Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: doNbRZQg4tbj2BmE11V/CDbkbJatR+YooP/5MCcrujE=
Subject key identifier: 98:D1:FF:A5:E4:81:AD:B0:15:22:27:6C:2C:42:BC:1F:64:65:CE:D5
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019D9B199683307DA5E6DE31F9AA26A072D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 11:00:38 +0000
Manifest this update: Fri 17 Apr 2026 11:00:38 +0000
Manifest next update: Sat 18 Apr 2026 11:00:38 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: tTrdC5wX91Ty0EG87Ul9X7ecdr+seunswyE5yhGERt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:96:83:30:7d:a5:e6:de:31:f9:aa:26:a0:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Apr 17 11:00:38 2026 GMT
Not After : Apr 18 11:00:38 2026 GMT
Subject: CN=98d1ffa5e481adb01522276c2c42bc1f6465ced5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:3a:c8:29:01:5a:80:4d:38:aa:da:67:77:
d7:c0:fb:c2:28:2e:82:3c:3a:7d:80:e9:d9:85:05:
78:42:4c:d7:f5:1b:71:9d:4d:9e:fd:98:69:88:bd:
33:43:03:87:e8:3b:f0:f7:1a:0a:cb:f7:38:e6:43:
1a:ff:dc:dc:dd:70:97:49:79:bc:a7:44:02:45:9b:
88:35:1c:9b:2d:e3:5c:6b:fc:11:c9:5b:07:f1:c2:
da:36:12:f3:ba:80:3c:a9:36:71:21:b9:c2:a8:4b:
60:1a:c9:e6:27:0b:da:e0:48:65:44:91:21:78:a5:
64:d5:69:5e:bf:b8:0d:b9:ec:d0:ee:2c:d2:1c:65:
78:e0:5a:82:1f:06:08:2d:e8:37:ee:de:cd:19:6c:
89:80:f5:74:e6:32:42:6a:04:f8:b8:41:10:e6:59:
b5:78:bc:36:d7:8e:da:34:9f:12:d7:91:5d:e3:5f:
64:14:ed:8b:77:ed:2e:10:46:77:ed:ff:b0:2d:49:
e0:4f:49:fc:b5:59:c5:6e:67:44:02:a9:01:c5:0b:
1a:20:d8:31:a9:63:88:f9:47:09:cd:66:9a:e2:7e:
4b:1b:93:08:f6:45:06:8a:b1:5b:d1:f3:f8:be:44:
ff:8d:d1:7a:d9:35:3d:62:4c:b0:aa:cd:e8:71:df:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:FF:A5:E4:81:AD:B0:15:22:27:6C:2C:42:BC:1F:64:65:CE:D5
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5c:88:0f:d9:93:d9:dd:ee:84:ef:5f:60:d3:c5:b2:41:d7:
af:cd:d8:a3:11:2e:5f:1a:a4:65:4a:89:51:2c:cc:9b:a4:7c:
ce:99:71:ca:ac:e8:8d:d8:83:3e:f1:d8:8e:72:fd:3f:65:d8:
27:cf:7c:33:da:ea:b8:a4:c6:d2:e9:b1:5c:b2:95:54:8f:13:
cf:39:6c:16:40:cd:19:17:4f:ff:b1:6b:85:5d:68:da:4b:47:
7d:cd:4e:67:b9:36:9a:0f:13:96:be:2b:c5:e9:5b:9b:13:d8:
01:49:75:8d:df:6b:5a:0b:ed:63:e8:f5:95:56:b1:0b:49:6c:
bc:7b:40:ef:b4:31:63:19:7a:48:98:e3:ff:2e:dc:14:84:05:
b7:16:56:d4:31:0c:a4:21:15:58:52:44:a8:7b:d8:5d:ee:e0:
58:03:55:7f:53:76:a7:bc:fe:ae:4d:01:0d:07:73:6f:f6:23:
6a:ab:3c:e5:0f:6c:d1:b8:84:11:0b:3b:d4:3f:5f:80:39:a5:
ea:15:e8:fa:bb:13:6b:ed:0c:d6:0a:23:a8:37:00:93:51:f7:
c5:03:08:ec:05:50:aa:f1:ee:e3:bb:74:1f:b2:a0:9f:f6:8d:
ed:29:c5:e4:a5:c7:ba:b3:4d:2c:e9:eb:c5:33:2b:f6:20:b5:
ac:9a:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:07 2026 by rpki-client