Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: IRNtsWdHDboXb34r1ULNn9c+zs+GrFiHpaKL5GWsbJ8=
Subject key identifier: 46:81:08:19:A1:66:83:92:E2:9B:EB:79:7D:CA:06:DF:50:FD:D8:60
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019D9A071D2B552C4A3B23C4E296CEBB0563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 06:00:50 +0000
Manifest this update: Fri 17 Apr 2026 06:00:50 +0000
Manifest next update: Sat 18 Apr 2026 06:00:50 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: ktpWSRLI1iaP+PSOW55xbN0MG3rTK/iCtsaaZvAQEY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1d:2b:55:2c:4a:3b:23:c4:e2:96:ce:bb:05:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Apr 17 06:00:50 2026 GMT
Not After : Apr 18 06:00:50 2026 GMT
Subject: CN=46810819a1668392e29beb797dca06df50fdd860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f3:96:d8:e6:d8:c9:39:ad:ca:f9:bd:21:55:
4d:4d:e1:81:39:f6:26:af:05:11:74:0a:ea:a7:c7:
33:36:0b:f1:79:ca:98:a4:5e:51:e7:84:c0:fd:a8:
5f:47:cc:d8:80:ec:93:0d:32:a8:37:8c:74:f7:52:
0b:84:8b:47:56:0a:80:25:82:20:98:f9:a4:74:22:
9e:36:3d:a3:c3:90:1e:03:4e:f1:4b:9e:f7:b1:68:
b4:32:e8:14:83:07:e3:37:f4:ed:d8:33:fe:00:00:
54:a1:aa:30:14:14:92:f2:7f:72:c9:69:0b:c4:4a:
cd:15:de:d0:41:b0:eb:4e:97:80:54:57:f3:7e:8b:
e5:d7:c3:f8:76:b3:13:d3:63:54:63:ab:9e:96:03:
aa:0c:24:c1:2d:74:fc:c6:d4:7f:7b:0f:d7:88:a6:
b4:8e:29:63:65:99:47:0b:bb:88:83:5f:f5:6f:44:
cc:4b:d3:47:d3:a6:34:04:02:d3:05:bc:e8:c7:d0:
d3:4b:11:84:25:ff:50:c4:0a:18:05:b4:35:bb:3f:
79:f1:c9:36:cd:64:e7:24:f1:e6:60:12:2a:7b:0f:
61:9b:5a:91:dc:f8:eb:0c:66:2a:7c:a4:76:13:fa:
5b:c0:cb:2d:88:3b:cf:0b:9c:2f:b3:ee:02:54:50:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:08:19:A1:66:83:92:E2:9B:EB:79:7D:CA:06:DF:50:FD:D8:60
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:3c:0a:fa:2b:77:b1:fc:7d:76:5b:55:b2:ed:d0:9f:51:
74:a5:88:84:92:55:4d:8d:25:e1:a3:35:7f:35:3e:69:7f:2e:
72:73:fe:9f:57:c7:90:e9:48:fa:01:b1:bb:e8:83:12:78:8f:
ba:e0:97:43:83:fd:2c:e7:80:73:a1:06:dd:1e:31:82:21:25:
3f:a1:9d:d7:c4:8a:22:78:98:d5:79:f4:ae:54:f0:61:ed:d2:
71:b2:bb:be:04:9d:fd:7b:76:04:c6:7c:62:26:85:0e:a8:58:
c7:99:6e:75:53:2d:b4:55:4c:ec:f1:20:1d:27:c1:e7:c2:ea:
cc:1e:ff:c0:ab:29:c7:37:85:e3:04:97:e6:a0:7d:21:de:3e:
71:76:e8:8d:39:10:03:57:c2:49:8d:8d:77:2a:85:68:5d:85:
40:42:be:b5:da:1f:f0:53:91:ae:79:c9:53:e8:6b:0e:af:78:
24:a8:ac:a0:bc:76:40:4b:8b:2f:33:1f:f1:30:79:59:fc:38:
9a:4f:b3:ac:fa:7a:60:bd:18:82:42:d2:d0:fc:72:b9:f9:16:
67:84:59:28:72:c2:50:b8:75:fa:53:ed:86:ef:ab:6e:ca:c2:
ae:17:65:f4:65:f1:d1:67:4c:23:d6:b4:0d:de:17:cd:b2:69:
49:79:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:34 2026 by rpki-client