Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: qrqHF/hJ+YQrvxYkihm5j7ItfTpxHqVVAk52mRHaLLY=
Subject key identifier: E2:05:09:F8:EC:26:67:2E:47:C6:31:67:90:19:6F:08:EA:F2:BF:7E
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 019D9AE2CC07F63265229DA74122D3AD8287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:00:47 +0000
Manifest this update: Fri 17 Apr 2026 10:00:47 +0000
Manifest next update: Sat 18 Apr 2026 10:00:47 +0000
Files and hashes: 1: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: GZn/kDCJqmIgRETn4O2cbgCItoytd/JKolyYI90L4pY=)
2: i7ahmmzCoN5G9N5UQomOHHe69RA.roa (hash: GGCZiPMQLo6nn63tOlWXS7/n5qwIMxP1oeej8rFYFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:cc:07:f6:32:65:22:9d:a7:41:22:d3:ad:82:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Apr 17 10:00:47 2026 GMT
Not After : Apr 18 10:00:47 2026 GMT
Subject: CN=e20509f8ec26672e47c6316790196f08eaf2bf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:2a:2a:51:3b:e5:82:35:97:20:2a:c1:a5:
f6:d5:5e:c8:7f:00:d0:0c:33:f4:f2:6f:60:9b:9e:
cd:77:1b:c6:30:47:49:2d:9e:b5:e8:52:aa:a4:f4:
31:11:e9:35:cb:5f:9c:34:fb:a0:2a:b9:b7:76:23:
b7:91:5d:cf:d9:f6:59:8c:a4:f0:b5:bf:52:f1:3f:
13:6f:1b:26:a6:20:0d:24:fe:1a:4b:b7:0e:4b:70:
de:e4:a2:35:ca:53:fd:60:7c:a0:94:71:9e:18:35:
2d:3d:77:f3:80:52:98:dd:76:c3:1b:06:ef:99:86:
52:26:8e:c4:10:20:5e:bc:4e:d8:df:b8:36:c9:ab:
b0:1f:57:52:ab:fd:c9:cd:2a:66:12:bd:53:bc:7b:
5b:87:f7:88:1f:02:f2:22:ca:4e:d5:dd:d1:23:6f:
9d:0a:93:d1:2c:9c:f2:26:bb:89:3e:25:14:07:09:
0c:78:44:6b:19:da:6d:69:78:0f:e3:02:d0:69:94:
3e:9a:3d:a3:6e:7b:40:1d:1b:f7:8a:9e:32:dc:f1:
48:f9:87:3f:ad:8f:ff:44:19:c2:67:83:c1:eb:20:
69:e0:93:61:b0:25:7a:06:4d:75:b2:14:13:cd:7f:
ec:67:bc:3f:0c:ba:80:54:0d:04:d6:e5:dc:de:cd:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:05:09:F8:EC:26:67:2E:47:C6:31:67:90:19:6F:08:EA:F2:BF:7E
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d9:01:6e:eb:d1:35:ef:84:66:25:de:3d:69:9b:18:10:0a:
06:0a:db:6e:aa:e6:76:f4:f1:71:bd:ed:e6:64:7a:be:91:09:
f3:bb:95:32:bf:bf:4b:75:fd:de:e0:72:dc:38:a3:95:2f:9c:
b4:e0:e7:ae:21:f6:10:5e:0a:0e:d9:8d:ea:36:14:6d:01:b0:
63:9d:0d:80:47:89:d2:ab:c5:8c:6e:32:ce:75:8f:cf:19:ae:
53:55:6e:4e:b4:80:db:84:f9:e0:15:be:05:41:2e:16:b2:a5:
c7:d9:fd:98:c4:81:b1:c6:ec:46:d2:d8:f9:d1:aa:4c:a8:f7:
c6:15:b3:b9:3b:08:be:24:a8:42:6f:d5:5e:c8:86:3a:f1:ec:
6e:c3:48:7b:be:80:64:8b:a8:98:dd:8c:8f:f3:00:f6:5a:1b:
b6:bb:c9:40:8d:e4:23:61:98:ef:ff:97:f2:f1:17:10:4c:07:
5c:d3:4d:47:4e:83:bf:92:b4:b7:17:ce:78:1f:63:67:ea:aa:
d7:da:1b:06:93:df:41:dd:6c:ca:48:43:d9:4a:6b:f9:76:62:
e4:dc:51:fd:d0:c1:80:b9:06:1d:ee:78:28:fc:f6:ea:0b:7e:
59:eb:55:80:80:45:51:4b:0b:ba:0e:3b:30:de:5a:25:65:3e:
b6:a0:8b:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4swH9jJlIp2nQSLTrYKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzBkOTUwNDYzMzFiZGNlMzAxOGI3ZmZlMGYxM2RiZjlm
YzcxOGQwHhcNMjYwNDE3MTAwMDQ3WhcNMjYwNDE4MTAwMDQ3WjAzMTEwLwYDVQQD
EyhlMjA1MDlmOGVjMjY2NzJlNDdjNjMxNjc5MDE5NmYwOGVhZjJiZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1kqKlE75YI1lyAqwaX21V7IfwDQ
DDP08m9gm57NdxvGMEdJLZ616FKqpPQxEek1y1+cNPugKrm3diO3kV3P2fZZjKTw
tb9S8T8TbxsmpiANJP4aS7cOS3De5KI1ylP9YHyglHGeGDUtPXfzgFKY3XbDGwbv
mYZSJo7EECBevE7Y37g2yauwH1dSq/3JzSpmEr1TvHtbh/eIHwLyIspO1d3RI2+d
CpPRLJzyJruJPiUUBwkMeERrGdptaXgP4wLQaZQ+mj2jbntAHRv3ip4y3PFI+Yc/
rY//RBnCZ4PB6yBp4JNhsCV6Bk11shQTzX/sZ7w/DLqAVA0E1uXc3s3biwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIFCfjsJmcuR8YxZ5AZbwjq8r9+MB8GA1UdIwQY
MBaAFFww2VBGMxvc4wGLf/4PE9v5/HGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUt
MDc1MDkxOTFmOTUzLzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUtMDc1MDkxOTFmOTUz
LzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtkBbuvR
Ne+EZiXePWmbGBAKBgrbbqrmdvTxcb3t5mR6vpEJ87uVMr+/S3X93uBy3DijlS+c
tODnriH2EF4KDtmN6jYUbQGwY50NgEeJ0qvFjG4yznWPzxmuU1VuTrSA24T54BW+
BUEuFrKlx9n9mMSBscbsRtLY+dGqTKj3xhWzuTsIviSoQm/VXsiGOvHsbsNIe76A
ZIuomN2Mj/MA9lobtrvJQI3kI2GY7/+X8vEXEEwHXNNNR06Dv5K0txfOeB9jZ+qq
19obBpPfQd1sykhD2Upr+XZi5NxR/dDBgLkGHe54KPz26gt+WetVgIBFUUsLug47
MN5aJWU+tqCLcg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:14 2026 by rpki-client