Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: E94qHfft36RT1AbJR+9hDFpD9ouxSkahr3kNhLIwCp0=
Subject key identifier: 28:80:61:7C:C4:19:F9:43:BB:05:AB:83:D1:B5:C3:DE:0A:89:7E:67
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 019D99D082B46C416E30A886FF1AEA5078AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 15B0
Signing time: Fri 17 Apr 2026 05:01:12 +0000
Manifest this update: Fri 17 Apr 2026 05:01:12 +0000
Manifest next update: Sat 18 Apr 2026 05:01:12 +0000
Files and hashes: 1: cIW1NaRR4MnpEAYWVEYRn3myJ7A.roa (hash: 2eOp6aCZfu2yFIk/ZDyv7dqr0KWAjWjEtDLzMW5xaqg=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: nhsuDAg9Wkbb1NWcHjwgCiD7EWD0fAxrdz4ZpH+D4+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:82:b4:6c:41:6e:30:a8:86:ff:1a:ea:50:78:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Apr 17 05:01:12 2026 GMT
Not After : Apr 18 05:01:12 2026 GMT
Subject: CN=2880617cc419f943bb05ab83d1b5c3de0a897e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6e:fd:31:0a:d3:51:25:61:a4:05:95:09:8a:
fc:ce:a0:fc:ef:b5:40:5c:0b:54:6c:6a:fa:fc:11:
63:4b:5f:f7:81:1b:1e:11:2d:b7:42:f2:29:9d:99:
6c:6a:4e:c7:60:41:69:56:65:f3:6f:3d:8c:36:df:
ee:fe:96:44:78:7d:59:15:65:85:dd:e6:d7:25:39:
95:23:b1:7f:cf:f6:bb:0b:0a:d6:dd:d2:68:db:c6:
8a:69:a0:33:dc:15:28:b4:46:bd:62:81:d4:d6:85:
21:9a:41:59:f3:8e:1c:25:ff:3d:37:b7:ff:18:b2:
4d:90:64:b7:d2:f9:cd:31:96:0c:bc:77:c3:c2:d4:
9c:ae:e7:8e:85:a8:6f:7c:f3:b8:38:4b:e2:51:11:
13:5c:a6:f9:d2:7e:86:ba:46:a6:51:6f:14:87:9d:
ed:30:65:35:b5:89:db:55:08:bf:b1:95:73:d0:1f:
3d:9b:52:73:9e:94:f2:fd:16:28:8a:66:b8:4a:b4:
c6:16:3d:04:d7:8b:da:97:8f:0c:33:d7:76:c1:84:
a9:c4:9c:98:6d:7c:56:37:ca:d6:e5:ed:1a:45:62:
d8:93:9a:07:94:ec:be:45:03:72:95:20:3c:d2:52:
28:16:e3:81:6d:e0:f0:24:29:70:2a:34:2a:5c:43:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:61:7C:C4:19:F9:43:BB:05:AB:83:D1:B5:C3:DE:0A:89:7E:67
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:25:7e:14:63:91:f4:1c:7d:c0:94:8b:78:84:50:c9:ef:
96:e5:19:11:f8:14:ac:48:25:c2:2b:6e:30:aa:f6:e2:9e:39:
20:f9:47:af:9d:21:ac:31:6b:27:6d:d0:29:ce:62:8a:da:83:
69:e8:7d:6c:0d:87:f9:77:31:e0:76:48:54:71:d4:2b:d4:4e:
51:94:c5:1d:8e:9d:99:95:ed:ee:b4:ca:74:99:82:f4:14:89:
df:05:a8:5f:0b:b2:fe:cd:5d:d6:9f:42:61:11:8a:e3:c9:68:
a5:4e:50:52:17:a1:9c:53:83:1d:ba:cc:b4:be:e9:9c:34:fb:
cf:42:85:d3:77:02:69:8e:a8:9e:0c:7f:1a:b1:0e:51:1d:ec:
15:95:8d:53:98:d5:a4:80:59:dc:12:0b:8b:16:40:b4:bd:83:
16:76:fb:16:e2:f2:a9:3e:c4:49:b6:5b:27:44:f6:06:c0:b0:
90:50:62:06:32:5e:64:5d:f3:02:6c:f7:26:f2:f7:94:61:c5:
a6:5a:93:d1:cf:0b:22:c6:52:63:0b:9f:c7:0d:12:3a:6e:33:
d2:c0:36:42:ac:9f:f7:40:e9:a0:ec:f3:34:a3:65:ad:40:bc:
27:19:d5:a0:54:14:1a:ff:14:15:5a:89:d6:b4:eb:91:de:e2:
7c:d4:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:56:07 2026 by rpki-client