Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: B73tiDmv6t9lgJ79nfS7msiE9L/ti6mqT6WAozOiKn0=
Subject key identifier: CD:2E:5B:2D:F0:9D:24:A6:56:D6:18:AD:14:7C:DF:B3:ED:11:54:1A
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 019DA3E6E8DA89394A6718AC03D4C909F1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 04:01:52 +0000
Manifest this update: Sun 19 Apr 2026 04:01:52 +0000
Manifest next update: Mon 20 Apr 2026 04:01:52 +0000
Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: PbHQ47HKJCoBKnYdnP8ILAsQlvx5AYv4fvmNgqfN8LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e8:da:89:39:4a:67:18:ac:03:d4:c9:09:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Apr 19 04:01:52 2026 GMT
Not After : Apr 20 04:01:52 2026 GMT
Subject: CN=cd2e5b2df09d24a656d618ad147cdfb3ed11541a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:91:29:f8:8a:83:f8:65:13:59:05:28:27:
1d:77:6b:ee:d4:6f:60:74:e0:29:da:56:72:f8:06:
e8:92:98:b3:86:95:77:73:02:5b:42:f9:b4:a5:48:
d1:dc:a6:76:81:a0:69:a0:13:a3:19:08:9f:28:5e:
da:8f:18:c1:06:90:33:74:58:42:85:86:03:16:21:
15:c1:19:4a:8a:94:67:cd:4b:0f:37:9f:93:b9:55:
5f:80:6b:5e:c1:d0:65:18:ab:ce:f0:fd:e7:94:7b:
c4:b1:92:3c:6a:71:f2:f3:57:be:65:8f:f7:a5:88:
c8:65:3a:cb:d7:98:53:22:cf:ea:66:b8:a5:86:9c:
c7:2c:c7:f4:ab:60:54:f0:9f:81:a7:32:1d:c7:c5:
8f:70:a6:24:3e:cb:d0:a1:3b:63:8c:7b:37:9e:24:
8a:b1:e4:e3:57:03:93:95:1a:71:27:1b:61:d7:59:
16:bb:41:25:e4:f9:00:89:8b:62:7f:27:ad:d2:11:
6d:af:e7:6f:b9:c6:81:c4:a0:3c:2d:09:65:10:5b:
2d:7f:9d:1d:93:48:0b:b9:53:ee:be:4e:69:b0:27:
d1:96:8f:8a:6f:fc:b9:77:18:53:8e:65:c7:11:e4:
01:ce:01:e8:d6:45:f0:95:68:8d:02:26:0f:fd:99:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:5B:2D:F0:9D:24:A6:56:D6:18:AD:14:7C:DF:B3:ED:11:54:1A
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b5:c3:20:ae:71:04:4d:56:5a:8b:04:34:7e:6d:5c:76:9b:
fe:2f:15:92:b2:d2:8c:00:ba:72:cf:a1:da:0e:61:6c:a8:35:
1c:0e:06:4e:1e:1f:4d:31:07:97:e1:e0:dd:c8:05:91:a4:e4:
68:44:fa:ca:c0:86:aa:4d:91:ca:e1:43:12:43:75:0d:44:60:
ef:e0:62:85:d7:3e:43:7b:c2:c0:4a:a3:00:5d:bd:4f:c8:cd:
54:95:5a:0b:b9:78:eb:32:a8:8d:15:e9:ab:31:61:bd:41:55:
2c:7f:e9:03:ad:14:b3:68:55:c4:e7:ea:7b:ac:a1:24:04:62:
7b:76:26:5a:f9:f3:bd:85:db:b9:d8:a8:ca:8a:5d:ca:b7:52:
aa:e0:3c:1f:f1:eb:2a:7f:04:51:9f:38:43:28:1d:7c:a8:15:
07:43:07:15:cc:97:9c:38:f3:69:0e:6c:cd:ff:e6:7e:d0:f8:
2f:ed:0c:0d:6c:39:86:f7:4c:72:f9:1b:37:ab:20:1a:cd:2f:
64:49:b4:4d:a6:d8:14:ca:14:6f:9a:0f:a4:d2:60:67:9a:e4:
12:ae:f2:0a:7a:97:20:d6:f1:04:f0:0d:a7:1e:4e:e5:e4:05:
55:63:2d:cb:54:34:73:cb:38:a9:a5:0d:e3:0e:70:7b:1a:9c:
06:a7:79:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5ujaiTlKZxisA9TJCfHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz
NzBhMTkwHhcNMjYwNDE5MDQwMTUyWhcNMjYwNDIwMDQwMTUyWjAzMTEwLwYDVQQD
EyhjZDJlNWIyZGYwOWQyNGE2NTZkNjE4YWQxNDdjZGZiM2VkMTE1NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvqRKfiKg/hlE1kFKCcdd2vu1G9g
dOAp2lZy+AbokpizhpV3cwJbQvm0pUjR3KZ2gaBpoBOjGQifKF7ajxjBBpAzdFhC
hYYDFiEVwRlKipRnzUsPN5+TuVVfgGtewdBlGKvO8P3nlHvEsZI8anHy81e+ZY/3
pYjIZTrL15hTIs/qZrilhpzHLMf0q2BU8J+BpzIdx8WPcKYkPsvQoTtjjHs3niSK
seTjVwOTlRpxJxth11kWu0El5PkAiYtifyet0hFtr+dvucaBxKA8LQllEFstf50d
k0gLuVPuvk5psCfRlo+Kb/y5dxhTjmXHEeQBzgHo1kXwlWiNAiYP/Zm7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0uWy3wnSSmVtYYrRR837PtEVQaMB8GA1UdIwQY
MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt
YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi
LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLXDIK5x
BE1WWosENH5tXHab/i8VkrLSjAC6cs+h2g5hbKg1HA4GTh4fTTEHl+Hg3cgFkaTk
aET6ysCGqk2RyuFDEkN1DURg7+Bihdc+Q3vCwEqjAF29T8jNVJVaC7l46zKojRXp
qzFhvUFVLH/pA60Us2hVxOfqe6yhJARie3YmWvnzvYXbudioyopdyrdSquA8H/Hr
Kn8EUZ84QygdfKgVB0MHFcyXnDjzaQ5szf/mftD4L+0MDWw5hvdMcvkbN6sgGs0v
ZEm0TabYFMoUb5oPpNJgZ5rkEq7yCnqXINbxBPANpx5O5eQFVWMty1Q0c8s4qaUN
4w5wexqcBqd56Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:29:26 2026 by rpki-client