Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: J4mTq8SvBjF1fBcFPEughRPECtJCHKWYnD2e0kW1zjU=
Subject key identifier: CD:07:BA:D4:FD:16:60:A7:BC:00:56:79:48:37:1B:98:39:DE:48:11
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019DA4537B43E774756F6EB7EA8348B40BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 17C6
Signing time: Sun 19 Apr 2026 06:00:27 +0000
Manifest this update: Sun 19 Apr 2026 06:00:27 +0000
Manifest next update: Mon 20 Apr 2026 06:00:27 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: uQWmG2Remfa5jHIJT+yIBvTn33vdmu0hppeaMp5IZbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:7b:43:e7:74:75:6f:6e:b7:ea:83:48:b4:0b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Apr 19 06:00:27 2026 GMT
Not After : Apr 20 06:00:27 2026 GMT
Subject: CN=cd07bad4fd1660a7bc00567948371b9839de4811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:29:a9:a3:37:ff:d1:0e:11:8f:b8:8a:2b:
5e:d6:63:4e:c6:3c:5a:1d:75:fe:1a:f6:57:ca:41:
8e:04:41:dd:48:42:95:fa:06:b2:af:30:97:f8:53:
d3:dd:ac:6c:5e:3b:c4:92:40:00:82:57:b1:9d:62:
5e:b7:ce:bf:91:4e:d8:11:2e:f0:d5:58:88:0e:78:
97:a8:1e:4a:c0:96:1d:dc:ae:29:f9:59:08:1b:5d:
ae:11:33:0d:36:87:05:0e:66:f7:83:67:1e:dc:5b:
28:70:09:db:4e:a1:85:64:85:c0:8d:07:48:6a:73:
51:9f:dd:10:c9:ac:64:e8:88:75:e9:33:92:d8:c4:
0a:78:7a:81:b6:86:ab:d7:3c:86:94:7b:2b:7d:35:
72:a6:92:98:da:d4:a5:03:56:49:c0:04:2b:12:34:
33:37:b6:60:fb:c3:f4:3a:e4:52:bb:40:c6:ab:15:
9b:c0:1d:97:68:20:34:68:07:a1:18:ab:f4:f0:08:
8b:f0:54:49:7a:22:4c:70:8c:04:1e:5a:3b:8e:18:
29:f3:48:48:13:ec:94:a2:78:01:6a:7f:1f:41:84:
56:2d:46:86:10:b1:33:8c:cb:13:04:81:7a:2c:c2:
76:68:86:2c:fc:37:e4:bd:7a:1f:c3:82:90:4a:b2:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:BA:D4:FD:16:60:A7:BC:00:56:79:48:37:1B:98:39:DE:48:11
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:19:af:8c:2b:f3:b5:b6:91:bb:c6:88:8e:0b:c7:34:39:fa:
d0:45:85:a7:ac:04:c1:9c:49:2f:80:d9:4f:e6:02:3b:76:b7:
76:ff:2a:6f:1f:06:4e:0f:b0:ad:06:42:c4:45:d7:72:de:79:
cd:73:bc:64:4c:bf:e2:37:a9:51:50:11:49:cb:5a:39:86:26:
a2:83:db:d2:c1:f6:26:ae:3e:a2:57:be:52:33:fe:d8:68:de:
a5:fc:f6:67:20:a7:2a:ad:74:84:9a:cc:2d:9b:07:1c:7a:dd:
61:60:17:e0:6e:ba:1e:34:70:c9:cd:e6:79:e0:e7:f0:37:ec:
f6:85:8f:b3:42:8e:ce:d2:13:01:be:0a:ac:18:93:86:eb:fc:
99:42:f7:ba:04:5c:a2:3e:29:8c:7c:38:94:ca:61:51:06:68:
28:47:0b:9c:95:76:15:99:00:7b:c8:12:93:b8:74:1c:98:12:
35:1e:25:d0:c9:74:fe:96:95:ef:b8:09:4a:30:eb:0e:ce:36:
c4:47:41:e5:73:0a:64:e8:68:c3:65:77:17:ed:5b:b1:1d:31:
40:c0:20:be:0f:45:ba:b0:95:0c:a5:be:7b:31:ab:69:28:17:
9b:c5:e7:50:9b:89:93:4b:f4:59:24:66:9e:aa:b7:ae:17:28:
1f:b6:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:27 2026 by rpki-client