Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: tyrVxyMGzuEyzknO9DUp/pxkTk7CQ1wg1E/quS++YtE=
Subject key identifier: 59:67:81:01:BC:A7:94:E8:1D:CE:BE:3D:69:40:E9:B5:71:F9:18:10
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 019D9A3EC310FC67A165DFF773DDF79678F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0D7B
Signing time: Fri 17 Apr 2026 07:01:37 +0000
Manifest this update: Fri 17 Apr 2026 07:01:37 +0000
Manifest next update: Sat 18 Apr 2026 07:01:37 +0000
Files and hashes: 1: LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa (hash: MkMyhvMq/UW3J/dY/hJ1MwyOPfnqAuGRvt2LQG0g8xw=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: 7TRyKU7g9ZYJ+zvctUW7xvyk5EQ90J/xWvOn5geBHO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c3:10:fc:67:a1:65:df:f7:73:dd:f7:96:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Apr 17 07:01:37 2026 GMT
Not After : Apr 18 07:01:37 2026 GMT
Subject: CN=59678101bca794e81dcebe3d6940e9b571f91810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:02:45:b6:d7:bb:ac:d5:1a:df:ef:b4:fb:
61:7c:c6:b9:71:98:da:fd:79:b2:68:ea:f5:ec:c7:
58:03:b2:43:79:a8:6e:fb:2c:90:ec:df:12:8d:15:
44:ed:bd:3c:ac:6c:1a:44:db:df:ab:b8:32:2d:0f:
fc:92:6e:72:52:a9:7b:bd:b2:3d:95:34:a2:74:df:
77:2f:e6:b3:c2:3b:00:22:c4:0c:46:ab:63:66:56:
ca:7f:76:6e:46:49:96:a1:35:f0:7e:fe:5f:07:21:
4a:aa:60:ab:dc:78:ff:62:1a:8f:71:c7:8b:e0:c2:
a4:b1:28:aa:b0:69:d8:dc:3a:1e:3f:1e:7e:56:15:
02:6e:d4:15:f7:be:53:65:33:97:ba:2a:7e:19:71:
bd:37:f2:c8:f5:6c:2c:da:a1:77:28:fd:f6:e2:fa:
25:99:21:54:d0:3a:7d:21:ae:15:23:a6:f0:21:9a:
e8:71:d9:69:be:41:44:8e:a3:77:fb:c8:9d:fb:d3:
6d:95:c0:79:49:a3:fc:fc:6f:ec:5b:e1:b5:ce:aa:
30:c8:fa:81:69:14:db:32:69:18:2d:e9:93:4b:ce:
c4:55:7c:7e:01:eb:bd:97:d1:81:8b:e9:c6:73:98:
60:79:b0:35:e6:be:d6:ea:d7:30:1e:f2:50:80:52:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:81:01:BC:A7:94:E8:1D:CE:BE:3D:69:40:E9:B5:71:F9:18:10
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e9:f0:29:7c:6e:af:38:4b:8d:f2:9c:d3:ec:d7:d4:50:19:
75:bb:af:51:fc:41:7c:3a:a2:0a:5f:dc:09:d9:fc:d7:be:62:
e8:d1:8a:9a:ed:cc:1c:07:ae:ee:36:04:81:5c:ee:e0:01:54:
c1:87:52:c9:ac:2f:da:29:39:74:43:3c:ee:b9:75:c0:dc:fc:
03:19:8d:44:aa:5f:25:10:dc:e3:58:69:cb:be:c1:96:92:5a:
5b:c8:40:ca:60:cc:de:95:eb:f2:76:75:45:55:52:69:38:28:
40:4f:68:db:d3:05:d3:06:51:eb:34:82:b0:c0:b8:d0:ef:88:
52:f8:c3:7b:25:57:7c:b9:a7:01:2e:f9:58:90:23:d5:19:d0:
90:17:97:58:9a:6c:ed:39:96:ba:99:96:72:23:b3:39:cb:28:
39:c2:2c:a1:df:c2:70:ab:6f:09:7c:53:4b:1c:b9:0f:e5:71:
cd:d5:43:a4:a7:c0:ef:11:9d:b7:d9:27:c2:3d:b8:e5:7e:1f:
4b:f6:33:41:0a:db:3c:60:99:81:b1:54:46:52:a9:ce:b0:cf:
d2:3b:4c:b3:33:2c:5c:c6:f6:94:a6:24:b0:f8:a3:27:59:f2:
31:02:84:21:1c:31:5f:04:0a:64:3d:e2:37:05:4e:84:fe:94:
90:94:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:08 2026 by rpki-client