Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: Y1Rzhu92+a4sqKQXg1biZFU5R6JgdS5jDSG6A2Fynqc=
Subject key identifier: BE:0D:0B:AE:3C:AD:AA:0A:A6:58:58:D8:73:06:3B:65:20:8F:9C:5F
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 019D99D0E6018BE3EA298DA2A450F40E9528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0800
Signing time: Fri 17 Apr 2026 05:01:37 +0000
Manifest this update: Fri 17 Apr 2026 05:01:37 +0000
Manifest next update: Sat 18 Apr 2026 05:01:37 +0000
Files and hashes: 1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: JMcG2aqhqembwNRjjMb+Mg5QsYv/T1sEpFSJVTPc9NI=)
2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e6:01:8b:e3:ea:29:8d:a2:a4:50:f4:0e:95:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Apr 17 05:01:37 2026 GMT
Not After : Apr 18 05:01:37 2026 GMT
Subject: CN=be0d0bae3cadaa0aa65858d873063b65208f9c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:c8:a9:b9:db:88:d4:89:1f:c6:7a:00:7e:
be:c8:7d:c1:ed:34:cb:a9:7a:2d:13:de:d9:63:d1:
1f:05:e0:38:9d:94:95:49:b9:5a:9a:7f:5d:ad:57:
fb:0c:ab:07:43:a0:27:ad:6c:13:6e:d5:0e:a2:5d:
5d:6d:23:ea:f9:09:ea:ab:c2:d5:5a:32:d8:a6:e8:
8e:ba:8e:e1:7c:6c:24:22:9e:6a:af:6c:5f:f5:e6:
98:e1:e7:37:6b:ac:5e:e9:2d:0a:6c:ed:c3:5b:0f:
e7:92:c1:22:ab:df:6c:53:19:51:8f:37:87:72:26:
41:f3:03:4b:f0:46:38:61:75:05:56:34:27:64:15:
ad:0a:f5:1d:5e:1a:4d:5a:b5:1a:f2:86:03:71:a5:
f7:f0:bc:eb:99:b0:88:b6:d9:61:23:57:95:d7:e3:
28:db:d9:6d:39:66:f3:4b:a4:77:c9:ba:0f:db:bc:
ae:46:8d:57:79:16:92:6e:20:68:21:8b:ca:70:d0:
df:ac:15:2e:6c:35:94:71:f0:5e:e1:93:db:60:e2:
6c:8f:51:11:0e:6c:25:57:50:a6:34:64:04:d6:0f:
e4:43:e9:e8:86:52:bc:98:aa:3f:0d:dd:92:30:98:
4f:64:0f:8f:b7:e6:b5:a5:9f:22:0d:c5:77:57:12:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0D:0B:AE:3C:AD:AA:0A:A6:58:58:D8:73:06:3B:65:20:8F:9C:5F
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e6:d1:77:30:c8:af:48:3f:34:cd:65:e4:6d:d8:ff:b4:fc:
c9:71:7b:cd:2c:7a:2e:e9:e0:8f:a0:20:4b:6f:92:be:b7:92:
37:ac:29:0a:5a:dd:8d:fb:51:fd:96:01:d8:8f:04:d3:61:f3:
20:dd:fe:e8:82:88:85:11:38:c5:07:48:30:b4:bd:15:29:24:
3d:3a:d8:cb:be:1a:ab:bf:13:b6:64:b2:04:f8:c9:ef:d8:29:
47:aa:50:11:fc:c3:b3:c6:1f:3b:96:b7:cf:0a:a1:2f:65:aa:
61:20:2e:c2:d4:2e:db:bf:e9:69:24:e3:46:6c:aa:de:7c:82:
b9:41:2d:a9:cf:d2:b7:fd:6c:62:96:76:f9:35:7b:c5:93:8d:
0c:2a:0a:52:91:36:f0:39:45:fc:fc:07:18:0a:de:e9:9e:88:
19:f7:a2:a7:d8:79:95:9e:82:c6:f8:66:a1:ac:96:c3:0e:02:
a3:6d:a4:d0:bd:d9:e9:50:a8:3b:3e:23:68:9b:67:5c:9f:c2:
e5:eb:64:25:e2:a4:ab:fe:a4:13:e9:d6:7c:34:60:66:7d:dc:
79:13:28:83:51:3a:8e:d1:09:bb:42:5f:59:32:c0:0d:e1:63:
32:12:41:82:93:d5:23:2b:fa:10:af:4d:31:10:46:25:a0:99:
fc:1c:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:39 2026 by rpki-client