Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: LRXWB7/7+oXnUmTD32CKaHZqvnFamaznyfbgrUvi5l4=
Subject key identifier: 2D:46:08:C8:2A:88:3D:20:85:C6:78:EA:0D:77:DD:D5:71:03:1F:DF
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019DD0199550FBC4839802D80B76A3CB87B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 18:00:30 +0000
Manifest this update: Mon 27 Apr 2026 18:00:30 +0000
Manifest next update: Tue 28 Apr 2026 18:00:30 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: bwYR0UscAWyaEiwNtX1N+e142wl8TQFEdMNiP9Zru8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:95:50:fb:c4:83:98:02:d8:0b:76:a3:cb:87:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Apr 27 18:00:30 2026 GMT
Not After : Apr 28 18:00:30 2026 GMT
Subject: CN=2d4608c82a883d2085c678ea0d77ddd571031fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0b:70:39:a4:ff:49:6f:a5:02:4d:cf:78:a7:
1a:90:e4:4f:eb:0a:8d:66:ac:a5:31:d9:24:f2:89:
c6:70:a5:e9:20:60:d1:99:df:61:2c:ed:18:4c:42:
11:e5:1a:68:5a:a2:cd:13:0d:9b:82:ae:9e:d8:d7:
97:e4:a9:47:e2:d5:57:28:ec:79:ca:58:3e:bb:4f:
f9:06:cc:d4:d9:ab:47:ef:4b:bc:9b:37:c3:1c:93:
53:9e:31:1b:46:de:af:aa:82:70:2f:4f:35:b4:ab:
87:2b:15:74:d3:71:c4:26:03:04:e1:bf:98:48:02:
d4:1d:98:cb:3e:e7:dd:ce:30:26:4d:3b:93:c5:70:
a5:cb:1e:53:15:e2:d1:8f:05:42:95:d6:dc:5a:b0:
08:00:f0:ed:5f:e7:28:bb:e7:b9:91:e9:a7:c3:3c:
0a:26:e2:ae:6c:a4:64:4a:71:c4:c9:b1:5e:17:2f:
5c:bc:6e:ae:90:5b:f8:42:42:32:13:93:2d:86:3e:
f4:fa:48:f6:f6:73:0f:06:2d:ad:ef:b9:ce:97:d7:
12:82:fe:d7:45:5c:b0:95:4f:03:65:d6:19:a6:85:
28:af:99:24:12:49:d7:29:12:6a:84:6e:23:d0:dc:
18:d1:cf:95:a9:38:80:51:43:c4:2e:55:bb:8f:88:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:08:C8:2A:88:3D:20:85:C6:78:EA:0D:77:DD:D5:71:03:1F:DF
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:67:e3:7f:9f:77:8e:5b:dd:dd:f5:f8:b7:aa:39:10:cd:06:
3c:8a:46:d3:b3:a6:ef:77:cb:09:27:fe:80:58:cf:14:80:6a:
db:d1:a0:f3:5f:e7:1e:44:3a:3e:d0:50:57:4b:3b:e4:36:42:
ee:21:37:08:0a:8e:9b:f0:32:54:61:6e:d3:bf:4e:58:32:c9:
2a:80:5a:99:cc:f7:7d:c1:65:32:b2:15:76:43:5c:57:cd:12:
bf:f7:67:4a:4e:5a:26:1b:dc:5c:dc:15:2a:e7:9c:72:9b:20:
3e:4b:ef:f4:36:73:a1:37:f7:3a:77:76:55:2c:5e:e3:33:36:
31:02:ce:ee:08:c5:9c:87:dc:b9:ce:a0:a2:20:15:b1:88:fd:
5e:67:0d:a4:ab:b1:ab:52:37:ff:38:c2:b4:6a:d4:5c:4b:4b:
a8:8d:65:d2:92:bd:df:b2:d9:7b:b4:61:c6:c4:c0:ae:6e:dd:
a4:a0:b3:8f:b6:59:ef:a3:7f:82:b6:9e:b5:10:b3:b5:23:a3:
16:d8:ab:8e:d5:d4:96:7b:68:ef:bf:fd:22:6a:01:0f:ae:10:
15:b9:68:8e:9f:34:d5:b3:9d:2b:86:18:b1:0a:c4:53:ce:bd:
0a:7f:22:a3:78:2a:75:a8:f2:8f:72:d7:33:f9:53:ce:4f:66:
20:3e:4a:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QGZVQ+8SDmALYC3ajy4e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi
OWNiOTMwHhcNMjYwNDI3MTgwMDMwWhcNMjYwNDI4MTgwMDMwWjAzMTEwLwYDVQQD
EygyZDQ2MDhjODJhODgzZDIwODVjNjc4ZWEwZDc3ZGRkNTcxMDMxZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/AtwOaT/SW+lAk3PeKcakORP6wqN
ZqylMdkk8onGcKXpIGDRmd9hLO0YTEIR5RpoWqLNEw2bgq6e2NeX5KlH4tVXKOx5
ylg+u0/5BszU2atH70u8mzfDHJNTnjEbRt6vqoJwL081tKuHKxV003HEJgME4b+Y
SALUHZjLPufdzjAmTTuTxXClyx5TFeLRjwVCldbcWrAIAPDtX+cou+e5kemnwzwK
JuKubKRkSnHEybFeFy9cvG6ukFv4QkIyE5Mthj70+kj29nMPBi2t77nOl9cSgv7X
RVywlU8DZdYZpoUor5kkEknXKRJqhG4j0NwY0c+VqTiAUUPELlW7j4gngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1GCMgqiD0ghcZ46g133dVxAx/fMB8GA1UdIwQY
MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt
MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2
LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGfjf593
jlvd3fX4t6o5EM0GPIpG07Om73fLCSf+gFjPFIBq29Gg81/nHkQ6PtBQV0s75DZC
7iE3CAqOm/AyVGFu079OWDLJKoBamcz3fcFlMrIVdkNcV80Sv/dnSk5aJhvcXNwV
KueccpsgPkvv9DZzoTf3Ond2VSxe4zM2MQLO7gjFnIfcuc6goiAVsYj9XmcNpKux
q1I3/zjCtGrUXEtLqI1l0pK937LZe7RhxsTArm7dpKCzj7ZZ76N/graetRCztSOj
FtirjtXUlnto77/9ImoBD64QFblojp801bOdK4YYsQrEU869Cn8io3gqdajyj3LX
M/lTzk9mID5KvA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 01:45:01 2026 by rpki-client