Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier: BzJ0Nw3SLBJpbuM8RlMZOBhaXfFi9iwJXKeIetk2lyQ=
Subject key identifier: 34:2D:9B:0C:E8:B7:47:70:B0:44:77:26:05:F5:5D:30:E5:67:64:EF
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial: 019D9C9A898874B97E6E0ADFD0ACC2ED6710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 18:01:06 +0000
Manifest this update: Fri 17 Apr 2026 18:01:06 +0000
Manifest next update: Sat 18 Apr 2026 18:01:06 +0000
Files and hashes: 1: Ey9RDTUKNtpxucDL595am7oxv5w.roa (hash: Tn0c8HJjvP0UNfrsMJSn4uo3H3SBrrgbKleOBTQq0Rg=)
2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: DEAAt8ImJXBZxYdMonExPSZ4VtwXFtYYlkIznwWMs7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:89:88:74:b9:7e:6e:0a:df:d0:ac:c2:ed:67:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
Validity
Not Before: Apr 17 18:01:06 2026 GMT
Not After : Apr 18 18:01:06 2026 GMT
Subject: CN=342d9b0ce8b74770b044772605f55d30e56764ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:9c:16:ff:f0:5b:97:3f:33:b6:d8:a3:94:
49:7b:62:4e:d3:90:e9:05:85:32:cc:4c:e7:fc:a8:
d6:07:2e:0b:a5:e8:97:c7:ef:45:0d:c3:e4:d2:d4:
f8:7b:8f:aa:87:60:68:62:2c:a3:08:65:a4:af:0c:
13:6f:11:16:28:f3:70:80:91:f2:07:b4:f3:d5:f7:
f5:2f:d7:d2:2e:2b:c0:d6:a8:79:47:85:1b:b8:f2:
40:ce:85:1d:ec:89:bf:46:d9:53:01:c5:fe:48:89:
3d:b7:a6:32:5d:6b:96:81:ec:5a:c4:80:7a:b6:12:
e6:26:35:43:12:68:f8:5a:fe:1d:06:d1:16:d7:e2:
23:bc:ea:cc:c0:0b:b2:1d:38:88:83:84:da:dd:ba:
ff:1b:2c:ca:af:35:48:cb:0c:3d:a2:0d:ac:e8:bb:
dc:eb:e6:fd:9e:f9:06:df:e1:75:ef:88:58:cd:e1:
90:fa:0c:07:40:8e:bc:ae:32:27:5c:b1:3e:6c:6e:
8d:38:b3:23:8e:b1:88:59:2d:a6:3f:15:9e:6e:d1:
7c:3e:fc:0e:71:b8:43:28:6b:34:a5:2f:59:dc:75:
d7:ff:38:ea:c1:bf:d2:b5:a3:08:c3:e1:72:65:ca:
e5:a1:90:c9:51:18:bd:6f:0f:0b:10:fd:eb:50:23:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:9B:0C:E8:B7:47:70:B0:44:77:26:05:F5:5D:30:E5:67:64:EF
X509v3 Authority Key Identifier:
keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:88:44:db:b3:c9:07:5f:09:3e:35:55:6f:12:da:78:93:49:
e2:54:be:1e:d8:66:f7:47:66:49:ba:ab:22:a4:69:59:ca:37:
f4:2c:b4:8a:96:fc:94:d0:d4:37:1c:77:f9:64:a8:42:fd:dc:
9a:fb:d9:7d:b3:33:33:83:75:57:23:0c:18:b3:ff:e8:5d:9d:
ef:91:26:ca:00:22:2c:5c:94:13:d8:d0:b4:2b:e6:0b:6b:b4:
f0:39:70:f8:81:c8:70:15:4f:61:b5:db:3e:0f:c1:bf:4b:d4:
5c:9a:29:9b:75:15:da:7c:c8:6b:d0:2f:e9:86:98:2f:4c:af:
7e:e8:cf:dc:24:1f:db:de:0e:bf:e4:4f:64:e2:2a:d3:6c:5b:
f1:89:4b:a5:1b:84:2f:04:28:fb:96:2d:5c:b3:80:47:c5:ae:
1a:01:17:b2:5b:36:2e:5f:7f:22:34:2a:8e:0e:0f:4c:e2:8d:
ea:97:a3:69:be:4a:0a:69:3a:89:a2:2a:dd:04:d5:b6:35:f3:
b4:61:2d:e2:5d:6b:3f:f2:d8:ae:04:f1:c7:97:bb:01:09:e3:
56:00:35:34:a7:5b:95:66:b7:57:35:b2:eb:8e:87:ee:8c:7d:
7a:83:14:82:4d:39:25:68:f6:b1:a3:9e:83:a9:81:f0:97:97:
d7:f0:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:30 2026 by rpki-client