Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: dzkoEWcrpuqcFjNPKUjhepjeI9UUEj9mDj+chf7WLBY=
Subject key identifier: C2:C8:AB:F2:BA:33:93:88:D8:34:FD:16:BF:0B:FE:20:6F:70:62:0C
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 019D98BD3B22CD8ACC7D75251996C1BF2AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:31 +0000
Manifest this update: Fri 17 Apr 2026 00:00:31 +0000
Manifest next update: Sat 18 Apr 2026 00:00:31 +0000
Files and hashes: 1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
2: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: G2ZVasVA4RHo4OFp8n4q+OvKLk1wWrbii2iuJliybdM=)
4: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3b:22:cd:8a:cc:7d:75:25:19:96:c1:bf:2a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Apr 17 00:00:31 2026 GMT
Not After : Apr 18 00:00:31 2026 GMT
Subject: CN=c2c8abf2ba339388d834fd16bf0bfe206f70620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:a1:ce:9b:88:4f:1d:1d:58:e8:6f:ee:84:
d1:22:e7:47:0b:9e:43:08:c9:f0:88:59:ed:94:ef:
29:70:b6:56:50:fe:22:33:9e:95:b8:41:83:fb:62:
86:e1:e6:24:8b:6c:e9:88:11:29:d1:fa:0d:27:38:
27:78:67:b4:0a:11:a3:7f:34:0a:2d:9e:f6:df:65:
7b:f4:e1:83:ca:bb:b8:06:8d:96:39:f7:5a:79:31:
d8:0e:2b:0a:14:4f:2c:8d:76:5d:50:e4:84:0b:03:
44:1a:08:b5:7e:78:d1:5b:44:3d:f1:ba:a2:d9:40:
1e:0e:e0:b7:84:07:04:56:05:3c:e8:79:00:da:6e:
02:7a:75:29:b1:0e:0a:1e:84:09:17:5f:ed:90:60:
b6:bc:fe:60:f1:ed:1d:fc:0c:ba:a9:79:1d:ad:cc:
2c:7a:5a:5f:82:17:26:52:b6:17:94:4d:7b:04:2b:
2c:21:6e:99:d3:cc:83:90:b8:56:20:e0:f2:f4:98:
d9:35:de:e8:9a:e0:de:9d:c7:5c:14:b0:65:63:51:
ca:6d:47:c6:36:a9:f5:b7:ce:cb:db:95:e9:4b:ad:
cb:51:b6:23:b2:fd:d9:66:7f:1b:0f:16:01:a6:35:
3b:b4:59:6d:9c:da:43:f9:65:dc:95:ee:37:0b:49:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:AB:F2:BA:33:93:88:D8:34:FD:16:BF:0B:FE:20:6F:70:62:0C
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:39:4c:f4:1d:a1:62:b4:8b:52:d4:24:05:ca:82:13:a1:45:
0e:65:09:36:77:b1:dd:6f:c0:ae:51:d5:e6:41:b2:ea:51:da:
cf:f4:d2:81:69:97:4b:c0:da:bb:32:40:f7:b6:a8:84:97:36:
ec:b3:8e:33:6e:c3:1f:82:c4:ae:f8:04:76:e5:9e:5f:49:f8:
e2:92:f3:78:6a:ce:8d:52:b8:f5:6a:19:e4:64:a8:20:69:ed:
25:30:a2:52:b5:dc:30:f8:9d:c2:ed:19:c3:b1:a2:98:6c:4e:
df:68:13:a0:33:3a:89:eb:f3:72:27:61:22:8e:e7:4b:3c:11:
5c:9e:40:0b:0d:1a:11:9d:42:2b:75:d9:85:05:16:90:7a:c2:
df:35:e2:c9:31:71:cd:75:11:78:87:06:c6:6f:aa:2f:64:8e:
a8:c6:60:d6:4e:b1:a0:63:52:26:b3:80:8b:bb:8d:7d:12:90:
0c:24:f1:36:22:cd:89:ce:62:9b:80:0e:fc:47:19:73:58:7c:
91:08:ab:9d:52:79:86:5b:fa:da:24:4c:a5:4c:f0:5f:ab:4a:
c5:13:13:bd:d4:b2:54:73:d3:e5:ee:69:2a:ec:3a:f4:02:81:
8e:d3:d0:62:e6:01:be:12:ab:c7:5e:88:79:0b:d8:d6:b2:03:
db:15:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:19 2026 by rpki-client