:e9:c0:80:47:d9:fd:4d:e2:fa:1b:bd:41:97:
30:72:58:2d:e2:28:74:d3:e7:22:40:c5:e5:13:03:
3d:e0:92:51:63:7d:04:b1:b0:c4:62:20:73:01:0b:
8e:4d:3f:20:78:17:83:32:49:91:02:4b:cb:62:81:
c1:cf:90:ba:06:6e:8a:06:f7:90:b2:8c:70:c6:4b:
bf:13:cd:bf:a7:05:2e:bb:cf:90:9d:da:34:d2:5e:
57:e4:d0:6c:f2:3d:c6:03:2d:ed:e4:f4:2e:a4:42:
1c:da:15:d6:a0:0e:34:ff:91:3f:05:98:11:69:df:
2a:3f:aa:36:a8:06:eb:eb:72:4f:b6:82:c7:42:e2:
e1:2f:c7:c6:19:bd:4f:83:43:7e:b0:89:b4:0f:67:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:37:3A:A7:73:73:7B:E1:31:10:F4:85:8A:E4:70:79:9D:88:72
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7b:7d:49:1f:bd:35:c3:4f:cf:10:75:b1:8e:bd:f8:77:29:
92:ff:4b:b4:f3:17:30:f3:71:4b:a1:8c:b4:16:b0:b5:cc:79:
21:fe:b9:e2:d5:e7:9e:48:cc:76:3d:8e:f4:f0:cc:00:8e:00:
55:14:e0:28:69:ac:04:ba:5c:b8:ce:3e:f0:06:8c:84:e2:30:
89:36:21:9a:15:ae:6b:fd:2e:dd:78:04:4c:9b:58:d9:c8:23:
d8:0b:66:c2:ad:34:ac:a5:34:49:55:cc:96:c7:ac:3f:a1:f9:
49:7b:34:38:9f:d0:ef:4d:d5:f4:cf:ae:b0:32:af:ad:e3:22:
48:d2:32:cd:4a:ad:37:53:10:04:87:6f:46:02:aa:75:35:6b:
17:c3:d9:ab:66:79:88:a4:a4:73:52:0a:21:b9:d0:ae:3f:3a:
c9:c2:03:0d:a6:4d:b2:af:6f:dd:54:60:0e:0e:e1:03:5d:de:
76:ba:3d:e9:ed:59:6f:a3:b1:09:06:42:2c:dd:ac:e7:03:1e:
3f:81:b5:68:4f:f7:48:9d:a4:b1:fe:09:25:29:bf:8d:01:a6:
6a:f7:22:28:02:08:5a:6a:74:20:78:4e:e7:b3:4e:b3:d1:90:
77:10:0a:69:b9:7f:8a:8d:0c:7d:08:61:d6:36:e5:1b:50:95:
1f:7c:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:52:58 2026 by rpki-client