Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: e4Hp9ZT/Zsa+xwqAT3Og+DfeZJ0u+urEEJkHqA0DY6M=
Subject key identifier: 9D:24:BF:B6:2B:6A:26:37:78:71:2A:DD:B2:02:3F:DC:5A:D8:E5:55
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 019D98BD435FEDDE206F67FD9BE51A1CDAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 0527
Signing time: Fri 17 Apr 2026 00:00:33 +0000
Manifest this update: Fri 17 Apr 2026 00:00:33 +0000
Manifest next update: Sat 18 Apr 2026 00:00:33 +0000
Files and hashes: 1: 1JH1P29Kf09zWZrF1xe3ZZfCieI.roa (hash: DhT9OAA9PZuMRclwlwztAMTiBJcJK2NakyvCDwGRGYc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: SxfJuqPlgrk/jZnF6G2lyyk0XCc9IZ6Yyl9RiCwbsBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:43:5f:ed:de:20:6f:67:fd:9b:e5:1a:1c:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Apr 17 00:00:33 2026 GMT
Not After : Apr 18 00:00:33 2026 GMT
Subject: CN=9d24bfb62b6a263778712addb2023fdc5ad8e555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:28:e8:91:9c:95:40:21:25:6c:fd:ba:9d:
ad:fe:6f:5d:5d:45:7b:cc:63:dc:33:57:e5:e0:ae:
33:d2:03:52:4f:1c:99:d9:c7:36:57:35:e2:24:00:
08:df:76:88:21:66:da:64:84:a4:b3:38:8f:1b:29:
e9:ed:78:36:2c:4d:ee:bf:b1:3e:26:d0:96:36:e3:
a6:31:84:0a:f0:3c:d9:f9:4b:2c:87:36:cc:62:2a:
5b:23:88:64:96:ae:6f:5e:db:0b:51:6f:3d:6b:02:
da:36:5f:99:f3:ba:f8:6b:6c:53:16:45:a5:45:4c:
e5:66:e5:5e:92:13:9f:c6:2a:4b:60:b5:5d:51:ff:
37:bf:4e:d3:42:cb:ea:80:a2:50:99:0a:e4:cf:34:
66:48:f5:21:38:d4:6e:c4:58:15:e6:90:c7:fb:60:
71:8b:c4:1f:36:89:85:47:e8:be:40:c3:8d:ff:7b:
7b:a9:f0:4a:74:68:73:36:12:7c:22:37:73:bf:1b:
0f:9f:7f:02:b2:15:2c:d2:f6:f6:50:74:22:23:57:
cd:4f:10:58:53:9b:8a:15:f0:15:34:99:7c:fa:17:
10:f4:39:f6:9b:80:33:70:9c:b8:b9:c6:dd:95:3a:
4e:32:8a:7b:a7:d8:69:3e:c0:96:b1:e5:23:02:92:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:BF:B6:2B:6A:26:37:78:71:2A:DD:B2:02:3F:DC:5A:D8:E5:55
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:a0:37:42:60:80:ba:c2:20:99:4d:3f:6e:d9:02:c5:bd:
e3:f1:b1:c3:b6:23:5b:b3:c6:d8:7b:95:72:79:90:c0:6e:58:
c2:eb:14:ef:35:27:42:0c:f7:ee:54:f8:3b:6d:1a:64:c7:d5:
af:0b:57:ca:7e:4d:0a:86:51:06:cc:0f:2e:f6:88:21:ff:57:
fc:55:93:7c:77:58:64:05:20:23:3c:74:e0:37:8f:06:be:8b:
83:55:8a:d4:94:d4:17:00:f4:f9:38:0d:8b:fe:43:71:88:e5:
f2:c5:14:53:42:34:50:71:9f:e5:74:82:76:d3:e2:ba:48:30:
06:60:38:91:ae:6f:6f:d4:63:f4:9c:e9:52:7e:77:fd:79:d5:
b1:f9:ab:7a:78:26:92:f0:9c:ab:87:9a:c1:32:3d:6c:73:cb:
dd:84:5d:67:b1:59:ad:d3:01:c4:36:67:61:9a:6d:cc:87:75:
c0:36:93:8b:8e:8c:5d:1e:c6:d8:1f:6f:ea:0a:7c:a5:80:6f:
5e:1d:53:07:8f:ee:d3:a6:c0:a7:cf:77:df:9b:59:d6:04:bc:
09:4e:5f:db:39:68:57:9b:00:fa:16:31:b6:61:3c:7a:79:86:
fa:28:2e:da:7c:8f:29:4d:51:c2:d8:f4:3b:62:28:df:78:1c:
c5:83:84:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvUNf7d4gb2f9m+UaHNqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTU5NDA3NWYzMWM1MTNhMTMzN2U5MTc1OTI5MDAzN2U2
NjdiZjkwHhcNMjYwNDE3MDAwMDMzWhcNMjYwNDE4MDAwMDMzWjAzMTEwLwYDVQQD
Eyg5ZDI0YmZiNjJiNmEyNjM3Nzg3MTJhZGRiMjAyM2ZkYzVhZDhlNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVgo6JGclUAhJWz9up2t/m9dXUV7
zGPcM1fl4K4z0gNSTxyZ2cc2VzXiJAAI33aIIWbaZISksziPGynp7Xg2LE3uv7E+
JtCWNuOmMYQK8DzZ+UsshzbMYipbI4hklq5vXtsLUW89awLaNl+Z87r4a2xTFkWl
RUzlZuVekhOfxipLYLVdUf83v07TQsvqgKJQmQrkzzRmSPUhONRuxFgV5pDH+2Bx
i8QfNomFR+i+QMON/3t7qfBKdGhzNhJ8IjdzvxsPn38CshUs0vb2UHQiI1fNTxBY
U5uKFfAVNJl8+hcQ9Dn2m4AzcJy4ucbdlTpOMop7p9hpPsCWseUjApKFTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0kv7YraiY3eHEq3bICP9xa2OVVMB8GA1UdIwQY
MBaAFMaVlAdfMcUToTN+kXWSkAN+Znv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYt
MjI4OWM3N2EyZDM5LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MGJlYmUtYjY0Ny00YjlkLWFiNzYtMjI4OWM3N2EyZDM5
LzEveHBXVUIxOHh4Uk9oTTM2UmRaS1FBMzVtZV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXagN0Jg
gLrCIJlNP27ZAsW94/Gxw7YjW7PG2HuVcnmQwG5YwusU7zUnQgz37lT4O20aZMfV
rwtXyn5NCoZRBswPLvaIIf9X/FWTfHdYZAUgIzx04DePBr6Lg1WK1JTUFwD0+TgN
i/5DcYjl8sUUU0I0UHGf5XSCdtPiukgwBmA4ka5vb9Rj9JzpUn53/XnVsfmrengm
kvCcq4eawTI9bHPL3YRdZ7FZrdMBxDZnYZptzId1wDaTi46MXR7G2B9v6gp8pYBv
Xh1TB4/u06bAp89335tZ1gS8CU5f2zloV5sA+hYxtmE8enmG+igu2nyPKU1Rwtj0
O2Io33gcxYOEWw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:24 2026 by rpki-client