Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: k63x3hzjcNAJYsyaIbLClUzOdhOPXpguiHdqCdT9xkw=
Subject key identifier: 16:8D:AA:87:5F:7F:75:0D:C4:14:04:29:8E:06:7C:15:4C:D3:70:5F
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019DB1D82F9F71EE99334093AD63A6EA1DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0921
Signing time: Tue 21 Apr 2026 21:00:28 +0000
Manifest this update: Tue 21 Apr 2026 21:00:28 +0000
Manifest next update: Wed 22 Apr 2026 21:00:28 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: AReSqF2rXrA6etm5v0OsP3hkoqDZ+W45+ePonlgTgww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:d8:2f:9f:71:ee:99:33:40:93:ad:63:a6:ea:1d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Apr 21 21:00:28 2026 GMT
Not After : Apr 22 21:00:28 2026 GMT
Subject: CN=168daa875f7f750dc41404298e067c154cd3705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:5e:4d:08:d5:f3:46:2b:b6:81:ba:cb:d4:
c4:87:65:f0:6c:0d:aa:99:90:05:a9:7c:4a:a3:3b:
eb:09:d6:fa:55:5c:fd:c2:9a:2a:e4:ac:9b:60:e7:
c1:ea:4b:b4:31:fb:c2:89:95:9a:3b:1e:b7:51:85:
d8:28:8a:c4:8e:aa:eb:46:1b:db:91:5d:16:b0:a4:
91:a5:c8:b0:1a:e4:05:87:34:d4:00:9c:98:66:2f:
2e:3d:0e:18:58:88:15:88:7a:c0:73:a7:80:7b:e1:
1c:79:48:50:52:1d:9a:5f:b1:e5:87:bc:99:d3:6d:
43:f2:8c:6f:2a:a6:63:4c:cc:ec:d4:a2:22:39:67:
28:7c:9c:14:37:b6:2b:86:69:b4:3b:32:5d:ca:02:
3e:69:fa:bd:88:0b:32:a8:c5:5e:f0:bb:3c:3b:c6:
9b:a0:45:75:37:a6:95:85:9c:af:c1:8c:ec:a6:d6:
82:05:7a:fe:5c:80:0a:53:77:6e:97:c2:8b:bf:bb:
cb:76:95:33:40:89:7e:ac:3f:2c:1a:f4:50:46:c5:
c0:a0:e6:fc:d1:0f:cb:ae:fa:f9:f8:9e:8c:b3:69:
be:15:8e:e1:eb:20:14:f2:f2:aa:34:ab:13:4c:bc:
2a:7e:b0:91:fc:50:2d:ef:7e:dc:8c:d9:36:e2:e1:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:AA:87:5F:7F:75:0D:C4:14:04:29:8E:06:7C:15:4C:D3:70:5F
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0d:ca:be:dd:c7:f6:e6:cc:44:d3:64:7c:b0:a3:f6:ed:b5:
0b:bb:bb:3c:58:31:e7:2f:83:9e:d9:b3:86:c6:cf:45:12:56:
43:95:9b:69:19:ea:9a:b3:df:16:89:5c:76:dd:af:f7:f8:4b:
4a:4d:8f:5f:9c:65:2d:59:ef:03:01:f3:8f:19:80:1e:bf:8d:
bc:93:b8:3b:45:09:3d:10:78:fc:58:b4:94:b1:fb:ce:f0:5c:
4e:52:03:11:1f:7a:92:d2:15:16:26:91:ae:25:7b:c5:2e:25:
f9:4d:4d:4f:c0:d9:b5:1a:69:13:22:38:3c:9f:42:f8:14:d5:
4e:81:38:bc:76:b1:37:ee:72:25:ed:1c:ff:28:4a:56:e4:d8:
1e:c4:53:1f:8c:7b:41:e2:71:d1:49:50:d6:1c:37:20:16:ef:
86:1c:ef:da:a8:99:35:34:7d:d7:dc:a7:85:6a:b8:92:72:35:
d6:35:01:a8:3d:1b:a7:e4:16:7e:f0:07:21:14:0d:d0:82:bf:
68:93:f0:5f:3b:a6:87:97:92:71:82:46:08:ee:22:24:dc:1f:
17:ef:ba:c3:23:bc:47:40:2a:3f:d8:d7:c0:e5:ee:3d:3b:72:
6b:8f:86:35:57:70:48:8a:fa:f8:a1:60:74:3c:1d:7e:61:e6:
44:bf:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:38:39 2026 by rpki-client