Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: 2javOrh2LQ5pe01SmjAKd2qmuPIxWtN9SK9HnTfnrcU=
Subject key identifier: 6F:70:B9:E8:6C:1E:50:A3:65:34:DC:16:8F:16:6A:65:6F:23:E1:78
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 019D9B875A328935E0F65B081510C4A2CE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 06AB
Signing time: Fri 17 Apr 2026 13:00:32 +0000
Manifest this update: Fri 17 Apr 2026 13:00:32 +0000
Manifest next update: Sat 18 Apr 2026 13:00:32 +0000
Files and hashes: 1: 1-ujLZVA2eD9Q0LVsUuabSgXoS8I.roa (hash: eGVzw06cOI2ubQS+bEsoP6kSWSoInZkg8QfLxOIOYxE=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: yhWHxdebC9aYemJ+Y4y72cztfmR31CJ2aCr1aKcuMyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:5a:32:89:35:e0:f6:5b:08:15:10:c4:a2:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Apr 17 13:00:32 2026 GMT
Not After : Apr 18 13:00:32 2026 GMT
Subject: CN=6f70b9e86c1e50a36534dc168f166a656f23e178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:40:9f:c0:52:a6:e2:ca:a5:e1:47:97:06:
bd:0d:d8:09:90:c2:ed:af:cd:da:73:b4:0c:7f:7a:
43:85:24:23:23:1f:1e:ff:08:94:af:12:ad:ed:57:
87:0b:c5:76:db:a3:4a:7e:d5:52:f1:b7:7a:5d:91:
87:79:d7:cc:1d:04:17:49:96:1d:8d:6f:7d:07:05:
43:f2:51:c4:01:f2:ef:9f:9c:fc:cf:83:71:f0:5e:
38:a7:65:75:9f:5d:81:c2:af:9c:56:df:d7:c3:7a:
c8:3e:0a:f2:19:eb:2b:b4:96:4e:0c:d1:39:a0:f6:
5f:95:c5:29:f1:3b:a3:6e:a1:d0:8e:00:b2:64:19:
42:f6:62:8c:ef:76:fc:de:8e:ae:f6:49:8c:17:6d:
24:49:05:db:f1:2c:6b:38:ba:76:fb:c2:ec:31:1d:
7a:c3:82:b5:65:27:a7:a9:7c:5d:43:f5:92:1d:98:
fd:17:8b:c9:8b:78:f8:18:0e:5e:7e:e1:d7:4a:a3:
3b:dc:81:c9:ec:f3:f4:0e:ff:4d:46:71:b9:b6:0d:
7d:af:c4:cb:b7:ad:34:43:2d:85:3b:d9:27:c5:dc:
9e:ff:78:c5:be:c0:a0:2d:01:a2:e7:54:ce:c9:dd:
94:e1:ce:b7:90:ac:6c:b9:1f:a1:e5:3d:13:7d:91:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:B9:E8:6C:1E:50:A3:65:34:DC:16:8F:16:6A:65:6F:23:E1:78
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1b:63:3d:84:38:d5:a5:bf:f1:75:32:01:81:60:e8:22:5f:
65:26:0e:d4:2d:12:0f:18:e5:2e:7b:75:75:22:f7:49:e0:90:
86:9b:16:09:41:9d:bc:5e:4c:f1:0e:e2:06:e7:cd:16:f6:dd:
99:08:cd:93:c1:48:e1:4e:90:ae:3e:7b:f0:8e:99:43:50:cc:
cd:55:31:c9:d4:1c:70:a2:8b:61:71:a2:bd:52:bb:b2:c7:5c:
6b:1f:af:0a:fd:9b:77:ba:8b:4f:0c:0e:6d:8e:5f:93:1d:f2:
1c:31:fb:7b:24:20:a1:5e:1d:c6:d8:48:65:d2:02:98:76:f2:
ac:b2:e5:59:58:61:cb:26:2f:cf:82:a5:e7:de:94:59:a5:b3:
1e:e7:15:b7:1b:32:36:6c:6f:dc:42:e0:08:ed:0b:c2:20:8f:
f0:34:bc:52:91:c0:77:fb:ed:d0:20:88:34:05:72:08:47:7c:
c7:4a:2b:24:20:f8:83:fd:15:24:b5:33:96:5f:d6:48:3e:9f:
c3:df:17:9c:16:3d:6f:6c:ec:3c:76:54:10:55:7e:e1:03:b2:
a7:eb:73:db:20:39:9a:31:0c:03:4f:f7:b0:d7:ff:74:69:d8:
aa:16:46:39:a1:2f:79:5d:bf:12:67:66:f4:e6:4b:9c:da:74:
d5:ca:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:25 2026 by rpki-client