Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: pe6FNeu424vLMOPGT0zo94bnLTjHcem6XCQVTdOcLCg=
Subject key identifier: E8:C4:B1:A4:39:AC:82:EC:89:D2:E6:5A:F6:7C:35:96:B1:1C:73:A2
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 019D9A3E03DF8A0EB8335C177F8CA5EE6E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 07:00:48 +0000
Manifest this update: Fri 17 Apr 2026 07:00:48 +0000
Manifest next update: Sat 18 Apr 2026 07:00:48 +0000
Files and hashes: 1: grgC47iwv_yPcU0PK-57zcrhx3w.roa (hash: Byu89q/FbONyFmYfNVRxv0Nw5EmOQBEB3SRiUqdLOKE=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: t+UMfBbl0wdGhl8etSMW3AfBreeRS7Qm755BJqg5gP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:03:df:8a:0e:b8:33:5c:17:7f:8c:a5:ee:6e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Apr 17 07:00:48 2026 GMT
Not After : Apr 18 07:00:48 2026 GMT
Subject: CN=e8c4b1a439ac82ec89d2e65af67c3596b11c73a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:83:61:e3:aa:38:d5:d0:a0:b0:6d:7e:17:
d2:40:4c:7f:02:11:76:28:89:fa:7c:bf:87:25:b5:
52:c8:6b:c2:fa:c6:9a:48:fa:5e:93:1e:d6:e8:6f:
19:74:35:d2:db:7a:9a:1f:01:ee:83:9f:0a:82:34:
fe:77:ee:1f:f1:1f:81:fc:17:b1:b6:f9:8c:3f:8d:
7b:17:3f:32:e2:95:8b:8f:d8:4f:ac:17:5d:0d:ac:
6a:8f:80:b7:52:23:8c:12:8e:48:85:22:57:10:db:
42:43:50:a2:51:e4:b7:7d:a0:4c:e2:f3:b5:ec:b4:
39:37:97:c3:8d:ea:a1:04:b4:b6:ac:b9:7d:01:c3:
a5:2c:7f:87:b8:50:98:c4:4e:78:0b:89:15:2b:1c:
13:f5:d9:8f:df:7b:dc:2e:ed:bd:6e:f8:cd:ee:d7:
ee:51:5a:49:4b:c8:45:50:c8:77:c7:99:2a:27:6e:
34:59:77:18:e2:c9:15:f5:9b:f7:58:11:cc:d0:17:
89:63:00:a8:0c:e7:f4:60:66:c2:b1:69:29:ba:bb:
00:2c:76:ef:63:03:c0:bd:4a:e7:31:70:25:05:82:
fd:e4:af:c2:49:8f:3d:e9:3f:47:2d:2c:8e:01:a9:
4d:af:15:a6:2f:7d:ab:fb:0a:a0:cc:0e:41:e5:da:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:B1:A4:39:AC:82:EC:89:D2:E6:5A:F6:7C:35:96:B1:1C:73:A2
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:09:39:e5:da:21:7a:47:fc:3a:04:44:ed:29:73:1c:3a:94:
7b:65:6b:be:21:d5:9f:90:b6:be:dc:a9:bf:0d:5f:27:62:82:
65:0a:fd:b5:9c:03:40:f6:da:34:ac:3c:3b:6b:90:4e:83:f8:
62:20:5f:a6:98:b3:a1:57:c4:73:9d:45:c3:3e:33:ea:d5:77:
92:7e:8b:b3:a8:59:bd:9c:db:b6:e9:8c:52:ad:39:9a:db:c2:
28:6f:07:0a:af:a9:b5:ce:72:a6:84:dd:49:02:53:c4:a5:86:
2c:a6:f1:a9:9a:e3:e5:67:c3:22:d8:24:da:54:f1:ed:4c:e2:
5b:d6:49:19:ee:c0:e6:3d:a4:3c:c1:b2:d1:d3:cf:21:31:e1:
8b:a9:56:6b:25:c5:92:0c:72:c2:07:49:af:90:ac:83:2a:0e:
a1:39:ab:38:68:66:0c:1d:ac:a0:a4:9c:7f:78:c2:57:9f:55:
f3:1d:65:1b:c4:91:d6:51:1c:89:d0:c3:cb:34:47:54:f3:49:
94:4b:51:8f:18:05:64:a8:5d:8a:15:23:d8:f6:33:0c:f8:b6:
e8:61:43:d4:5f:76:90:6a:f1:71:91:84:7d:d0:3f:90:04:a3:
bd:ba:49:f7:01:27:50:59:9b:f0:19:ea:a8:59:5c:d3:ce:84:
d5:82:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:03 2026 by rpki-client