Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier: KgoGNOn2cOhYaToHhKZ/RSVhjQNgmb2E2YAfN7ZR0cQ=
Subject key identifier: 68:3F:02:D6:A6:F1:E9:74:12:63:B1:2F:1D:10:B2:0B:BE:EF:BB:6F
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 019DA30B0ED3C6922B2E5C84AC9F0F7B2879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number: 18E7
Signing time: Sun 19 Apr 2026 00:01:44 +0000
Manifest this update: Sun 19 Apr 2026 00:01:44 +0000
Manifest next update: Mon 20 Apr 2026 00:01:44 +0000
Files and hashes: 1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: E7MEbZ6WrmvfudNdNSkxJFl/wq0EVVpd62Lq6Ox6mUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0b:0e:d3:c6:92:2b:2e:5c:84:ac:9f:0f:7b:28:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Apr 19 00:01:44 2026 GMT
Not After : Apr 20 00:01:44 2026 GMT
Subject: CN=683f02d6a6f1e9741263b12f1d10b20bbeefbb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:f6:ff:18:68:49:1a:33:9a:c5:d0:96:a8:
97:5a:75:91:61:ff:09:82:95:ef:bf:d3:d1:8e:05:
cf:f1:8c:a1:41:14:4f:89:cd:c5:01:5e:59:a5:84:
7e:32:1a:a0:18:19:f7:41:55:e8:0c:0b:6f:89:8a:
39:52:1f:3b:7c:4f:a5:e1:66:d6:8a:6b:02:4d:82:
1e:cb:c6:f0:4f:b5:0f:15:41:4f:30:cd:43:18:5b:
85:82:4c:b7:f0:73:3e:f2:b3:04:66:44:32:cf:2d:
70:04:70:54:41:ec:d7:83:ff:4b:bb:00:79:81:a2:
37:c4:ba:a9:93:42:a0:cd:a3:ef:35:d5:7a:34:64:
71:0a:68:a9:3e:a1:3e:50:f9:99:41:2f:41:fd:a0:
51:2c:c6:cc:9a:6c:4b:07:3b:23:84:00:d8:e4:db:
1d:62:ea:42:f1:02:2a:fe:86:c1:74:05:13:46:11:
89:35:d9:b5:84:69:7f:3a:48:0a:28:0e:5d:7d:d3:
42:5a:c9:b5:a8:c1:07:6f:84:25:e4:64:49:b9:a7:
6c:e2:d8:60:12:a8:9b:43:7b:73:0e:51:5b:4a:31:
8b:95:4e:17:ae:9b:a8:dd:d5:ae:c8:dc:a3:06:94:
16:1c:0f:b1:31:a2:cf:ed:01:4c:79:42:ec:25:c2:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3F:02:D6:A6:F1:E9:74:12:63:B1:2F:1D:10:B2:0B:BE:EF:BB:6F
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e4:fb:a5:f3:cb:f1:9c:9b:7c:7b:32:42:0d:29:9b:6e:00:
ec:65:7b:98:ce:ae:4a:0d:31:4f:b1:5a:93:92:9a:20:75:f6:
76:71:6f:76:e9:a2:5d:30:9b:25:9f:09:04:0b:76:32:b3:81:
e1:b8:f9:4a:2c:bc:45:b8:96:8d:e9:20:2c:99:04:05:db:0d:
3c:c0:26:ab:23:09:44:4b:6e:ab:20:7e:f9:e3:01:9a:61:4e:
52:a4:51:d8:17:95:0d:e9:5e:a2:44:96:21:61:e8:59:5e:e4:
ca:bf:95:d2:02:4c:14:25:41:7d:d9:2d:e1:cd:d3:2e:ff:54:
bf:3d:eb:40:02:2f:b8:75:72:d3:e0:3c:cf:f7:00:f2:fd:ba:
34:2b:b4:63:da:20:5d:ed:39:dd:69:2c:8c:2a:c0:ef:6a:75:
ba:dc:dd:8d:ef:af:fd:5d:a4:c7:c5:5d:87:29:d4:6c:2a:74:
bf:b5:57:06:36:5b:19:a1:21:df:ea:30:07:bd:f6:68:26:9a:
8d:fc:d7:f8:1a:05:68:18:9d:82:09:6d:71:ab:5f:07:3f:ee:
47:3c:a6:a1:bc:29:a5:d5:c9:41:0d:28:97:2d:6b:36:da:f7:
6b:b6:a9:a1:e4:0e:85:ed:1b:98:b9:29:83:9d:a4:62:ea:34:
22:42:23:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:26 2026 by rpki-client