Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: MeFc5Wc1k+TSD1rS7VEq5BL9i2KvUH5FMf1Ay9R80v8=
Subject key identifier: 46:C2:BB:36:37:BF:0C:67:F3:AB:43:E7:28:96:7A:49:87:3B:AA:47
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019D9AABD5CB727FBDE17B4696876269B618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0BF1
Signing time: Fri 17 Apr 2026 09:00:45 +0000
Manifest this update: Fri 17 Apr 2026 09:00:45 +0000
Manifest next update: Sat 18 Apr 2026 09:00:45 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: CfNVsWm8ppAjMACVXV0wo98bgVeqJoYcwFiWSVBPCbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d5:cb:72:7f:bd:e1:7b:46:96:87:62:69:b6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Apr 17 09:00:45 2026 GMT
Not After : Apr 18 09:00:45 2026 GMT
Subject: CN=46c2bb3637bf0c67f3ab43e728967a49873baa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:28:10:56:c7:93:91:9f:e2:b0:40:45:39:
a5:d8:94:6a:21:c7:c4:da:c1:5f:b7:2c:23:1c:0f:
de:d9:d8:48:1b:09:df:1e:a0:5f:77:6c:e9:e3:a5:
42:77:90:06:49:79:c3:93:3b:1e:ce:25:8f:43:6d:
21:31:d9:a9:cf:84:89:5b:7d:05:33:47:2c:d9:5b:
94:6f:b9:89:9a:28:b1:fa:24:3e:89:75:21:18:84:
8b:89:84:f3:e4:4d:a3:99:9d:8f:97:55:59:23:5d:
43:92:d5:d1:18:d0:40:64:af:ac:14:37:df:93:6b:
da:c5:47:c4:89:43:e8:20:6c:27:90:76:4a:df:d6:
92:95:e2:7b:cb:36:43:83:8a:ae:f4:ed:d3:3b:fd:
74:65:a5:71:88:16:51:b6:d6:b0:ff:36:da:a5:a5:
ff:5a:16:4f:db:07:ba:0a:72:8c:4d:5f:1f:e7:0f:
5c:cf:70:8d:27:ff:19:96:02:48:14:2a:3e:88:f0:
11:0b:fe:78:fe:af:6a:42:86:5e:15:6c:b3:20:52:
ec:c3:60:d5:5e:52:a9:7f:85:ac:d1:ab:75:0f:ea:
29:b3:8a:ab:ca:5c:42:c9:c8:81:b0:06:d8:cf:e8:
de:fd:47:09:4e:03:66:0f:04:21:73:b1:f5:6a:47:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C2:BB:36:37:BF:0C:67:F3:AB:43:E7:28:96:7A:49:87:3B:AA:47
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:02:bd:f0:40:6f:b6:a7:48:5c:3d:23:39:47:c2:db:90:
c8:c2:85:72:5f:f3:56:fb:93:40:ae:11:29:c3:d8:77:e0:c5:
38:3b:7b:80:51:09:06:3a:27:f6:2a:8b:6f:58:29:c5:72:8a:
70:e5:ba:0c:45:99:81:a4:be:a9:6c:12:5b:0b:90:13:0c:65:
5e:c3:44:fa:c8:a8:ab:28:25:67:e1:87:b7:f8:82:e5:73:55:
39:99:1c:15:f3:4b:96:f0:a5:f9:d8:04:a3:18:db:57:e6:2a:
02:38:7e:1e:b0:eb:6e:c3:b9:d1:16:97:aa:b9:d7:1e:5d:7a:
c0:1b:da:a0:f8:81:bf:92:08:77:58:6f:c4:15:81:dd:7b:5c:
01:19:f2:41:c0:5d:8e:28:c7:bb:82:df:34:18:b7:fb:fe:f7:
04:24:bb:9d:86:c6:f7:2d:76:ea:45:54:a1:a3:08:2c:20:82:
98:6d:1d:b0:52:24:3c:e6:dc:b4:82:0b:17:ab:21:aa:c1:90:
d7:9f:eb:31:d3:c0:b0:08:68:8d:b3:86:a5:2c:29:9e:20:71:
6e:42:94:4f:8d:78:37:f9:59:41:b8:97:c3:5b:2f:5a:8f:03:
57:5e:a0:12:0e:57:d2:a2:f2:80:94:45:e5:74:44:0e:24:eb:
51:aa:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:29 2026 by rpki-client