Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: PkbTRpGkoEy7PY3SsojOoEpfdfilsW8l031laSy/q6I=
Subject key identifier: 47:51:98:63:AC:BD:15:67:10:48:60:8A:D3:5C:2A:07:F9:97:36:DA
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 019DA378C78414A73414FDCB3E3EB031ED36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:34 +0000
Manifest this update: Sun 19 Apr 2026 02:01:34 +0000
Manifest next update: Mon 20 Apr 2026 02:01:34 +0000
Files and hashes: 1: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: 5jrL0wtoGO3sKrvVSeZRr7n2MnBD7VvuspaU/LYcG7U=)
2: fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa (hash: gfbrsTU/I0e+W/MQFr0NClUgyaIVv/jWpNgk1NCWi8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:c7:84:14:a7:34:14:fd:cb:3e:3e:b0:31:ed:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Apr 19 02:01:34 2026 GMT
Not After : Apr 20 02:01:34 2026 GMT
Subject: CN=47519863acbd15671048608ad35c2a07f99736da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:b8:36:51:55:63:ed:cb:a9:44:b8:d3:0d:
96:c8:1b:50:aa:d0:49:17:fb:a7:9f:6f:6f:0d:82:
9a:4c:88:08:7e:d4:93:5a:00:38:5d:eb:e4:40:2e:
a4:a2:53:dd:bd:e9:b2:36:03:e9:60:ea:c3:79:7a:
65:56:31:76:6d:3b:ef:bb:05:9c:4d:25:0b:d4:f8:
2d:8c:41:67:9c:68:84:b9:2f:bd:3d:9a:e9:9a:f8:
ca:5f:37:c5:de:7e:53:f8:99:8a:07:49:86:33:a5:
d6:69:c4:47:1e:af:5d:83:89:f8:58:5a:c3:1c:56:
13:08:e4:f5:08:bb:03:12:2c:8f:20:c1:a9:df:e1:
80:3d:38:f5:f5:d2:60:bb:72:76:e6:9d:a8:dd:42:
7f:18:7f:4b:97:71:47:96:95:d9:c3:e3:a8:a9:b7:
77:cf:cb:64:4d:3f:b3:67:01:53:4b:4e:b5:ab:9e:
5b:5a:a7:91:d5:e9:df:64:68:10:f4:6d:56:97:be:
62:d5:2c:be:8b:b1:76:47:42:8e:db:b6:2e:67:74:
2b:c7:01:88:27:15:7c:73:4b:f1:27:27:5a:89:60:
43:8c:92:5e:83:11:94:75:57:b9:14:16:a1:07:33:
9c:c5:2d:7c:5b:27:6c:ff:00:e0:b2:81:49:05:a5:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:98:63:AC:BD:15:67:10:48:60:8A:D3:5C:2A:07:F9:97:36:DA
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:93:1d:51:52:fd:ce:eb:68:05:65:fc:a7:ce:c9:8c:4e:
44:f6:31:1d:ba:ae:31:75:b5:c1:ea:aa:4c:03:f6:7a:dc:ff:
04:89:4b:ba:2c:6b:64:a1:95:d3:52:5f:80:5d:b6:fa:9b:85:
fc:65:73:25:3a:0b:39:19:82:aa:07:db:76:b0:20:2a:8b:36:
4e:60:d4:91:13:de:56:64:1e:ce:9e:42:00:aa:b1:3e:1f:a6:
99:ac:0a:a6:ca:a5:6f:cd:c2:cf:5b:5e:b5:30:6d:20:db:b9:
9a:4a:49:fe:16:49:67:5b:78:b9:ee:9b:20:4c:fb:d1:1a:bb:
20:55:53:e0:d0:bd:41:4e:f0:4a:4a:e1:1f:36:47:ae:0c:84:
5d:09:6a:f1:b8:5f:c5:0f:70:ad:ca:ae:f7:91:a5:82:51:df:
ec:ca:e8:a6:87:ab:db:2d:d0:6b:2d:a3:43:31:e5:8f:79:c9:
50:f0:8d:39:c5:9b:81:9a:82:a7:57:76:a3:81:00:d1:07:d7:
e2:67:d1:9e:59:d8:88:e4:63:ba:c4:c0:d1:44:73:e0:8b:e4:
09:94:a6:6b:79:7e:1b:45:a6:38:ad:05:76:f9:9c:ef:56:e7:
11:a6:47:13:09:cd:18:97:fd:3a:01:ba:8f:17:42:02:d5:95:
ba:6d:28:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeMeEFKc0FP3LPj6wMe02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2
MjMxZmMwHhcNMjYwNDE5MDIwMTM0WhcNMjYwNDIwMDIwMTM0WjAzMTEwLwYDVQQD
Eyg0NzUxOTg2M2FjYmQxNTY3MTA0ODYwOGFkMzVjMmEwN2Y5OTczNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKG4NlFVY+3LqUS40w2WyBtQqtBJ
F/unn29vDYKaTIgIftSTWgA4XevkQC6kolPdvemyNgPpYOrDeXplVjF2bTvvuwWc
TSUL1PgtjEFnnGiEuS+9PZrpmvjKXzfF3n5T+JmKB0mGM6XWacRHHq9dg4n4WFrD
HFYTCOT1CLsDEiyPIMGp3+GAPTj19dJgu3J25p2o3UJ/GH9Ll3FHlpXZw+Ooqbd3
z8tkTT+zZwFTS061q55bWqeR1enfZGgQ9G1Wl75i1Sy+i7F2R0KO27YuZ3QrxwGI
JxV8c0vxJydaiWBDjJJegxGUdVe5FBahBzOcxS18Wyds/wDgsoFJBaUymwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdRmGOsvRVnEEhgitNcKgf5lzbaMB8GA1UdIwQY
MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt
ZDFkOGRiMTQ4ZWMyLzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy
LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVquTHVFS
/c7raAVl/KfOyYxORPYxHbquMXW1weqqTAP2etz/BIlLuixrZKGV01JfgF22+puF
/GVzJToLORmCqgfbdrAgKos2TmDUkRPeVmQezp5CAKqxPh+mmawKpsqlb83Cz1te
tTBtINu5mkpJ/hZJZ1t4ue6bIEz70Rq7IFVT4NC9QU7wSkrhHzZHrgyEXQlq8bhf
xQ9wrcqu95GlglHf7Mropoer2y3Qay2jQzHlj3nJUPCNOcWbgZqCp1d2o4EA0QfX
4mfRnlnYiORjusTA0URz4IvkCZSma3l+G0WmOK0Fdvmc71bnEaZHEwnNGJf9OgG6
jxdCAtWVum0owg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:05 2026 by rpki-client