Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: 8mBa3bnci1ZUAoLeBufqxOryHotIDrdYJT0nMdb/sLI=
Subject key identifier: C8:00:62:86:D6:8D:3D:2A:5F:FA:A0:09:F5:2C:6E:28:2C:48:1C:FE
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 019D98BD963A53944277A0FF79A9EDA76E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:54 +0000
Manifest this update: Fri 17 Apr 2026 00:00:54 +0000
Manifest next update: Sat 18 Apr 2026 00:00:54 +0000
Files and hashes: 1: AeS4mieXzUqA4uwiNDkMCtqXsxo.roa (hash: XlaYDtDtth/9oxGh0H1TjUe63WNIoo3CA9/O+obTGX0=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: PqE8Xd4bJN73leRNhJz8F1BIHvlWZM3IHVp81OBTrRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:96:3a:53:94:42:77:a0:ff:79:a9:ed:a7:6e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Apr 17 00:00:54 2026 GMT
Not After : Apr 18 00:00:54 2026 GMT
Subject: CN=c8006286d68d3d2a5ffaa009f52c6e282c481cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:24:23:f2:b4:4b:85:f5:ed:32:dd:99:5d:
17:9d:3a:bd:c6:25:e0:d0:71:c0:eb:59:1a:d5:f9:
93:b3:4e:5c:42:42:e0:8f:98:c8:1b:c2:4d:21:1c:
95:3b:11:ee:79:92:36:a1:bb:5a:d8:a1:38:15:1b:
b9:05:ad:6a:45:2f:36:1c:29:49:88:c9:30:3c:ef:
1f:54:6b:70:d3:53:c6:21:f3:59:d0:99:1a:b5:04:
ce:47:a2:34:2a:59:84:1e:c8:24:96:49:75:00:73:
aa:cd:2f:74:bb:0f:b5:54:cd:c2:f3:a5:c5:17:da:
aa:be:0e:cb:7c:21:cb:27:d2:dc:54:db:ae:66:5a:
27:83:8c:1f:0e:3f:18:85:6b:80:7c:f6:17:b1:14:
e1:37:ee:d6:dc:8d:bb:bb:60:0a:68:1d:27:56:95:
8b:30:bb:6d:76:70:9b:98:84:c7:9d:9d:39:c0:1a:
c9:3c:99:b2:28:62:2d:6d:08:68:5a:18:b1:e0:62:
09:e1:54:9d:58:b5:d9:e6:bb:3f:dc:de:ae:d9:da:
14:1c:35:d0:ec:64:66:80:28:45:b6:8c:03:be:61:
17:40:8f:14:68:91:a2:48:47:25:35:df:d1:73:d7:
05:f9:f0:48:73:09:05:06:47:3f:83:70:c7:5b:ee:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:00:62:86:D6:8D:3D:2A:5F:FA:A0:09:F5:2C:6E:28:2C:48:1C:FE
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:08:b4:6d:3c:ce:d8:95:14:3b:f0:6d:93:bc:19:a5:47:69:
5c:d9:68:5a:e0:76:7c:57:33:51:19:9a:a8:2b:f9:c6:65:aa:
b2:23:71:5c:df:ff:3f:bc:97:b2:1b:30:7e:5e:d9:3f:07:40:
17:39:ad:14:7a:84:53:a3:7e:98:bb:df:3d:d9:0e:e2:f9:6d:
30:a7:4a:9d:db:3b:dd:14:81:5e:31:bf:79:ca:4f:25:22:30:
b3:90:ba:30:23:48:c2:74:1d:dd:8d:8a:d5:31:3c:0c:3f:c5:
9a:d9:29:51:13:1e:f1:56:b7:d6:e0:4b:c1:80:4c:58:84:d6:
d9:e5:c2:78:82:ad:c7:06:33:d8:77:66:64:87:5b:14:5b:10:
9c:c6:ea:c6:ef:b1:a9:94:34:86:82:4f:07:82:86:b5:b7:fa:
cf:21:e2:21:30:37:6a:32:6f:67:9b:9b:73:bc:80:c2:ef:78:
f7:a7:ef:36:0e:66:25:19:be:23:f8:a8:f4:08:04:c7:8c:57:
04:ce:e9:ac:4b:3a:d6:07:70:69:d5:f2:a8:39:a9:c9:cb:25:
70:7f:35:87:c1:42:aa:96:3d:de:8b:f1:46:1e:81:d9:3e:43:
78:29:f6:d5:1a:32:4c:ec:1b:60:59:a2:30:f0:d4:f1:ee:30:
74:3c:54:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvZY6U5RCd6D/eantp24KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTA4NTAwNWQwZTQ0OWQzYmFmYTMxYzVjYjQyOWZmODlk
MmM0YjcwHhcNMjYwNDE3MDAwMDU0WhcNMjYwNDE4MDAwMDU0WjAzMTEwLwYDVQQD
EyhjODAwNjI4NmQ2OGQzZDJhNWZmYWEwMDlmNTJjNmUyODJjNDgxY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdUkI/K0S4X17TLdmV0XnTq9xiXg
0HHA61ka1fmTs05cQkLgj5jIG8JNIRyVOxHueZI2obta2KE4FRu5Ba1qRS82HClJ
iMkwPO8fVGtw01PGIfNZ0JkatQTOR6I0KlmEHsgklkl1AHOqzS90uw+1VM3C86XF
F9qqvg7LfCHLJ9LcVNuuZlong4wfDj8YhWuAfPYXsRThN+7W3I27u2AKaB0nVpWL
MLttdnCbmITHnZ05wBrJPJmyKGItbQhoWhix4GIJ4VSdWLXZ5rs/3N6u2doUHDXQ
7GRmgChFtowDvmEXQI8UaJGiSEclNd/Rc9cF+fBIcwkFBkc/g3DHW+5WWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgAYobWjT0qX/qgCfUsbigsSBz+MB8GA1UdIwQY
MBaAFMVQhQBdDkSdO6+jHFy0Kf+J0sS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMt
MjBhY2MzOGJjOGZmLzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMtMjBhY2MzOGJjOGZm
LzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgi0bTzO
2JUUO/Btk7wZpUdpXNloWuB2fFczURmaqCv5xmWqsiNxXN//P7yXshswfl7ZPwdA
FzmtFHqEU6N+mLvfPdkO4vltMKdKnds73RSBXjG/ecpPJSIws5C6MCNIwnQd3Y2K
1TE8DD/FmtkpURMe8Va31uBLwYBMWITW2eXCeIKtxwYz2HdmZIdbFFsQnMbqxu+x
qZQ0hoJPB4KGtbf6zyHiITA3ajJvZ5ubc7yAwu9496fvNg5mJRm+I/io9AgEx4xX
BM7prEs61gdwadXyqDmpycslcH81h8FCqpY93ovxRh6B2T5DeCn21RoyTOwbYFmi
MPDU8e4wdDxU6g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:20 2026 by rpki-client