Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: uEriemfQzjk8zwZHml+BARlR2B4MrCO4TdJiaErwH4A=
Subject key identifier: 76:F7:AE:8F:7C:57:3B:BA:75:2E:7B:91:9D:D8:EB:66:DB:74:E5:1E
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019D9AAB8BDEE54B3D3AC353908A04C7965E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:00:26 +0000
Manifest this update: Fri 17 Apr 2026 09:00:26 +0000
Manifest next update: Sat 18 Apr 2026 09:00:26 +0000
Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: YBOvYNZOUgfXzEPxiHXri87uLyfUGkyYLKif4XwUf+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:8b:de:e5:4b:3d:3a:c3:53:90:8a:04:c7:96:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Apr 17 09:00:26 2026 GMT
Not After : Apr 18 09:00:26 2026 GMT
Subject: CN=76f7ae8f7c573bba752e7b919dd8eb66db74e51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:85:12:c0:42:34:4c:78:cb:1d:f2:32:c1:
ee:99:01:1d:b3:8b:11:de:95:27:bb:71:f1:49:58:
a2:86:1a:cd:87:28:5b:8e:36:8f:44:b0:e7:83:1f:
00:c6:aa:a3:27:7c:c6:6e:d0:cd:e8:c3:ad:77:a8:
a4:91:76:61:4a:fc:11:11:57:b9:9c:ca:ad:bf:79:
0a:d2:6c:37:ef:9a:4e:d2:4f:f4:3d:11:bc:51:6b:
ef:dc:4d:4c:87:ad:5b:5a:bc:a4:e5:f9:d6:6c:5a:
c7:c5:51:c1:0d:20:0e:70:fb:0a:f8:42:a0:76:0f:
0a:d5:04:29:e7:ae:8d:42:12:3d:20:56:b6:1e:9a:
77:d9:47:3d:92:d5:9a:09:c5:2d:6f:b9:e2:30:c5:
0f:8e:18:41:ed:f4:19:28:7b:15:1e:4d:c3:78:69:
ca:a8:21:d5:f0:40:af:24:a5:a2:ce:d1:33:d7:09:
b8:3e:e5:2a:ff:3e:22:a0:24:4a:27:4c:f9:48:b7:
95:5a:74:a4:b0:7b:19:30:ca:a9:4b:3a:07:77:27:
c8:07:44:86:25:df:17:b7:d8:21:23:5f:85:a0:2f:
74:6d:f1:dd:91:f1:b2:64:4b:9b:6b:01:c9:7c:72:
b5:ac:58:38:47:93:90:99:7c:d4:1d:bb:53:45:83:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F7:AE:8F:7C:57:3B:BA:75:2E:7B:91:9D:D8:EB:66:DB:74:E5:1E
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ce:5a:a9:b8:13:5f:d5:e6:e1:8f:3a:f6:1f:58:f5:5c:55:
50:ff:d3:fd:20:a6:05:95:2a:7a:96:09:90:73:f5:6a:8d:97:
83:5f:aa:24:6f:94:a5:7a:67:44:b1:a8:f6:64:8c:2e:18:99:
0a:2f:88:ef:ff:39:c9:ac:ae:48:86:e0:08:f0:3f:25:eb:57:
91:47:35:3c:ab:6c:44:d4:f3:23:8a:dc:db:eb:0e:b2:d8:b0:
ac:1e:d8:f6:07:94:c7:e2:22:47:7d:14:b6:4d:81:f1:ce:ea:
e5:6e:48:2a:66:87:d8:d6:b0:cf:f9:44:85:74:00:1c:6f:03:
b5:47:df:5d:33:d7:ba:db:2a:a8:9e:9e:82:e9:48:96:de:bd:
a8:6a:cc:7f:95:05:af:2a:60:92:f7:d4:38:89:0c:a7:e7:04:
1c:65:25:03:81:4c:e1:b0:0d:40:2f:90:ee:70:3e:73:29:b0:
d3:d0:1e:82:f2:50:c9:8a:0e:52:9a:f8:6f:9a:89:af:17:b1:
e6:49:15:ec:a2:70:a6:99:39:45:30:5b:09:3a:30:49:3c:8c:
56:5f:04:dc:53:6c:0e:0c:98:5f:10:1a:fa:98:b3:91:2d:22:
fe:31:64:d2:3a:d1:8b:09:c6:b8:7f:bc:69:f9:cb:7f:58:24:
1f:f6:ea:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq4ve5Us9OsNTkIoEx5ZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZmZmMWJkNzcxMjg3Y2VkNGM0ZGQ2ZDhhODUxZDJhZDc3
MDY2MWQwHhcNMjYwNDE3MDkwMDI2WhcNMjYwNDE4MDkwMDI2WjAzMTEwLwYDVQQD
Eyg3NmY3YWU4ZjdjNTczYmJhNzUyZTdiOTE5ZGQ4ZWI2NmRiNzRlNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRaFEsBCNEx4yx3yMsHumQEds4sR
3pUnu3HxSViihhrNhyhbjjaPRLDngx8AxqqjJ3zGbtDN6MOtd6ikkXZhSvwREVe5
nMqtv3kK0mw375pO0k/0PRG8UWvv3E1Mh61bWryk5fnWbFrHxVHBDSAOcPsK+EKg
dg8K1QQp566NQhI9IFa2Hpp32Uc9ktWaCcUtb7niMMUPjhhB7fQZKHsVHk3DeGnK
qCHV8ECvJKWiztEz1wm4PuUq/z4ioCRKJ0z5SLeVWnSksHsZMMqpSzoHdyfIB0SG
Jd8Xt9ghI1+FoC90bfHdkfGyZEubawHJfHK1rFg4R5OQmXzUHbtTRYNXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHb3ro98Vzu6dS57kZ3Y62bbdOUeMB8GA1UdIwQY
MBaAFK3/8b13EofO1MTdbYqFHSrXcGYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMt
NDk0M2I0YjQyZWJiLzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMtNDk0M2I0YjQyZWJi
LzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM5aqbgT
X9Xm4Y869h9Y9VxVUP/T/SCmBZUqepYJkHP1ao2Xg1+qJG+UpXpnRLGo9mSMLhiZ
Ci+I7/85yayuSIbgCPA/JetXkUc1PKtsRNTzI4rc2+sOstiwrB7Y9geUx+IiR30U
tk2B8c7q5W5IKmaH2Nawz/lEhXQAHG8DtUffXTPXutsqqJ6egulIlt69qGrMf5UF
rypgkvfUOIkMp+cEHGUlA4FM4bANQC+Q7nA+cymw09AegvJQyYoOUpr4b5qJrxex
5kkV7KJwppk5RTBbCTowSTyMVl8E3FNsDgyYXxAa+pizkS0i/jFk0jrRiwnGuH+8
afnLf1gkH/bqfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:45 2026 by rpki-client