Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier: VC/lGwXZXeADIfKClaz3cyIhfuVWCWTgb6hQccroXjY=
Subject key identifier: 07:EA:88:96:8D:EB:30:7D:BD:30:00:B8:E3:E0:6A:42:5A:A6:84:96
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 019DCFE373CCBEC49F77B2E39AF0AE05AA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 17:01:23 +0000
Manifest this update: Mon 27 Apr 2026 17:01:23 +0000
Manifest next update: Tue 28 Apr 2026 17:01:23 +0000
Files and hashes: 1: 3cbC9vEeA_OfonVqz4nPVMIodpI.roa (hash: IGj7kwjiWovmIKkao+Fqphubf76yFz/hI4+0oTX7zU8=)
2: HRkMr8-Sqbu9H440GtqWqBMvrRY.roa (hash: u8W2AOx3ZvteH41TI9EbqMt/z7mq+kc+OzabEJ0zUCM=)
3: wemV0d9_X9NASzk5HBev3Xd67ss.roa (hash: xfH5MjrkqijIT96yucgZV5bkcjqDyV5OtrwCabRA68Q=)
4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: hPMizrFm6HEymAaQILElIIRsFRcAqUbZxmK3Ks83nUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:73:cc:be:c4:9f:77:b2:e3:9a:f0:ae:05:aa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Apr 27 17:01:23 2026 GMT
Not After : Apr 28 17:01:23 2026 GMT
Subject: CN=07ea88968deb307dbd3000b8e3e06a425aa68496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:2a:22:1c:80:48:e3:c1:4f:92:45:fd:85:
d7:36:d4:1c:f4:b8:89:67:69:c2:3a:e1:ad:0d:4b:
47:b1:48:3a:a2:c1:e3:f5:4a:8f:c6:65:74:19:e8:
bc:af:57:8f:bc:fc:8f:63:7e:e1:49:10:0e:63:2a:
62:72:82:4e:2a:a1:93:62:3c:28:d1:38:89:13:88:
a0:ae:26:52:f3:b0:c7:61:ba:28:b7:b6:68:01:6c:
15:50:09:ca:45:23:5d:b5:d0:15:04:87:24:72:41:
0b:a3:c4:e7:00:d3:bd:12:92:56:b7:f0:9c:1b:31:
a8:e4:45:85:df:fc:b9:d5:5b:31:1d:21:dd:1f:78:
5e:d7:bd:a8:dc:90:5a:07:a5:00:dd:45:7c:7f:d6:
4c:6e:81:86:1a:8a:f8:4e:c0:88:ee:14:3e:ee:ff:
f0:7d:61:a3:5c:d4:af:eb:c4:49:d5:ca:90:33:63:
f5:ab:18:d6:6e:fe:6f:5a:81:9f:c1:5e:2e:05:39:
41:d6:1f:b5:4f:8e:b6:c0:a5:67:eb:eb:ae:b9:64:
a0:1b:ba:c0:d2:fc:16:28:05:cd:1e:dc:e4:8a:2f:
17:68:29:72:23:db:7b:7b:c8:24:70:44:e1:96:76:
5f:d5:2e:c1:ed:ec:9e:14:d4:a0:38:bc:b3:c1:ff:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EA:88:96:8D:EB:30:7D:BD:30:00:B8:E3:E0:6A:42:5A:A6:84:96
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:93:7a:ef:b8:f6:e1:c4:a7:d9:c7:e7:f1:2c:3b:53:bf:40:
e8:25:9d:b1:7d:ff:69:db:37:55:a3:f1:dd:48:78:bf:7f:aa:
95:68:21:3a:31:57:7e:17:13:6e:45:b0:f3:fc:36:41:0c:91:
50:63:7e:de:8a:e5:b9:ed:0a:15:f7:e3:ec:16:d8:6d:e4:b5:
5f:14:fe:e9:69:c3:a8:30:c9:bd:4a:80:a0:d9:10:5d:ba:f9:
eb:b1:8d:c5:96:98:69:52:19:14:73:d1:47:a8:d5:e3:06:19:
46:7e:3c:c4:44:c6:57:0b:7e:c0:b9:6f:a3:cd:c8:1d:67:57:
14:e7:30:60:0b:dc:dd:e9:00:35:13:79:53:76:f4:e9:5c:24:
e0:14:c3:4c:27:c2:e9:06:2a:e5:28:43:2d:7f:b4:5a:53:e4:
4e:ef:e7:46:93:ab:9e:b0:5e:ee:b7:e7:57:31:61:b6:6f:43:
a7:08:9a:e9:d8:77:e8:58:fc:48:e5:22:c0:66:29:59:7e:ff:
29:5f:0b:f2:3f:76:fd:14:1a:93:a4:24:96:82:4a:c4:5c:b6:
cb:01:e8:e8:b2:e8:5e:8c:1d:82:7d:37:88:0d:d7:22:51:16:
b2:4f:ba:42:07:85:2f:9a:23:5b:d1:e0:57:cf:17:1b:c2:0f:
67:14:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:25:06 2026 by rpki-client