Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: BNIKou6bYNxB/ANMswc7xmgkVseaqZMB6kAvmqGhUKs=
Subject key identifier: CF:7B:24:12:67:82:25:3A:F1:AF:5F:99:D4:A4:74:D1:E7:6B:9B:EA
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019D99999FB3EB5A0499456737D9ED6D161F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:01:15 +0000
Manifest this update: Fri 17 Apr 2026 04:01:15 +0000
Manifest next update: Sat 18 Apr 2026 04:01:15 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: QMtJhUlH6dbFPrdeO0uPGDFoDhSLwP+YF1GgFc4rPM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9f:b3:eb:5a:04:99:45:67:37:d9:ed:6d:16:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Apr 17 04:01:15 2026 GMT
Not After : Apr 18 04:01:15 2026 GMT
Subject: CN=cf7b24126782253af1af5f99d4a474d1e76b9bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:8c:43:8b:d4:6b:7d:e2:11:f2:c9:98:42:
d1:fa:0e:ec:44:bb:5a:52:b0:f0:a0:47:37:9a:4d:
ab:f4:69:2e:d2:f9:81:ef:b4:6f:14:77:76:f3:eb:
32:4f:cb:96:c0:3f:a3:60:b4:d6:13:53:2f:a3:49:
ae:fd:00:80:0a:83:e1:ee:70:04:ed:db:0f:d3:49:
5f:75:1b:26:ac:af:c2:e4:76:24:cd:94:bd:84:42:
e0:06:5e:ae:ac:8c:ae:26:cb:4f:8c:af:80:43:d1:
af:a4:ac:a1:e0:1b:db:37:64:1d:50:81:51:a6:a1:
0f:36:e9:a7:ae:ff:a9:db:dd:cd:74:34:e0:ca:cb:
2b:20:ae:e2:f4:42:60:94:65:ea:0a:89:c6:f1:83:
be:08:2f:1d:8f:dd:39:a1:44:61:eb:10:0f:63:9e:
2b:f2:91:3d:86:45:c9:2c:61:07:c8:aa:a5:37:ec:
ab:d3:26:8f:f1:e1:6d:e7:bf:ac:89:14:69:14:13:
06:98:83:15:c7:0c:89:9d:07:e3:c7:40:13:ef:0b:
09:ca:1b:a0:25:6c:cf:3c:9a:1c:59:5a:f8:c7:95:
47:3e:12:25:7b:47:95:7b:bf:1f:f9:6c:b9:2c:5f:
00:17:bb:2f:3a:21:9d:a4:9a:e0:a0:be:37:d6:23:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7B:24:12:67:82:25:3A:F1:AF:5F:99:D4:A4:74:D1:E7:6B:9B:EA
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:14:db:9e:f0:4b:79:22:92:dd:4e:b3:72:0c:05:74:95:fe:
1f:8b:93:59:64:68:9e:83:29:67:b3:86:9b:cb:f2:63:08:e0:
5f:40:ce:6f:5f:f2:fc:23:3c:f6:c0:5a:4d:5a:7a:65:db:ef:
68:a4:ac:3d:16:0a:c9:bf:06:62:11:a3:e1:22:d5:58:35:b2:
ea:ea:bc:b2:10:65:2a:1b:57:30:b8:96:a9:4b:b0:95:b8:1e:
d3:d0:ce:bb:1e:d7:19:c9:c1:2e:37:30:23:42:40:e0:9e:84:
2e:2a:f9:82:85:81:7d:e1:d3:95:a8:18:88:50:79:24:41:da:
b5:fd:ac:01:47:3c:ba:7e:f4:55:48:ce:c6:61:ae:76:80:8e:
f7:e4:86:b0:01:07:ee:14:6f:2b:a1:22:42:4f:9c:41:90:8e:
07:07:2f:8a:09:17:5c:8d:cf:cd:82:48:87:cf:62:c6:b9:7a:
31:ff:b9:a3:35:e0:0c:86:75:6d:93:10:16:06:11:ed:f3:fa:
b4:7d:f5:ab:bd:4d:06:b6:39:fe:0a:31:fd:9e:66:18:00:45:
1c:c7:bf:ff:60:51:e2:9b:13:ba:74:88:f2:5f:33:1a:54:35:
9b:1e:46:08:05:4e:5f:fb:61:74:3a:0d:91:5a:86:d3:33:d8:
da:0b:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:23 2026 by rpki-client