Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: 8fHQP2iMDA/6qVMNRcwnm4/yHeXAd52q995w1thHUPs=
Subject key identifier: 8F:FF:68:98:56:A0:E6:4C:E9:98:48:45:73:E3:DD:EA:97:72:14:DA
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 019D9A3EE827CB70821D257EF0F808154299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 16C5
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: XKs6KgfU6aQLIAOaUuz9aSWnClo.roa (hash: vxBudXeCf0peWMd7lO7aysk2NB+ZqNxmrMni5vjOPPQ=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: vXalPaSMBeFH/xq9NhqPeVXZ6EYJpw30gMdPE/0SKT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e8:27:cb:70:82:1d:25:7e:f0:f8:08:15:42:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=8fff689856a0e64ce998484573e3ddea977214da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:58:26:2b:06:79:f7:00:30:15:54:73:ce:
78:7f:be:67:64:06:26:c6:fc:0d:c5:4a:54:7e:5e:
47:28:ad:68:73:da:5a:5a:a5:50:77:3d:40:71:ab:
63:d7:93:75:d1:99:73:20:13:7e:2c:70:08:c8:84:
1b:e3:c2:c1:fd:b7:5a:ac:53:d1:54:93:75:ab:07:
92:66:aa:22:0b:11:f1:6d:dc:7c:59:e6:31:c7:f4:
ed:5e:6b:c0:4e:da:bd:49:2e:00:d9:f9:3b:bf:2d:
6d:69:c5:3f:d6:0a:e1:f8:17:a7:42:06:c6:f0:ef:
18:ca:7e:fb:1f:39:21:2d:08:46:d0:d9:b0:52:05:
28:9a:7a:0d:d6:0a:ba:ca:7c:96:cb:5c:dc:91:db:
09:48:b3:f0:52:fa:f1:87:f5:99:b3:c6:09:5d:d6:
a7:05:0f:31:ae:ce:3e:7e:0f:7b:d9:83:5c:b6:d4:
60:cd:c9:90:76:30:b2:95:0b:75:05:d4:4a:14:2e:
96:60:92:88:db:0d:d6:f3:fb:ce:35:06:3d:36:48:
1a:33:ac:f3:47:31:29:55:d2:45:8b:93:2c:9c:ba:
6a:a0:dd:d2:2c:10:0f:66:f2:9f:c9:27:8d:1c:95:
03:c1:ec:ba:ca:db:32:88:74:38:4a:28:f3:0b:71:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FF:68:98:56:A0:E6:4C:E9:98:48:45:73:E3:DD:EA:97:72:14:DA
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f6:1c:89:fb:14:5c:95:52:7b:28:25:bd:d8:01:5d:b5:4b:
bb:32:0d:5c:f0:bd:30:cc:46:75:37:a6:31:bb:22:8a:ca:8e:
7c:bc:c9:96:df:16:11:42:25:84:77:19:2b:1b:0f:94:16:19:
b1:dc:cd:ab:ca:a5:b2:e0:7c:c7:5e:9c:fe:47:dc:6f:4a:a4:
9c:dd:d4:ba:07:f7:e9:db:b0:40:6f:74:e3:64:e2:2b:5c:45:
46:21:eb:d8:16:55:80:8b:45:86:d5:37:2e:f2:5d:5f:5a:cf:
50:cb:c5:e5:42:21:43:b6:dd:b4:e3:98:8c:e6:18:6b:1c:c9:
0e:a6:eb:81:29:a4:0e:eb:a1:0e:96:0f:9f:6e:37:3d:65:f8:
74:a7:f3:6c:e5:ab:ab:97:d6:a0:66:e0:9e:16:f5:37:30:44:
fc:8c:4f:78:22:de:8e:00:44:7f:2e:5f:84:fa:43:00:29:c3:
6d:e0:ec:ce:7a:3a:b9:d2:28:bd:e4:b9:0d:d9:fd:75:ea:d2:
e4:1a:0f:42:92:f5:7f:28:60:67:6b:0e:1d:79:7d:70:54:42:
42:2a:de:86:45:c5:1c:52:34:22:17:8b:b3:5b:f6:0c:0c:2b:
88:86:bb:d4:fc:8e:e6:54:8a:70:b1:02:0e:34:f9:50:f6:67:
28:be:f6:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPugny3CCHSV+8PgIFUKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDkxNDYyYzRkYzFkZjZhOGEzYTk3YTFhZWU1N2EwY2Mx
NGVmYmEwHhcNMjYwNDE3MDcwMTQ2WhcNMjYwNDE4MDcwMTQ2WjAzMTEwLwYDVQQD
Eyg4ZmZmNjg5ODU2YTBlNjRjZTk5ODQ4NDU3M2UzZGRlYTk3NzIxNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWBYJisGefcAMBVUc854f75nZAYm
xvwNxUpUfl5HKK1oc9paWqVQdz1Acatj15N10ZlzIBN+LHAIyIQb48LB/bdarFPR
VJN1qweSZqoiCxHxbdx8WeYxx/TtXmvATtq9SS4A2fk7vy1tacU/1grh+BenQgbG
8O8Yyn77HzkhLQhG0NmwUgUomnoN1gq6ynyWy1zckdsJSLPwUvrxh/WZs8YJXdan
BQ8xrs4+fg972YNcttRgzcmQdjCylQt1BdRKFC6WYJKI2w3W8/vONQY9NkgaM6zz
RzEpVdJFi5MsnLpqoN3SLBAPZvKfySeNHJUDwey6ytsyiHQ4SijzC3E26wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI//aJhWoOZM6ZhIRXPj3eqXchTaMB8GA1UdIwQY
MBaAFMfZFGLE3B32qKOpehruV6DMFO+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzIt
MzQ5N2Y3ZTJkZTYyLzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzItMzQ5N2Y3ZTJkZTYy
LzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPYcifsU
XJVSeyglvdgBXbVLuzINXPC9MMxGdTemMbsiisqOfLzJlt8WEUIlhHcZKxsPlBYZ
sdzNq8qlsuB8x16c/kfcb0qknN3Uugf36duwQG9042TiK1xFRiHr2BZVgItFhtU3
LvJdX1rPUMvF5UIhQ7bdtOOYjOYYaxzJDqbrgSmkDuuhDpYPn243PWX4dKfzbOWr
q5fWoGbgnhb1NzBE/IxPeCLejgBEfy5fhPpDACnDbeDszno6udIoveS5Ddn9derS
5BoPQpL1fyhgZ2sOHXl9cFRCQirehkXFHFI0IheLs1v2DAwriIa71PyO5lSKcLEC
DjT5UPZnKL72Ng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:58 2026 by rpki-client