Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: ptw50d/7FiR8RbB7ULOCIDVwbEsnVXeWsh1Mausbw9I=
Subject key identifier: F9:B5:6F:83:14:5C:77:A8:BE:95:72:A2:AC:49:93:55:73:7F:AE:35
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 019D9A3E292DC993E054DEF2321466243F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0B9F
Signing time: Fri 17 Apr 2026 07:00:58 +0000
Manifest this update: Fri 17 Apr 2026 07:00:58 +0000
Manifest next update: Sat 18 Apr 2026 07:00:58 +0000
Files and hashes: 1: cnFiZY7qwJbMwSvpZZiZsqKr_Do.roa (hash: 48IPezm1nI8pkv7kwBfhTKNFTjJ1YkJ3TGASpAZ4rvY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: ciZyAvXq0hSa4nQhGDlulIRLdiiszoxmg++J7u0RlEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:29:2d:c9:93:e0:54:de:f2:32:14:66:24:3f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Apr 17 07:00:58 2026 GMT
Not After : Apr 18 07:00:58 2026 GMT
Subject: CN=f9b56f83145c77a8be9572a2ac499355737fae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:96:f8:c0:47:7a:67:9d:90:f2:d3:a2:71:
fc:42:24:90:30:5b:5e:cc:9b:2f:ee:08:a0:bc:39:
c7:76:42:be:91:0e:53:fa:57:ed:e6:7b:18:bf:2f:
86:ca:18:e6:63:5a:c0:12:06:85:28:53:5b:8a:07:
fb:2c:e6:3d:41:a0:13:83:61:c3:76:54:49:20:14:
a0:37:6c:4d:88:5d:44:e7:06:3e:5b:4c:73:37:95:
57:30:24:62:ab:21:d2:66:d7:8d:94:4e:11:0e:c0:
4f:6f:c2:47:a1:a4:ca:f7:9f:b4:be:57:f8:b5:9f:
8d:5a:fb:6d:4a:06:96:0a:40:c1:e0:c7:41:04:09:
ee:2b:41:a9:44:4b:15:e8:96:6b:15:bc:4e:f3:18:
f7:58:28:eb:06:46:4f:77:4b:22:ac:ba:42:1b:6f:
3f:ac:05:1a:19:ef:09:97:25:22:5e:73:17:b7:3a:
fe:0e:c0:79:ac:c0:65:cd:f2:d5:d6:c8:5a:97:6c:
aa:e2:53:62:5c:77:54:bf:a0:65:0d:d6:af:03:17:
4a:2d:9f:26:d4:1e:1f:d7:ac:4e:74:15:b6:24:b6:
3f:76:75:09:60:da:f0:9d:72:1b:c8:42:4e:40:d9:
0c:0e:11:eb:f8:f1:a2:a4:fb:35:57:fe:82:80:ad:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B5:6F:83:14:5C:77:A8:BE:95:72:A2:AC:49:93:55:73:7F:AE:35
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a3:86:58:c5:9e:19:f5:6c:3e:fe:c8:47:a1:f7:d5:f7:85:
f7:2f:dd:d2:83:5f:71:10:72:8b:06:50:85:06:8c:61:33:32:
2e:a0:d9:26:d1:67:38:be:2e:1a:9f:9b:dc:06:72:17:ec:45:
5d:26:0f:50:b5:e5:fb:8b:97:ec:15:63:ee:24:38:bc:d1:19:
49:99:19:1a:be:9d:9f:0a:3f:74:14:42:b3:dc:44:13:88:6a:
a8:c6:fc:7c:47:be:12:f6:99:a4:dd:85:05:5f:8c:79:74:31:
43:e6:88:b3:f1:7d:17:45:e4:af:73:74:6a:2f:f6:05:fd:db:
e8:4a:71:c2:b6:3f:04:fc:53:ac:bf:5d:c3:14:32:5c:17:5a:
db:31:8d:d6:12:4d:be:8c:52:a1:d3:0a:ba:b5:d6:64:75:fd:
e2:98:b7:61:c6:c9:f2:c2:9c:8e:4c:c3:85:e9:1f:8c:73:43:
71:66:3a:43:96:3f:7e:de:55:4a:fc:ac:dc:5b:61:cc:72:36:
16:8b:13:67:de:9c:ad:f9:ae:97:b2:03:26:3d:37:de:63:e8:
f0:15:da:55:29:e6:b1:69:25:62:c2:b9:9f:d1:ac:60:bb:e5:
c9:26:eb:f1:0b:cd:8b:22:83:cb:79:6b:5b:ff:60:f0:42:af:
fc:cb:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:49 2026 by rpki-client