Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: b9KiykE84NeSdFlNlnJTSsxE68G9r7V/v5LUnyYebG8=
Subject key identifier: 84:D5:91:5D:CE:95:48:55:E2:27:92:A0:1B:FF:A6:5D:B6:AA:74:AE
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019D99CFE9C353E818164B2FDA0A09E5981F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 17CE
Signing time: Fri 17 Apr 2026 05:00:32 +0000
Manifest this update: Fri 17 Apr 2026 05:00:32 +0000
Manifest next update: Sat 18 Apr 2026 05:00:32 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: ke7Ob/C6o1cZw5PcSHLn6OCi9vg1vrgZv66XIfNEA94=)
2: cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa (hash: MkPveRr894uZyzuwskwU/N/yd8dG5AWBq5BdDGSD2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e9:c3:53:e8:18:16:4b:2f:da:0a:09:e5:98:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Apr 17 05:00:32 2026 GMT
Not After : Apr 18 05:00:32 2026 GMT
Subject: CN=84d5915dce954855e22792a01bffa65db6aa74ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:f4:13:8d:45:9d:58:17:a5:22:68:2a:92:
2f:9b:29:f5:7a:cb:8f:97:25:15:87:08:98:8f:7d:
07:dc:55:1c:eb:f0:66:3d:80:89:4f:48:20:5e:ff:
72:c7:b1:c1:79:e7:cb:a3:0e:da:5e:4a:61:50:d8:
73:b7:0c:d8:20:ff:6a:87:0a:19:52:2e:23:36:99:
90:0b:40:75:49:6c:c5:a7:e8:cd:03:40:77:68:59:
c3:a9:25:29:02:e8:43:25:40:1f:44:fa:86:13:37:
c1:22:fa:2f:9c:f2:b8:8f:b9:4d:7b:74:c5:07:1d:
28:1d:53:ff:93:0a:35:c7:c5:bc:a3:6d:70:c6:fb:
79:00:89:e3:f1:41:98:46:14:94:5b:7b:85:44:17:
52:f4:45:90:fc:23:27:00:71:ae:ef:b8:57:d1:fd:
bc:da:19:e0:de:71:78:e2:c6:a3:33:28:d4:09:73:
9b:4e:70:af:f8:70:62:6e:36:23:29:97:4b:82:95:
fc:1a:65:1e:c9:12:f4:33:a3:94:42:13:bd:da:ec:
2e:34:98:52:ab:9e:e4:6f:20:43:36:c7:11:39:98:
41:c7:71:1e:8d:e1:32:58:6c:a1:61:76:30:97:e1:
0f:48:9d:32:84:68:68:8e:74:b4:fc:03:9a:b4:7d:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D5:91:5D:CE:95:48:55:E2:27:92:A0:1B:FF:A6:5D:B6:AA:74:AE
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:22:d6:f5:c5:87:36:05:a7:c8:0f:c9:87:4c:c8:f4:86:01:
6a:31:47:74:fc:8d:11:78:21:c5:08:e3:1b:26:d7:c6:8a:b1:
3a:93:88:b8:06:06:fd:47:1f:0d:f2:c2:f3:bc:2d:c0:00:4b:
24:dc:6e:54:53:75:0e:f9:a6:5f:e7:7e:75:e9:47:f7:f5:e4:
2c:71:10:34:81:6c:0b:c1:5c:fd:e5:09:97:6d:eb:fe:09:fd:
f2:64:f6:06:79:6a:a6:96:7d:e6:93:4d:94:24:5b:8a:76:fc:
14:44:ec:ae:d8:6c:d9:f4:e5:14:e4:c7:93:2e:cf:ea:11:51:
a3:2e:2c:d5:db:ef:2e:9d:7c:6e:d6:e5:ea:83:61:b4:c1:17:
80:0c:36:24:e5:09:f9:fc:a3:9f:6b:65:a9:9f:9a:76:09:c6:
5e:bc:06:75:15:82:5f:b7:5e:52:4a:9f:73:33:62:ea:76:e5:
35:ad:ef:b5:d6:24:b6:70:71:24:5a:ee:48:fd:94:3e:f6:9f:
6a:df:19:ba:c8:9e:f6:22:c9:95:f1:e3:f5:a8:b2:78:cc:2b:
ea:df:74:ec:c6:9f:7f:89:7a:69:c2:d2:47:ca:36:26:ec:18:
1f:a9:71:26:af:be:42:1a:1e:67:e9:e0:01:4d:95:a8:65:2f:
2f:e8:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:46 2026 by rpki-client