Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: fVRUklVskCXt7lIKbFeniRqSl/x3zSHjuHzth5ztwow=
Subject key identifier: 1C:CD:28:D0:48:80:36:96:F1:BA:C1:F4:6C:4E:4F:38:5F:15:49:78
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 019D992B525B4C719E743F6CE9E940D25E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:46 +0000
Manifest this update: Fri 17 Apr 2026 02:00:46 +0000
Manifest next update: Sat 18 Apr 2026 02:00:46 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: n64bk+uU+GOMHMvrQS8RnIpuVnGx5ln/lG/G8rDnwc8=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:52:5b:4c:71:9e:74:3f:6c:e9:e9:40:d2:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Apr 17 02:00:46 2026 GMT
Not After : Apr 18 02:00:46 2026 GMT
Subject: CN=1ccd28d048803696f1bac1f46c4e4f385f154978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:84:5a:4f:a9:91:c9:94:08:14:d4:bc:ee:
48:17:89:36:a0:72:90:6c:f6:5c:6d:1d:ac:ee:45:
34:33:ec:4b:fe:8a:ab:9c:12:9b:bd:29:e8:75:0e:
c1:c7:84:0f:40:d0:e3:02:18:aa:e5:ea:07:6e:f6:
32:24:89:4c:ba:ed:1c:8f:91:20:5e:8b:ae:73:3d:
5f:10:fb:3d:39:ff:60:2e:9a:77:5e:59:4a:12:b9:
b4:b3:29:2e:a4:4f:53:94:ea:04:fb:a1:61:eb:59:
2f:56:1d:a4:df:3e:9d:44:65:dc:77:43:92:39:35:
72:d0:cc:2e:df:65:78:0e:e2:6e:02:4a:a6:aa:3d:
5c:de:f4:e5:de:56:ad:ab:66:be:ed:47:28:eb:a0:
28:c2:60:45:5d:72:8c:df:43:29:c1:0a:27:d2:8f:
0f:17:8a:0c:03:e1:a0:d2:4e:ce:0b:0c:a6:02:6d:
2d:67:03:02:5d:e4:48:7a:c8:50:b1:a1:2e:da:34:
4b:4e:2e:5f:42:6e:b9:7f:2a:b2:0e:83:06:6c:f4:
68:05:0d:00:11:fd:b2:68:54:e6:32:0c:81:1d:c0:
ea:f5:18:97:ee:b2:4b:7b:93:38:84:fb:1e:a9:06:
a1:5b:f0:a2:4f:e1:c4:dd:8b:b5:10:71:b2:87:d5:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:28:D0:48:80:36:96:F1:BA:C1:F4:6C:4E:4F:38:5F:15:49:78
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ea:67:bd:c8:fb:46:e0:87:59:ee:42:8f:58:1a:c9:f3:47:
af:e9:cf:f2:b3:96:e3:8a:e9:d4:6d:6b:a1:5f:b6:70:77:da:
ec:df:5c:80:59:2c:61:1b:fc:b6:ee:b2:43:fd:c1:58:99:4d:
f3:23:e0:89:f5:a5:0b:c1:4a:9e:fb:5c:10:c6:d3:bb:c1:c5:
23:41:23:c3:98:9d:db:d0:bf:5b:be:cd:54:e1:fb:f7:bc:83:
3c:57:92:64:66:32:47:ec:6b:a7:3c:fb:d4:29:8e:11:86:9c:
3b:8f:98:06:13:8f:7a:be:e3:a1:76:c2:57:6e:ea:7f:9a:29:
9f:d0:a6:99:05:41:3b:cc:77:96:84:7f:63:15:14:0d:39:4f:
3d:97:da:cf:2b:27:49:9f:cd:e5:0a:95:42:e7:b4:a9:47:26:
7a:b1:5d:3f:1c:85:65:f3:3c:41:6f:74:77:95:be:f6:95:5b:
86:77:28:10:07:44:b5:f2:62:54:3f:6d:eb:e9:bd:ba:81:77:
a3:49:53:58:a1:37:8a:e1:70:b0:fb:83:8c:ea:c7:40:31:74:
7b:2a:b8:97:4c:c0:73:c8:7b:d4:e6:b2:93:da:db:03:c1:4b:
f1:42:93:8a:d4:4c:2f:f9:35:44:56:c5:5c:0c:c2:cf:00:8a:
2a:79:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:42 2026 by rpki-client