Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: CIpvyL8Iz9wzDSGYFF7caEJKJlQjqR6UdIhDE6bmPpc=
Subject key identifier: AE:B6:BD:B5:54:BD:89:D0:88:CC:BE:4C:11:26:B8:8B:73:29:86:79
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 019D9C2C803DBFE1315A5A3D35D3553CB839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 16:00:55 +0000
Manifest this update: Fri 17 Apr 2026 16:00:55 +0000
Manifest next update: Sat 18 Apr 2026 16:00:55 +0000
Files and hashes: 1: 1ZYXmJOrMeMc_d7Mkc1TagHI2yQ.roa (hash: qeka0m7QmqNt2z/3WOdknE3KXx1vrYZ3br+BR0VNMV8=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: 4vaR9uXZ5u8DUZtyEg7JATOVMEJh5ZY0a9xDGy6v9Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:80:3d:bf:e1:31:5a:5a:3d:35:d3:55:3c:b8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Apr 17 16:00:55 2026 GMT
Not After : Apr 18 16:00:55 2026 GMT
Subject: CN=aeb6bdb554bd89d088ccbe4c1126b88b73298679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:ef:40:6f:55:6d:ee:57:46:7a:62:c3:e6:
b9:8e:82:66:d5:6d:65:7c:86:36:98:c4:a8:e8:db:
ea:f2:28:25:de:9d:f1:00:7f:a4:ea:c5:f6:a9:78:
b4:78:35:ac:26:7c:b9:2b:ed:5d:41:98:3f:db:29:
2f:bf:10:a7:d7:34:ee:13:94:f1:d8:ec:b5:69:53:
ab:d2:ea:a7:5e:41:fe:09:cf:da:c6:17:c6:54:83:
54:14:21:8d:54:d5:47:41:e0:63:cd:20:b2:e2:78:
b8:15:7a:53:7b:2e:75:7c:8c:3b:66:e9:d4:44:9a:
71:f4:3f:57:e4:41:af:ac:b1:7e:57:7e:c3:34:5b:
6e:01:43:ab:de:71:37:42:36:6d:82:60:49:6a:e7:
a8:e3:af:b8:0c:fd:6d:25:48:6f:9b:2a:fb:dc:3a:
89:86:55:f1:73:cc:8b:83:f2:f6:6a:5d:0c:4b:5b:
f9:fc:32:19:ad:16:70:90:03:dc:af:83:c8:d8:4c:
35:b3:2d:3b:0a:67:c4:47:a8:f5:4e:2c:8e:9d:ba:
62:e5:e0:21:49:88:74:65:1a:fb:ca:4f:a2:b7:78:
33:4f:3f:99:68:0d:a1:25:85:d1:ac:6a:b2:15:98:
56:23:6c:50:86:f1:ac:88:b3:78:9b:5e:47:e9:93:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B6:BD:B5:54:BD:89:D0:88:CC:BE:4C:11:26:B8:8B:73:29:86:79
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:37:12:23:50:d5:de:30:5c:e2:c0:df:64:17:e7:38:a6:ae:
07:b0:19:40:b1:4b:88:96:9f:06:1a:ee:01:67:e0:88:b2:7d:
26:92:79:e3:6d:f6:ce:75:79:16:0b:e6:ef:3f:77:00:04:bf:
87:8d:ee:e7:b2:ba:66:e2:8a:f7:fc:0a:85:60:c4:7e:8f:2b:
12:17:51:b6:9c:08:25:46:d1:83:b3:03:a8:4e:92:61:a0:3c:
71:1a:8c:f1:85:2e:c1:62:d8:92:59:c4:3b:0e:3a:fd:94:82:
e7:11:c5:01:ca:d3:ad:60:0b:8f:a4:86:a0:a7:4e:f3:d4:27:
c2:66:34:af:ef:5d:7e:2d:ec:77:c7:2e:6f:be:e0:82:44:a7:
6c:77:84:3b:bd:b6:b3:ba:36:ce:a9:eb:3b:75:b7:93:fa:01:
d8:04:06:61:0e:1c:5f:2f:32:9b:b9:fc:43:ea:06:2c:9f:6b:
40:78:5e:26:8c:11:1d:6d:35:34:b2:29:de:75:a7:52:e0:8a:
20:b5:b3:cb:3b:ae:77:cf:46:01:9c:9c:e5:2a:5f:f5:fe:b7:
bb:0f:7d:74:91:a8:49:bb:64:a3:be:6d:69:45:50:30:6b:0f:
dc:41:b9:22:9c:5f:e4:eb:39:d2:89:0d:e8:cf:aa:ac:56:4c:
44:bf:98:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLIA9v+ExWlo9NdNVPLg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi
NGI4Y2IwHhcNMjYwNDE3MTYwMDU1WhcNMjYwNDE4MTYwMDU1WjAzMTEwLwYDVQQD
EyhhZWI2YmRiNTU0YmQ4OWQwODhjY2JlNGMxMTI2Yjg4YjczMjk4Njc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykLvQG9Vbe5XRnpiw+a5joJm1W1l
fIY2mMSo6Nvq8igl3p3xAH+k6sX2qXi0eDWsJny5K+1dQZg/2ykvvxCn1zTuE5Tx
2Oy1aVOr0uqnXkH+Cc/axhfGVINUFCGNVNVHQeBjzSCy4ni4FXpTey51fIw7ZunU
RJpx9D9X5EGvrLF+V37DNFtuAUOr3nE3QjZtgmBJaueo46+4DP1tJUhvmyr73DqJ
hlXxc8yLg/L2al0MS1v5/DIZrRZwkAPcr4PI2Ew1sy07CmfER6j1TiyOnbpi5eAh
SYh0ZRr7yk+it3gzTz+ZaA2hJYXRrGqyFZhWI2xQhvGsiLN4m15H6ZP1wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK62vbVUvYnQiMy+TBEmuItzKYZ5MB8GA1UdIwQY
MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt
NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl
LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjcSI1DV
3jBc4sDfZBfnOKauB7AZQLFLiJafBhruAWfgiLJ9JpJ54232znV5Fgvm7z93AAS/
h43u57K6ZuKK9/wKhWDEfo8rEhdRtpwIJUbRg7MDqE6SYaA8cRqM8YUuwWLYklnE
Ow46/ZSC5xHFAcrTrWALj6SGoKdO89QnwmY0r+9dfi3sd8cub77ggkSnbHeEO722
s7o2zqnrO3W3k/oB2AQGYQ4cXy8ym7n8Q+oGLJ9rQHheJowRHW01NLIp3nWnUuCK
ILWzyzuud89GAZyc5Spf9f63uw99dJGoSbtko75taUVQMGsP3EG5Ipxf5Os50okN
6M+qrFZMRL+YXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:58 2026 by rpki-client