Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: +B/LU6Y2JiKo3QLdWmkFul5X8tjcCIV2OE7/ot9toXQ=
Subject key identifier: DD:34:7A:78:E1:2D:6A:80:98:79:3B:8F:08:FA:B8:3A:42:02:78:01
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 019D985059D04F80748DD47925F9563EF6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 07EA
Signing time: Thu 16 Apr 2026 22:01:35 +0000
Manifest this update: Thu 16 Apr 2026 22:01:35 +0000
Manifest next update: Fri 17 Apr 2026 22:01:35 +0000
Files and hashes: 1: Q9ZgPk35Ok6M8we5yqQ4KCOhaNk.roa (hash: JPO6gHRzSYDvTmPZqjhIeasbbYanMzcflBe8oC0yynQ=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: L7Gd9jJV/Jcg5WZJjUNwLl3V6y0FCQw2oXJLhLlDj6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:59:d0:4f:80:74:8d:d4:79:25:f9:56:3e:f6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Apr 16 22:01:35 2026 GMT
Not After : Apr 17 22:01:35 2026 GMT
Subject: CN=dd347a78e12d6a8098793b8f08fab83a42027801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:14:46:94:da:ff:5a:4b:e2:4d:d0:d6:c4:
47:fe:52:d9:f5:c4:b9:93:59:ee:d2:c1:3e:48:ce:
33:4e:16:c3:16:9c:6d:6c:a9:22:c8:90:82:c8:4f:
eb:4f:a3:90:66:78:2c:0e:35:65:fa:1d:24:1d:48:
29:c0:79:1e:6f:11:1c:63:ab:d1:dd:c7:12:e8:51:
ff:2b:00:a6:bc:4a:ea:f7:54:8f:ea:7b:c7:14:85:
f5:b4:d6:99:22:fc:41:ec:7b:57:cf:07:35:7a:c9:
30:2e:6e:00:ad:a0:21:a4:43:cd:97:3a:62:d8:35:
28:e7:cb:f0:28:27:a5:31:67:77:81:27:aa:7b:e6:
1f:00:e2:41:a9:d4:c7:80:4c:46:02:72:15:be:b2:
5d:fa:4a:f2:05:80:d4:2c:9b:3c:4b:78:fa:8b:52:
fc:38:66:e9:12:cf:7e:1b:8c:50:9d:b7:dd:07:36:
a5:cd:4f:11:e8:f1:3d:a7:d1:7e:6b:af:c3:23:a9:
82:db:43:7a:b1:08:10:df:db:10:a1:ff:cd:d8:f0:
3c:f4:16:f4:45:93:16:4c:55:a3:69:69:e8:38:86:
a9:89:34:47:aa:4d:9c:74:c7:3a:8d:b6:96:d7:68:
89:94:4c:49:30:c4:59:14:4c:a3:d3:2a:3a:57:29:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:7A:78:E1:2D:6A:80:98:79:3B:8F:08:FA:B8:3A:42:02:78:01
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0a:f0:2b:29:ca:58:e9:c1:59:1a:a3:d8:6b:d3:1a:36:47:
37:ee:ef:4a:6f:e8:47:eb:84:fa:c3:07:96:00:cf:69:14:43:
4f:08:9d:04:c2:64:06:b8:f9:e6:53:51:c5:af:12:15:83:1c:
ef:e8:91:b1:6e:80:cd:35:6b:55:86:e5:f7:d0:f0:ac:8f:45:
31:59:68:e3:24:d2:e6:9c:41:6a:f1:92:cb:13:13:85:a1:c3:
b6:52:ca:f9:e2:91:27:ca:c1:3c:ae:2c:d6:f8:b2:7a:f0:73:
de:db:f0:cd:e2:cd:73:7f:c6:32:be:76:2c:4d:69:9b:b8:75:
ee:c8:e8:ba:b1:08:5c:eb:05:24:dc:af:11:68:52:dc:ee:44:
2a:7a:ee:15:f8:a8:f6:22:56:52:ea:b5:c9:8e:60:f8:84:32:
50:e3:dd:b6:b1:a5:d3:84:5b:88:37:46:c3:8a:05:5a:4a:dd:
45:67:54:0a:ae:ca:37:d5:43:c2:fd:d5:10:a7:4e:df:c6:fd:
7a:7c:ab:b4:fe:0e:d8:6a:0d:34:e2:fd:23:ef:0d:03:e6:29:
2f:14:b6:a9:ec:af:db:9a:ff:df:86:f6:be:df:8b:0a:06:38:
3e:bc:de:18:76:eb:8f:ea:e5:f3:5f:f5:8b:41:bf:3f:a8:ea:
90:73:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:06 2026 by rpki-client