Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: n7xQXdMLWRoQARKr1Wkl2nUf63LnJ+6pp8JDC0wgmVg=
Subject key identifier: A1:76:07:FF:F8:32:AA:35:45:28:83:C9:9C:E8:EF:A3:0D:9F:91:19
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 019DA378DA37698D54E0F256492735AE4145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:39 +0000
Manifest this update: Sun 19 Apr 2026 02:01:39 +0000
Manifest next update: Mon 20 Apr 2026 02:01:39 +0000
Files and hashes: 1: QX0TE-TV3E6_Xery30IllGZ3lmk.roa (hash: 2B0PODYP4I37DhlKEI2C0a2CWIscrasrNeELFrYNHjs=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: IN6tKIPDvVNk+Z0p4jInr+fzRO4PWYZEBzRwfWWo2Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:da:37:69:8d:54:e0:f2:56:49:27:35:ae:41:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Apr 19 02:01:39 2026 GMT
Not After : Apr 20 02:01:39 2026 GMT
Subject: CN=a17607fff832aa35452883c99ce8efa30d9f9119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:71:e1:37:f7:d2:26:16:c8:82:54:a8:14:
34:ba:68:57:da:51:46:e7:41:a1:35:42:73:8b:86:
3c:a8:85:b1:dc:03:9b:b7:94:6d:fe:14:b4:5f:09:
52:df:1b:cd:ba:70:8a:52:8b:16:69:bf:d8:a9:43:
ce:10:e8:35:c4:c2:f0:1e:eb:48:25:70:59:59:f8:
67:61:5f:34:fd:76:f5:50:49:40:59:8e:21:84:85:
87:68:12:c5:32:b9:98:a6:ad:90:ce:2c:84:de:1a:
c5:83:82:56:e0:af:2d:74:7a:d5:2b:4e:7e:89:28:
7b:d9:10:23:aa:ce:5e:ce:77:ed:5c:c9:67:ed:01:
c6:08:1f:a2:b0:00:d5:eb:cc:3e:cb:21:61:68:22:
bb:e7:94:1f:e4:a3:bf:74:96:32:08:06:63:3a:66:
38:fc:37:98:5a:fa:0e:13:71:1b:99:4a:2f:07:62:
24:74:df:a7:39:e1:01:51:32:29:4c:6b:d9:85:ba:
65:59:54:38:b2:03:13:73:9c:51:8b:56:eb:b9:8b:
31:7c:43:f3:33:93:2c:9b:e0:4a:be:ea:05:a6:26:
f4:51:32:df:2a:13:9e:86:af:52:5c:c5:30:e9:16:
b5:d1:87:ed:a7:67:41:3e:71:10:64:67:43:e6:ae:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:07:FF:F8:32:AA:35:45:28:83:C9:9C:E8:EF:A3:0D:9F:91:19
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f5:70:74:62:ee:37:df:bc:5c:93:35:24:cb:db:5a:21:51:
2c:4d:30:0a:a6:e8:de:ee:01:6c:e9:ca:d3:9d:8c:7a:c0:3a:
b5:8a:f0:8a:ad:a4:a9:d2:d4:d9:72:c1:a2:a8:4c:ea:53:f7:
ff:04:61:b0:5a:6f:13:a8:87:96:fc:d1:fe:27:f0:72:c0:91:
2a:03:f0:a4:0d:1b:41:c2:b3:80:9b:82:e4:dd:35:a5:e1:b0:
f2:fb:f2:d7:f8:c3:ea:fa:01:3c:c3:bf:fe:cd:d5:8d:20:77:
9a:34:cf:1e:5c:7a:d3:77:a3:d8:c4:a2:c4:6a:f7:3c:83:21:
8f:9f:bb:47:df:dc:52:dc:61:8e:e3:32:ec:15:97:df:e6:39:
47:a2:9a:b2:8c:6a:5c:02:ed:8f:08:9a:77:a3:ec:86:ea:35:
f7:a2:44:ae:d2:d9:63:bb:2f:10:2b:cd:d8:be:d6:b7:61:24:
0d:b8:47:85:84:73:a8:9a:3e:a6:98:30:16:78:3d:e1:d9:ed:
42:26:a5:74:92:55:ec:d4:c9:55:3c:d5:8e:10:75:13:73:52:
59:d3:a5:38:47:e6:f1:d9:8f:05:36:92:f9:5e:b3:f3:3f:22:
d0:8d:f5:ab:a0:87:70:23:ce:63:c0:a4:bb:aa:7c:48:75:5f:
e9:a0:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:09 2026 by rpki-client