Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: 4uSfVtstLr49Zk7TMn5QAepMB/Zwnaznp2G8paElHSE=
Subject key identifier: 84:58:09:5C:57:09:8E:79:AB:AE:53:5E:95:A4:01:E7:0B:2B:18:B3
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019D9BF594FE47FAEE24B2D3318B72070FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 18D0
Signing time: Fri 17 Apr 2026 15:00:56 +0000
Manifest this update: Fri 17 Apr 2026 15:00:56 +0000
Manifest next update: Sat 18 Apr 2026 15:00:56 +0000
Files and hashes: 1: 7qKY5-kl-qaVMoRIB3RG5oNUdf0.roa (hash: L6u//TWO0oG/8Tdr3Tg8lfsVqZiNaM1y0Ryf8hK01sg=)
2: PPXNJhyqSJSHAcVtgk0VztMlglY.roa (hash: ex9cUqmNLS12UIvKYIuoCv8mQvwQVbCS289sS1wTF3M=)
3: e6h2n9XnoiZKNpyZDuWS--kogbA.roa (hash: tWYIKN6aFchD9ZG77xZYhxaLu1YeirWOa5ux4eeE0kw=)
4: lNE8D9GJWfcd-D9egVK1TMPitC0.roa (hash: 2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: UqbsqtRt1G/LBWAAUzgVsi3GQkI/amBTmJvlZMW5k7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:94:fe:47:fa:ee:24:b2:d3:31:8b:72:07:0f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Apr 17 15:00:56 2026 GMT
Not After : Apr 18 15:00:56 2026 GMT
Subject: CN=8458095c57098e79abae535e95a401e70b2b18b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:6e:c0:cc:d2:a9:21:11:90:bd:c9:84:33:
06:a8:93:57:43:79:42:b3:3d:38:ba:30:14:01:83:
e9:e0:3e:ae:82:0e:c1:7c:8b:77:f1:4c:f8:1d:7e:
d3:04:51:4e:eb:6a:8f:f9:12:1b:3a:2e:5e:99:d9:
c7:ae:6a:1a:fb:92:d3:2f:b1:31:dc:08:df:bb:85:
25:46:a2:cb:a4:f7:25:6e:39:53:da:3c:42:d7:0f:
c0:06:aa:22:b7:60:8f:45:98:ce:4f:02:8c:4a:32:
4a:e0:5b:f1:55:bc:34:fd:88:b9:71:ed:bf:f0:47:
90:dd:a0:f5:04:68:2d:1d:ee:39:90:40:c4:69:b8:
63:3b:e8:75:77:39:c9:14:92:bf:f4:1f:04:5a:e2:
42:07:38:f3:85:36:b7:54:35:1d:34:f9:f3:ea:90:
26:db:69:a1:1a:53:b7:d0:1a:dd:e7:f4:ce:fa:69:
61:f6:1f:e8:6a:be:d5:d6:f8:9e:94:7a:c7:5e:81:
55:d7:ba:27:f7:3f:38:ec:23:b7:98:5e:11:de:d5:
17:7a:0b:83:f0:e9:bb:82:56:00:5a:a8:30:9f:1e:
c4:50:2d:5d:78:01:06:39:44:bf:1e:73:2f:f9:75:
d1:29:d7:75:c0:01:4b:21:61:53:99:07:28:f5:36:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:09:5C:57:09:8E:79:AB:AE:53:5E:95:A4:01:E7:0B:2B:18:B3
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c4:fe:e9:27:2e:82:a2:33:ef:0c:fd:73:94:6d:81:02:3a:
45:c3:33:3b:ef:6b:17:84:dd:d2:dc:a4:a9:4f:5a:0c:9a:d5:
3b:7f:5d:4e:97:7a:5d:01:45:b7:de:9b:69:c3:fb:64:7a:c7:
23:51:10:99:c5:34:59:9f:98:b9:ab:9e:28:83:01:3c:06:e9:
ae:22:cd:a0:92:eb:5c:5d:31:93:78:9a:52:98:89:df:8b:29:
ef:e8:63:e0:ce:93:5a:14:41:4d:71:07:20:f9:43:09:ac:4b:
bc:de:65:10:9f:c4:68:25:9c:82:60:3c:25:b6:6d:32:4a:fe:
c5:e7:9f:9f:5a:23:a1:43:6e:9f:ee:89:62:53:ca:a2:78:e6:
bf:88:53:86:c0:8a:8a:d4:87:77:6c:4b:d4:fc:85:51:a4:7b:
66:9a:cf:cc:ae:1c:ab:2f:ee:73:a0:cf:d1:6e:99:03:98:6f:
d9:ba:69:93:22:51:e7:fa:7f:00:24:a2:9e:d8:9f:0f:81:a5:
c6:df:92:81:7f:19:ff:4a:b2:39:aa:5c:e6:1a:d5:a8:df:c0:
28:17:2d:7c:a2:1c:5e:31:c7:d4:e9:56:c6:2f:29:dc:1b:ec:
cf:0e:11:af:d9:d9:63:97:2a:d6:d2:a2:91:96:43:aa:55:82:
5d:48:55:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9ZT+R/ruJLLTMYtyBw/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjYwNDE3MTUwMDU2WhcNMjYwNDE4MTUwMDU2WjAzMTEwLwYDVQQD
Eyg4NDU4MDk1YzU3MDk4ZTc5YWJhZTUzNWU5NWE0MDFlNzBiMmIxOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uluwMzSqSERkL3JhDMGqJNXQ3lC
sz04ujAUAYPp4D6ugg7BfIt38Uz4HX7TBFFO62qP+RIbOi5emdnHrmoa+5LTL7Ex
3Ajfu4UlRqLLpPclbjlT2jxC1w/ABqoit2CPRZjOTwKMSjJK4FvxVbw0/Yi5ce2/
8EeQ3aD1BGgtHe45kEDEabhjO+h1dznJFJK/9B8EWuJCBzjzhTa3VDUdNPnz6pAm
22mhGlO30Brd5/TO+mlh9h/oar7V1vielHrHXoFV17on9z847CO3mF4R3tUXeguD
8Om7glYAWqgwnx7EUC1deAEGOUS/HnMv+XXRKdd1wAFLIWFTmQco9TZdnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRYCVxXCY55q65TXpWkAecLKxizMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcT+6Scu
gqIz7wz9c5RtgQI6RcMzO+9rF4Td0tykqU9aDJrVO39dTpd6XQFFt96bacP7ZHrH
I1EQmcU0WZ+YuaueKIMBPAbpriLNoJLrXF0xk3iaUpiJ34sp7+hj4M6TWhRBTXEH
IPlDCaxLvN5lEJ/EaCWcgmA8JbZtMkr+xeefn1ojoUNun+6JYlPKonjmv4hThsCK
itSHd2xL1PyFUaR7ZprPzK4cqy/uc6DP0W6ZA5hv2bppkyJR5/p/ACSintifD4Gl
xt+SgX8Z/0qyOapc5hrVqN/AKBctfKIcXjHH1OlWxi8p3Bvszw4Rr9nZY5cq1tKi
kZZDqlWCXUhVig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:07 2026 by rpki-client