Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: U4faxG9Mx6wYEbsvHeiDQEVhmGsu5fbwGCrTtXQszgY=
Subject key identifier: 40:95:CD:67:5A:50:10:52:D5:9E:37:09:60:56:0B:CD:84:7C:1B:A1
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019DDA66B2B9B42FDFAE3396DEF0DB8537A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 18E2
Signing time: Wed 29 Apr 2026 18:00:56 +0000
Manifest this update: Wed 29 Apr 2026 18:00:56 +0000
Manifest next update: Thu 30 Apr 2026 18:00:56 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: 6e5KbNb8Mwjg3xOKAmKAFr7RS1aQCDQghGFjicgov/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 16:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:66:b2:b9:b4:2f:df:ae:33:96:de:f0:db:85:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Apr 29 18:00:56 2026 GMT
Not After : Apr 30 18:00:56 2026 GMT
Subject: CN=4095cd675a501052d59e370960560bcd847c1ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:ce:d5:23:80:bb:e2:cf:7b:33:72:e5:c6:
2c:91:22:ae:20:0e:87:78:37:7c:1e:bc:18:0f:af:
a0:71:ed:d9:55:e8:50:31:dc:08:57:97:f2:8d:09:
8e:42:98:26:10:f7:4d:db:8f:0a:21:f2:3b:6b:55:
80:d5:53:dd:b3:76:6b:c8:9d:39:81:2f:44:cf:b0:
c9:0b:32:89:8a:bd:ec:35:23:3a:68:63:29:88:46:
1b:73:bb:a8:6d:58:df:47:25:30:a3:15:6c:db:48:
e2:dd:56:8c:0b:ce:a9:23:66:af:36:39:d9:9e:df:
ba:ff:29:86:b6:5f:d2:36:8c:79:26:79:f5:24:07:
ba:ac:16:50:21:d3:d5:57:2b:fd:0f:de:3f:6c:27:
61:92:6b:bf:1e:e7:82:48:7d:6f:a1:54:50:1f:cf:
c3:61:24:57:12:b7:dd:80:a9:0e:53:96:86:05:ff:
3a:d4:cb:22:91:74:ec:ef:6e:90:97:55:1e:08:88:
12:34:7d:f2:d8:ca:de:32:c4:43:ee:3b:2c:93:9a:
98:55:9b:b3:ff:55:9b:79:71:75:40:6f:c0:bc:fd:
bf:de:f6:10:a2:9d:12:57:63:6e:17:4c:af:c9:c2:
b7:27:40:1c:6b:05:94:a3:36:02:b1:f7:78:fc:f4:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:CD:67:5A:50:10:52:D5:9E:37:09:60:56:0B:CD:84:7C:1B:A1
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:76:29:3a:d4:52:95:b5:88:86:ea:c0:32:46:1b:4b:ba:e4:
6b:28:f1:2b:73:f1:cb:31:14:b8:11:ba:e7:22:c8:b6:6c:53:
dc:92:e1:07:f6:62:d5:a1:78:1b:e1:af:d9:70:cc:81:a2:77:
94:f8:24:98:57:44:a4:cf:4c:34:67:12:e8:90:98:91:9c:0f:
73:35:df:0c:3b:c3:3a:a1:b1:72:07:32:be:69:2e:87:bc:7b:
d4:1c:03:fd:f1:46:3c:a7:99:17:da:47:27:a6:7e:af:08:27:
45:0b:b0:3e:96:2d:a0:dc:c0:58:f0:96:e8:7d:e3:da:ed:94:
24:18:3d:3b:2e:68:ae:71:62:6c:31:27:8c:e3:0d:62:3b:bc:
2e:82:fe:7e:29:dc:14:96:20:3f:ba:d7:50:87:e8:b0:30:3a:
56:e6:24:90:fe:c2:67:56:03:bf:24:f2:e9:2f:f9:9b:e5:69:
43:49:6a:50:d4:f3:f7:34:02:a9:11:ec:5f:a9:81:e3:2e:f1:
6e:dd:70:d6:4e:76:af:0f:f5:2c:7b:33:7e:a1:de:c3:44:f2:
5c:ca:19:72:01:40:12:35:41:5f:e2:49:58:ea:04:b0:02:df:
56:5c:dc:9f:53:23:15:c0:66:a5:88:8f:cf:c3:21:42:35:8e:
36:55:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:22:18 2026 by rpki-client