Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: 3rOXh0kcPW6sSxTboSNSTg17x4aOj2DA9wf15R1iZms=
Subject key identifier: C1:52:85:26:0A:80:1A:5C:25:F9:F5:C8:27:16:BE:43:08:48:FF:D0
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019DCDF57D42563568167E21DE3AB5BDAD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 15E4
Signing time: Mon 27 Apr 2026 08:01:50 +0000
Manifest this update: Mon 27 Apr 2026 08:01:50 +0000
Manifest next update: Tue 28 Apr 2026 08:01:50 +0000
Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: AOFw6IQcix4Pc+fVCTnegJAztSVXidq3PfWf/riBgZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:7d:42:56:35:68:16:7e:21:de:3a:b5:bd:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Apr 27 08:01:50 2026 GMT
Not After : Apr 28 08:01:50 2026 GMT
Subject: CN=c15285260a801a5c25f9f5c82716be430848ffd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:e7:d7:e1:91:86:35:88:1a:f8:33:7f:44:
ea:65:2c:aa:37:e9:54:4f:a6:e5:0f:1f:69:ce:8c:
16:25:b8:86:21:6f:4e:fa:f5:81:61:f4:96:7d:cc:
0b:1f:e5:b9:19:7c:65:b6:24:ff:b4:e9:37:a8:3a:
4e:e9:b4:8d:33:e3:34:1b:6c:4f:d4:ac:12:ee:5d:
22:cf:41:cc:df:13:e6:23:e6:63:9a:09:76:83:55:
8f:1e:fe:23:22:05:29:9d:7c:19:12:b3:e3:c4:3e:
8d:02:88:66:eb:69:5e:6b:bd:bb:18:19:b4:ea:91:
9a:ee:5d:2b:54:e1:fb:82:54:f4:d3:4d:c3:d6:46:
f5:f6:07:a5:72:33:15:f1:0e:6e:f5:d1:39:bc:93:
8b:b5:c2:54:36:5a:23:44:e9:61:1d:68:95:4d:b3:
72:31:3d:bd:dc:a8:99:fc:06:04:59:7a:03:56:63:
19:b3:5a:ce:b9:d0:3a:0a:e2:fc:0d:29:39:e1:02:
ae:5c:c7:e3:3e:50:39:82:44:43:68:64:3e:b0:b1:
2d:71:1f:ff:54:00:28:51:63:61:7e:18:d2:5d:77:
ae:95:bf:0b:eb:1c:39:ee:92:d3:b2:8f:44:1a:f0:
7c:6c:e7:35:29:10:ab:3b:33:50:d4:a3:23:c0:28:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:85:26:0A:80:1A:5C:25:F9:F5:C8:27:16:BE:43:08:48:FF:D0
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:1b:9d:9a:de:66:5d:78:ed:f5:e0:3d:93:7d:5b:9d:08:
b4:96:45:49:8a:6a:66:9d:f7:1b:66:a5:d4:cf:40:4c:2c:ce:
20:ce:a7:33:ed:1c:4c:49:fc:2e:29:de:7f:28:83:da:d6:b2:
85:a2:c1:9b:83:d9:27:7f:34:42:ea:30:04:09:b8:eb:6f:db:
c5:eb:10:c0:44:c8:5b:c3:45:15:fc:7e:cf:f7:4d:05:ed:d6:
72:e8:e7:ba:5f:2b:b4:71:9d:e9:08:30:ff:50:12:3b:45:c2:
99:c8:75:98:29:8e:da:70:ac:85:d0:52:ce:34:e7:71:69:29:
bb:8e:51:3f:95:93:5e:7e:5c:84:bb:f5:29:43:e3:99:de:b9:
2f:0b:46:4f:14:92:0b:99:0c:8a:68:ea:45:07:90:18:75:5e:
fa:ed:ef:47:e2:78:3a:a5:8d:17:fa:9f:79:68:4d:39:eb:e8:
2a:70:00:a1:f1:b3:4a:79:76:1d:00:ea:e8:e3:c2:8f:e0:ae:
db:6f:ce:9a:61:84:19:60:71:a2:cc:b4:9a:9c:00:a0:b8:0a:
0f:ed:52:01:14:88:ea:64:61:ba:19:9b:a9:c8:c2:d2:b5:8b:
55:96:7a:c3:8b:ab:e3:20:ed:6d:ad:b6:b5:9e:f5:6d:8a:60:
7f:e0:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:34 2026 by rpki-client