Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: CLALa1vMJ6gZsefZWWSEieQ69S6suLGmq8ipuqVTxHY=
Subject key identifier: B6:DC:77:9D:56:73:A9:DC:05:1F:73:89:CC:7C:AA:DA:02:B9:5F:A8
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019D9AAC01F1374186030900EB411390E38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 09:00:56 +0000
Manifest this update: Fri 17 Apr 2026 09:00:56 +0000
Manifest next update: Sat 18 Apr 2026 09:00:56 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: cGz92PM3kxtPggpKRBCUUoXZfUsV2TuBj2nkQ5tQfpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:01:f1:37:41:86:03:09:00:eb:41:13:90:e3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Apr 17 09:00:56 2026 GMT
Not After : Apr 18 09:00:56 2026 GMT
Subject: CN=b6dc779d5673a9dc051f7389cc7caada02b95fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:15:cd:7d:2f:84:82:10:aa:c8:01:13:bc:
7f:b7:e8:1d:ae:06:51:97:59:90:a2:b5:da:eb:05:
21:5d:65:ce:fb:95:95:e0:1c:36:05:e2:26:d0:5f:
31:30:e9:aa:fa:f7:a6:ec:b8:e8:82:9e:54:15:da:
6c:6a:b3:66:de:92:a9:8f:8f:fe:1b:e4:be:22:58:
47:e8:60:27:bc:68:e2:20:c0:7b:26:a5:a5:f7:d7:
23:be:e4:88:df:78:96:16:b8:28:39:74:e1:fc:90:
8e:10:0b:24:33:91:0c:0b:f7:7a:7c:2a:5c:d9:4b:
82:9d:ed:4f:0d:9e:83:62:e7:ae:d3:35:9a:72:f3:
9a:93:76:4f:d5:a3:24:59:b0:fa:8f:12:a2:3e:71:
29:af:0f:76:e3:75:e5:f8:ec:b5:fa:27:84:93:fc:
a6:a6:8e:fa:ac:a6:5e:13:cc:32:23:65:45:ca:67:
67:03:73:40:aa:3a:6f:a8:0a:2d:0c:23:65:93:ae:
bf:1a:5e:e6:46:6f:ff:93:85:2e:c7:41:17:08:19:
24:c6:1d:46:75:51:a4:b9:99:ef:2c:a5:44:14:cf:
78:93:bb:f8:61:22:e8:d7:50:39:da:05:d9:fc:83:
36:30:01:43:08:48:57:3c:39:29:13:4f:dc:01:23:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:77:9D:56:73:A9:DC:05:1F:73:89:CC:7C:AA:DA:02:B9:5F:A8
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:de:ba:1e:5c:ea:cc:59:cb:09:91:b4:bb:0f:43:0a:bb:41:
75:ed:72:72:f7:a3:d9:c3:09:2c:ce:84:b0:ac:6c:fd:04:73:
52:8f:f7:50:3f:c4:49:f4:fd:b0:9f:c6:77:19:b1:dd:27:fa:
10:15:47:b5:43:84:80:29:41:09:4c:b9:66:db:d0:08:5d:16:
2c:fb:62:88:5e:11:72:78:97:8e:f2:a2:0b:da:1f:bb:5f:a8:
e6:31:30:b4:bd:bc:c7:96:ee:eb:e5:cd:3a:48:18:fb:d1:03:
21:06:5b:35:fd:8f:f0:6d:91:14:81:cf:e8:18:37:d4:a9:54:
c5:a1:5d:91:2a:34:cf:22:7c:d0:54:62:23:4a:27:ab:e3:22:
7c:ee:26:7f:0e:90:43:16:0a:63:0e:61:f0:cc:94:83:74:42:
65:89:df:b8:d2:ad:ad:8f:e3:c0:1a:96:4c:4f:47:47:1e:47:
0b:41:24:b3:98:cb:ca:3e:99:5d:ce:69:c6:e4:ad:04:e8:77:
d2:a0:7d:9a:7d:1d:db:ef:c6:d3:b3:e7:79:bf:69:80:7e:49:
9e:db:40:c2:72:56:d6:90:b8:d4:37:95:60:34:15:b6:d7:a1:
71:f1:a1:ee:be:44:d0:6e:84:f0:df:c9:fe:70:15:50:3d:34:
0c:50:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:26 2026 by rpki-client