Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: NMDWR/Rot7I0kEju/2JNhkSNWfcBZGCoFaVZanY+zIc=
Subject key identifier: 21:8A:5B:E8:52:7F:01:7C:9C:77:DE:5D:74:C6:F1:4C:94:8A:1B:45
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019DA4537C52BC0FE4658E8BDA34B9378A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 137B
Signing time: Sun 19 Apr 2026 06:00:27 +0000
Manifest this update: Sun 19 Apr 2026 06:00:27 +0000
Manifest next update: Mon 20 Apr 2026 06:00:27 +0000
Files and hashes: 1: 02JNfVWYOVA2OBy17TDgR9y7do8.roa (hash: x5I0ROnfJh237cohKlOyZemzpgBQnX/4IqZy8ejhw3c=)
2: 5VBhehblaiOfuUShpivHuAhNqvU.roa (hash: SLWl0V7yJEtG44gZ1JVp2uNJOky4M2j+U4CHDGRdNIM=)
3: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: HQm1b281nFcRKdmHHxLma4FuytnXkNfPmpKJZtSX0WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:7c:52:bc:0f:e4:65:8e:8b:da:34:b9:37:8a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Apr 19 06:00:27 2026 GMT
Not After : Apr 20 06:00:27 2026 GMT
Subject: CN=218a5be8527f017c9c77de5d74c6f14c948a1b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:33:d8:0c:4d:5e:d1:b4:7e:b7:10:5c:e6:
c7:e9:0a:08:32:a9:46:f4:1f:90:0b:31:65:35:46:
71:e3:9f:90:b7:57:3d:5d:2a:c8:9d:90:87:d2:80:
60:b9:cb:d8:a9:a5:d6:61:48:91:e9:51:ea:73:05:
5d:1d:ed:18:1e:4b:b0:44:b6:da:1e:ce:7c:88:bf:
7f:53:7f:a3:12:14:c3:31:8c:57:77:d5:5a:80:a3:
0d:b9:0a:dc:4c:0c:68:9f:0f:c3:b0:f9:83:fa:90:
a4:71:6f:13:66:20:b4:7e:92:8c:f0:d3:17:bd:d3:
44:08:a9:cc:a6:5e:a6:19:50:a9:e8:29:30:72:2d:
32:c6:76:9c:31:b0:36:66:a0:c1:67:86:be:72:94:
e9:2f:44:9e:e2:30:24:9d:d7:cc:cb:13:03:30:b6:
0e:b5:99:3c:f6:6a:02:61:88:2a:11:4e:45:18:66:
58:22:2d:a8:53:2e:d9:a0:d9:56:af:7f:8f:6a:ea:
23:02:c7:e8:6c:ef:cc:9f:6a:a2:29:c9:c3:00:6e:
5e:32:0e:e4:57:bc:8a:6e:5b:2d:50:33:b7:96:83:
ea:2d:d0:45:c8:6f:d5:63:ea:49:fb:0e:e5:98:fb:
4d:72:9b:fe:cc:97:7b:f0:91:58:f5:4a:8e:6a:f8:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:5B:E8:52:7F:01:7C:9C:77:DE:5D:74:C6:F1:4C:94:8A:1B:45
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3f:4f:8e:be:eb:85:75:84:f4:4d:91:1d:db:52:3a:51:c7:
98:c2:00:30:bb:43:20:7f:0a:7d:1e:ea:be:f9:de:3e:5b:bb:
e6:ff:f0:83:85:e2:aa:aa:29:2f:75:2e:57:3c:bb:0c:4d:46:
c2:55:79:04:d2:a4:a9:ce:18:49:31:dd:9d:e9:4b:df:ae:f4:
78:dd:41:75:62:b5:80:b3:a2:ab:ae:4d:a6:3c:0b:b6:51:3f:
9a:ca:e6:de:17:4e:56:31:96:b1:9b:3b:3d:7b:e0:42:bf:a5:
6c:2d:42:ac:a5:e8:1a:9e:f1:69:0a:15:3f:3d:91:55:3b:bb:
2b:b8:d4:d3:56:d6:52:3d:bd:2b:09:7a:9b:65:f0:ea:fc:19:
71:51:2a:20:cd:7b:31:5b:d2:08:fd:84:f6:ce:39:01:f3:d3:
97:1d:25:0c:0d:7a:b3:43:fa:31:e8:fc:b1:88:c4:c2:e0:15:
32:b4:5c:1d:3d:78:ae:69:10:7f:c4:1c:00:6a:d4:84:2d:37:
16:69:62:c3:e3:8b:03:13:0a:8c:3e:9e:6f:05:39:18:59:8f:
48:c5:e5:c0:f2:e2:30:51:ec:cf:b5:62:78:b2:9a:6d:73:9f:
f7:1f:c0:66:8b:ba:10:d9:17:17:1d:a0:cc:4b:57:b0:44:ce:
24:34:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:22 2026 by rpki-client