Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: evzdv61ka4MU2LocAb9xcZv1kZsaEqzdA7/WeniE+6M=
Subject key identifier: 33:23:0D:56:54:95:E8:3B:86:8C:7A:DB:BF:1D:86:59:0D:6A:27:53
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019DD05164DC64F2BEEFECAD35EEDAAEDDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 19:01:28 +0000
Manifest this update: Mon 27 Apr 2026 19:01:28 +0000
Manifest next update: Tue 28 Apr 2026 19:01:28 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: 8Ntfy35y81712v05AlzaV8ZYBWnFOhZ+/NyViUS6q4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:64:dc:64:f2:be:ef:ec:ad:35:ee:da:ae:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Apr 27 19:01:28 2026 GMT
Not After : Apr 28 19:01:28 2026 GMT
Subject: CN=33230d565495e83b868c7adbbf1d86590d6a2753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5a:aa:21:40:c9:28:18:f2:fa:69:c4:e9:28:
4b:c5:8f:8f:cb:8e:5f:30:24:60:f6:c5:a2:17:53:
cd:2f:4d:03:d8:bc:a0:e5:f3:81:08:8b:87:cf:da:
a9:d2:ef:59:d9:18:e6:68:8e:e0:64:98:ee:87:a6:
d7:3f:db:2a:00:ef:c6:0f:55:f2:ae:46:f4:04:be:
c5:c6:84:6d:cb:48:38:74:45:7f:5a:9c:76:8c:18:
3b:c1:3c:84:c2:ec:55:a4:be:47:a1:8e:ab:8f:d6:
a4:36:7f:72:4b:16:cd:00:d6:44:f1:af:46:46:69:
81:e2:ef:a9:4a:bc:69:02:0f:97:d9:14:78:6c:b8:
23:14:b8:0c:00:de:eb:b2:23:15:0b:31:ae:76:b7:
8a:c0:2e:96:72:0d:90:1a:2c:34:3f:94:9b:5d:e6:
3f:01:a9:1f:e7:d3:7d:0e:f2:fa:20:a1:d3:c8:1d:
11:2e:77:e8:7b:d1:2e:9b:a5:f7:5b:59:dd:d8:a3:
43:f7:96:44:48:ef:f9:78:c1:69:79:1e:db:d0:06:
2d:ce:1d:4f:4c:c3:21:46:ca:f8:ac:8e:79:08:53:
97:b2:d7:25:1e:30:b8:9b:de:e3:23:bc:51:27:88:
4a:63:af:3d:9d:e4:36:d2:9e:41:03:89:54:65:0d:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:0D:56:54:95:E8:3B:86:8C:7A:DB:BF:1D:86:59:0D:6A:27:53
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:36:ce:02:ef:65:b8:81:f1:5b:c2:8c:b0:ef:2e:d5:a9:f9:
b1:43:c8:80:af:1c:3e:f9:4f:92:5e:b3:c8:13:bc:93:f9:e7:
bb:ce:0d:e0:cd:39:8c:73:cb:0d:6a:c1:9f:f1:e2:98:2e:a3:
de:e7:e1:9a:24:b8:89:9d:7b:f5:fa:33:fd:44:4f:b2:28:08:
9b:d2:78:25:b0:9a:d6:ac:e8:9e:3d:86:3c:57:a3:bf:08:a4:
b4:46:b9:e3:a7:03:76:b4:50:41:09:22:30:2e:e8:b5:d7:5b:
14:9f:df:80:14:c0:09:30:c7:37:c2:89:4f:c3:1b:5f:84:66:
fa:99:18:9e:3e:4c:94:bb:77:9e:9e:db:6e:42:ac:d7:68:be:
5f:dd:6f:95:76:a4:17:45:63:71:14:5d:38:7d:5f:84:77:91:
07:38:b6:a3:86:e4:ea:8c:c1:04:ba:aa:63:5a:28:11:ec:f5:
f0:44:ab:c9:8f:cb:72:fa:8d:cb:7f:09:bc:b6:ec:6e:f3:eb:
30:fe:4a:66:00:bb:36:06:e8:76:38:60:ad:3a:21:97:ea:f6:
fc:83:67:cb:6c:bd:78:fa:77:d4:fb:e7:d2:c5:92:a6:f6:59:
d9:a7:5a:37:e6:bb:67:b8:39:52:54:43:58:a1:ce:99:96:73:
6d:52:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:24:48 2026 by rpki-client