Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: dWzdXN6l0ttGWqx0OBgU5Zf21OYzZTFfwJJT3Eg78GU=
Subject key identifier: DA:4E:06:0D:52:0E:56:4C:F7:D5:9D:75:D1:B1:3C:2C:33:F5:1B:9F
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 019D99CFC40FB17770081C98A0682A7396B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 0728
Signing time: Fri 17 Apr 2026 05:00:22 +0000
Manifest this update: Fri 17 Apr 2026 05:00:22 +0000
Manifest next update: Sat 18 Apr 2026 05:00:22 +0000
Files and hashes: 1: Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa (hash: 2cQhzB6rvIgJcWKL8JGJ8AUuDd5CAqSH0lZjme07urY=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: CJh5m0auLuveZ00zVuXrHyaPFo0zchyPkI+JlZEmlEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c4:0f:b1:77:70:08:1c:98:a0:68:2a:73:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Apr 17 05:00:22 2026 GMT
Not After : Apr 18 05:00:22 2026 GMT
Subject: CN=da4e060d520e564cf7d59d75d1b13c2c33f51b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:14:b2:3e:5a:85:05:2f:a5:a5:f0:c7:90:
af:21:0b:6b:57:82:d4:3c:27:2f:a0:56:09:18:d5:
d1:b5:03:47:08:63:0a:ea:cf:a9:08:13:c8:5a:a9:
95:4c:d8:b6:80:75:07:19:26:79:6d:4a:f3:f5:39:
ad:2f:9d:72:bb:64:db:b3:ed:ed:b3:3d:eb:d7:90:
45:2b:01:b7:fc:e8:5f:af:dc:b5:5b:29:ec:ea:55:
d4:e2:e6:af:a5:07:c0:7b:57:4c:0f:95:77:ad:2f:
62:1b:00:8c:2f:f4:d7:5e:54:d1:98:00:06:fe:68:
31:ad:f4:6b:ad:33:39:7f:f0:cc:da:d7:d9:dd:c1:
f7:d7:e9:61:4e:ac:21:2d:ca:91:da:43:03:ba:19:
d3:c7:a7:f9:c8:75:2a:55:47:bb:0f:1c:ab:1d:08:
3d:f3:ba:9b:8e:2f:ce:2b:73:f1:bb:ef:2e:46:6f:
f3:54:ef:a8:b9:01:35:67:dc:f8:44:7c:22:bf:26:
af:9b:fb:4b:7d:e9:2d:0c:29:f0:f7:b4:a7:af:50:
7c:5a:d2:ad:03:46:d7:35:6e:22:f1:b9:3b:df:1d:
08:66:6d:b8:e0:dc:30:b5:50:42:1e:6e:bd:ce:78:
57:28:6b:db:be:35:fb:d0:b2:2d:65:c2:ba:20:41:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:06:0D:52:0E:56:4C:F7:D5:9D:75:D1:B1:3C:2C:33:F5:1B:9F
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5b:f0:7c:06:66:0b:a4:b7:3b:30:b9:8e:b6:f7:20:bc:94:
73:7b:d0:61:29:43:75:ed:8f:81:4c:4f:c0:02:64:d7:ec:5e:
33:4a:d9:d6:27:29:20:a4:e6:bf:e1:4d:a8:67:1d:2f:ac:5e:
01:d4:a2:5d:1a:b8:ce:5b:db:61:05:b2:c1:aa:5a:74:08:f8:
64:cf:57:28:f8:bb:9f:7b:08:37:1c:7c:f5:ad:7f:ed:e7:d5:
f4:c8:21:ac:c8:19:8e:fd:c8:fc:33:1d:d1:9c:1b:34:49:f0:
30:5e:66:e8:fe:ca:ac:bb:0c:52:20:20:c1:e5:b4:a5:47:0c:
97:df:49:8a:d2:82:ff:e3:2d:bd:d1:90:88:35:eb:f0:75:33:
a4:6d:c4:f0:37:95:42:ce:d7:52:4b:55:dc:05:10:6d:e1:73:
c4:04:be:57:8c:34:04:8f:07:e8:ff:91:e3:3b:32:d7:41:ee:
45:21:cc:0a:78:1d:c1:b4:f7:37:a9:02:7b:e0:04:d1:c4:46:
c1:b6:29:65:9f:69:7f:10:d0:65:12:7c:97:87:4c:1e:9e:b3:
16:a6:fa:d0:0a:31:b1:6d:b8:51:80:3a:07:8a:8e:3b:97:c8:
c4:74:89:fe:85:04:12:e4:80:d9:a7:af:9f:20:59:62:6c:88:
fc:e5:d5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:48 2026 by rpki-client