Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier: H/KIJHyNdATj9y1p2bELTPINAuxeQgOwmYKu+7lo0r8=
Subject key identifier: 92:7B:0E:7C:32:F7:FF:24:B8:93:08:F2:F1:AF:1C:F6:48:CA:70:07
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 019D99D0BF8563EE48A4D393E2BC6E642D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:01:27 +0000
Manifest this update: Fri 17 Apr 2026 05:01:27 +0000
Manifest next update: Sat 18 Apr 2026 05:01:27 +0000
Files and hashes: 1: XddFO1_V4vw4BFewS5a4h464RsI.roa (hash: 6STZFqkc7/OsVyHseLRUMCPEN6uwIoKNwxdIv1/YIe8=)
2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: B05U/rcxk2avb4pkftcJPaimnSTfv8UXFd80/JjilC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:bf:85:63:ee:48:a4:d3:93:e2:bc:6e:64:2d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Apr 17 05:01:27 2026 GMT
Not After : Apr 18 05:01:27 2026 GMT
Subject: CN=927b0e7c32f7ff24b89308f2f1af1cf648ca7007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:79:a9:a7:f0:36:e3:45:35:36:fa:e8:64:
d4:cb:f1:34:84:3a:1e:64:ab:a6:6e:2b:68:88:f3:
c9:58:48:a6:e6:f7:ef:23:d2:6b:20:06:e9:c1:d6:
62:9e:95:4c:01:42:0b:22:ed:58:fc:a8:02:4c:e0:
08:4b:65:35:43:d9:07:e7:29:b7:37:a2:43:6c:ad:
96:0b:47:96:a6:4b:3b:aa:f6:ad:37:c0:b1:c6:2f:
79:42:e7:32:24:0b:dc:10:1d:7a:bb:6e:f7:7d:93:
15:c7:14:e8:4d:ac:d8:54:94:9d:05:b4:df:7a:f6:
9d:7c:a2:5e:cc:ac:78:3c:58:4f:6c:02:65:55:fe:
d2:c6:0a:e4:5e:32:35:76:55:ec:cc:e3:92:43:9d:
79:c6:59:e1:cd:7f:f0:27:db:c8:50:28:0c:60:ec:
34:04:d1:0c:9a:8f:6a:a4:1d:dc:cd:6e:bd:da:b1:
a6:b7:be:8b:24:24:ef:90:06:a4:2a:29:39:10:82:
ff:4a:2b:05:91:69:1a:c4:d9:68:61:56:3b:cf:82:
92:82:7f:e1:fd:bd:fe:0d:7c:c8:50:ed:0e:74:b6:
dd:ff:4d:23:1b:4b:f9:78:6c:56:1f:fc:4b:43:0c:
e8:ea:43:f4:04:c3:a2:c5:98:d2:07:0f:59:fe:85:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7B:0E:7C:32:F7:FF:24:B8:93:08:F2:F1:AF:1C:F6:48:CA:70:07
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:15:6e:e2:a8:48:ac:4b:38:b8:44:53:50:2c:d7:36:b5:8c:
cc:ec:ce:6b:28:a8:15:a8:9c:c6:99:ca:87:23:9d:e3:b4:fa:
6a:fa:7a:bd:62:a6:26:11:d8:0b:c7:65:c3:14:36:f0:14:74:
a1:d8:ef:c1:47:aa:c6:1c:4b:92:65:6d:32:93:ac:e9:01:04:
92:cc:82:6b:04:b5:d4:ad:09:22:78:33:a0:b4:52:7f:b9:c7:
fb:45:2e:18:1b:30:70:b5:25:27:88:b3:7e:c9:5c:b1:d7:03:
c3:d0:82:44:d7:bd:af:3d:00:70:db:65:83:e2:0e:6f:58:43:
98:ba:ca:e6:0b:23:7c:07:d0:86:c9:51:14:83:48:04:a0:99:
30:ea:95:3a:32:ef:4a:ca:02:4d:80:bb:b8:02:2c:e8:51:73:
94:cb:9e:fb:84:7c:ce:f2:bb:12:e5:0a:46:b4:e1:59:31:de:
91:35:bb:a2:50:95:79:d3:f7:96:6f:fa:da:cd:c7:c1:31:d8:
a2:24:f4:7f:5e:d9:09:0c:c4:a5:e6:a0:be:84:8e:0b:b1:47:
cb:ec:f9:bd:98:35:51:3c:a7:df:89:b5:9f:b8:b0:b2:4b:42:
f8:a7:e1:7d:c1:3d:f2:dc:14:94:8a:68:38:66:a2:01:68:d5:
16:22:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:44 2026 by rpki-client