Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: s5cpZ55vha5nALJkNqhPPXy4QvZb8nJhZkOZqrli5D8=
Subject key identifier: 0F:FC:ED:C7:A1:AE:03:57:C2:94:59:A4:90:E8:E3:A6:D2:03:A2:37
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 019DD01986690B97055FEB3D74C07B0690B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 112A
Signing time: Mon 27 Apr 2026 18:00:26 +0000
Manifest this update: Mon 27 Apr 2026 18:00:26 +0000
Manifest next update: Tue 28 Apr 2026 18:00:26 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: XujU6UfcNM8qOfkWlJ738aKzHHvvDCX5lg+RzUgzirQ=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:86:69:0b:97:05:5f:eb:3d:74:c0:7b:06:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Apr 27 18:00:26 2026 GMT
Not After : Apr 28 18:00:26 2026 GMT
Subject: CN=0ffcedc7a1ae0357c29459a490e8e3a6d203a237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:d5:f8:39:49:86:68:2a:72:2e:62:49:a4:
d5:2d:04:93:6f:1d:cd:28:aa:25:a4:43:9d:0d:3a:
6a:ec:4a:ec:58:09:2a:4f:32:17:8d:82:3c:62:8e:
fe:81:aa:0d:d4:6c:97:50:e0:5a:b7:76:22:77:f4:
23:1d:a4:37:cf:8b:8b:6a:db:b5:88:09:03:45:d7:
61:99:94:d6:99:14:17:0a:38:9e:bc:a1:fd:97:4a:
b4:aa:45:dd:bd:49:fd:fe:b1:79:da:11:36:64:a1:
0d:1f:bb:e6:62:5d:c4:77:ef:7a:2e:8e:51:95:86:
9e:48:be:75:d8:19:58:90:db:99:7b:ab:c3:9b:af:
36:50:80:77:24:1e:69:64:a8:23:5f:c7:db:e7:46:
35:f5:85:4d:4a:01:14:87:2c:73:8c:f9:4e:b3:94:
12:a1:2c:d5:26:4e:67:0d:42:b5:e7:b6:e8:36:b7:
18:9d:44:05:29:56:f5:5f:ac:4c:5a:e3:a1:42:15:
41:94:3b:1e:4f:e5:d1:a7:5d:4e:f2:97:1c:70:9a:
82:01:5e:b4:c2:f6:68:44:a9:ae:af:33:8c:77:f8:
13:9f:4b:e8:40:d2:77:65:6f:9e:81:9c:bc:7a:04:
3f:0b:da:fc:bc:70:9d:72:57:73:0c:c0:3f:c9:4f:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FC:ED:C7:A1:AE:03:57:C2:94:59:A4:90:E8:E3:A6:D2:03:A2:37
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d6:ed:04:24:aa:58:01:c0:fa:01:86:3f:a1:a7:e4:d3:22:
40:57:4e:e4:8b:a6:40:35:bf:ef:58:fe:b3:6e:d7:b0:2f:6f:
34:e2:66:c5:64:0f:7c:15:7c:bb:5b:60:2d:c2:92:96:5d:49:
03:46:d4:c7:0e:72:1f:7c:21:13:ce:f2:a1:8a:75:27:f5:03:
ab:7c:23:7b:1c:9d:9a:96:30:ad:23:9a:99:5e:dd:66:b8:45:
e3:7e:9f:f1:41:e0:d5:49:5b:81:47:f0:e1:12:92:b8:a4:85:
41:02:de:f7:bd:c6:55:1a:2d:e1:b8:d3:3c:83:03:c4:0d:a1:
8b:e0:78:5b:62:e6:21:fa:37:39:ca:fb:a7:17:e5:2d:a7:6c:
be:a6:06:16:11:88:5c:89:42:44:3e:98:8c:d9:41:39:c0:bb:
a9:46:ed:93:d7:56:d3:ce:02:91:7c:3c:9c:7f:b8:ae:94:d0:
27:98:20:75:7c:ae:e3:4f:d1:21:1b:64:d1:f9:9f:16:c3:6e:
4d:a9:1d:be:a7:80:13:95:b3:1e:2e:f1:52:1e:ac:02:b9:87:
c7:06:22:dc:36:4e:1c:0a:55:a4:e9:ed:e1:b6:01:80:ea:8a:
47:96:c7:be:ee:0e:f0:e4:09:70:30:37:8d:0c:84:e8:89:88:
52:54:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:38:19 2026 by rpki-client