Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: CGNfsCAHibOQa6V6FKr2y2oEMRG7kMg+N8HtGZwdqls=
Subject key identifier: 6E:5F:54:30:3F:12:9D:7B:D3:F2:7D:98:D4:20:35:C9:3E:F9:37:5C
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019D9C9A1B83BFCB93F0FCEC2BE90C220FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0BF2
Signing time: Fri 17 Apr 2026 18:00:38 +0000
Manifest this update: Fri 17 Apr 2026 18:00:38 +0000
Manifest next update: Sat 18 Apr 2026 18:00:38 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: peoqSIAkSCRirLMiDUSkFJZN9csugVFYUujqDHvpkNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:1b:83:bf:cb:93:f0:fc:ec:2b:e9:0c:22:0f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Apr 17 18:00:38 2026 GMT
Not After : Apr 18 18:00:38 2026 GMT
Subject: CN=6e5f54303f129d7bd3f27d98d42035c93ef9375c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:a9:41:f6:3d:af:c0:1b:ac:ed:0b:94:51:
70:37:8c:98:d3:42:71:26:cf:8b:00:ee:db:ae:dc:
f4:ce:00:81:14:57:ea:e5:0e:1f:f5:36:4f:36:03:
2b:d2:f8:15:6e:ff:1c:eb:cc:42:4f:8a:7f:9f:4b:
62:9c:8a:2d:b8:a2:d9:f3:5d:d1:e5:8b:6f:1d:57:
98:86:30:73:1b:db:bf:93:bc:0e:35:9b:f9:3e:45:
74:16:16:97:4c:60:9d:cf:db:ba:6e:df:d8:50:6c:
c3:c6:7c:2c:91:9f:46:de:db:e2:e1:dc:40:35:c4:
3d:9d:bc:e2:d3:2d:b8:39:5b:32:d1:7e:3e:ff:7b:
30:df:9b:17:23:33:dc:73:f3:ea:b3:c0:83:12:7c:
95:cb:d6:7c:e2:64:68:c7:07:ac:41:5f:2d:dc:57:
d7:fa:b4:4c:e3:e8:ef:28:91:08:f5:34:92:4d:7b:
8f:9b:57:3f:45:2f:5c:f9:0e:e1:8c:4e:77:29:a9:
3d:82:77:b7:39:c7:c2:78:d9:48:5a:7b:b5:72:29:
5a:02:04:05:69:ac:d2:61:5a:64:4d:25:f5:c2:39:
e5:22:b4:60:9e:58:92:d5:9b:94:94:69:43:8d:10:
c0:2a:dd:01:2e:3e:7f:f6:7b:59:0d:37:83:4c:72:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5F:54:30:3F:12:9D:7B:D3:F2:7D:98:D4:20:35:C9:3E:F9:37:5C
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1c:a7:97:90:ac:f3:90:d6:63:3e:76:c3:12:ee:88:39:8d:
8a:a0:8b:1c:58:69:d9:18:c0:5c:09:42:94:a7:e2:ba:b2:41:
d3:b5:c1:b4:d1:08:62:e7:87:24:86:d4:ba:8f:29:67:7c:69:
43:5f:d4:65:27:93:88:dc:ce:17:aa:1a:5e:28:62:61:44:2d:
ab:30:b0:f8:58:95:52:3d:20:25:96:84:01:3e:65:a2:f1:53:
71:d0:c4:e7:31:b1:ad:d4:16:de:f2:51:c2:65:62:20:8e:9e:
03:77:c3:5a:e7:51:b6:a3:7b:2d:36:82:db:f4:98:79:0c:ed:
0a:b9:37:df:c7:df:90:60:ac:1b:33:f9:e0:5c:5f:5c:ea:2b:
2b:a5:0d:3c:98:a9:86:7a:9e:75:39:8f:2f:7e:27:c4:a8:17:
7f:3c:43:92:d5:60:69:d7:e4:10:23:ff:99:d6:fe:5d:a5:1a:
52:f9:cb:d7:2e:bb:b0:04:96:df:18:04:18:b5:fd:19:58:7a:
4e:21:ed:d2:ab:17:27:80:b3:06:5e:3c:a5:fe:ac:f8:59:12:
c6:37:7f:54:0c:8e:db:1b:c4:71:93:27:e2:d8:b0:c3:df:62:
03:06:78:a8:b6:b7:d2:51:b7:a1:19:40:25:f3:60:d8:32:73:
ce:3c:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:15 2026 by rpki-client