Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: f7tF724KmWGqFZoo92oTFOcwB2oh/j/Or+XEQqW1O6I=
Subject key identifier: 86:04:FF:6D:78:7A:9E:B2:A2:56:93:3D:9C:A3:58:06:BB:B7:1F:58
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019D988644EAB12CA5A6D7FB116409DDF9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 18D0
Signing time: Thu 16 Apr 2026 23:00:29 +0000
Manifest this update: Thu 16 Apr 2026 23:00:29 +0000
Manifest next update: Fri 17 Apr 2026 23:00:29 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: +5LLP2r55+TwD0WvCQlzlmw5t+N11b+oWp6G2x959PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:44:ea:b1:2c:a5:a6:d7:fb:11:64:09:dd:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Apr 16 23:00:29 2026 GMT
Not After : Apr 17 23:00:29 2026 GMT
Subject: CN=8604ff6d787a9eb2a256933d9ca35806bbb71f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:c6:2b:18:6a:ba:b2:8c:ce:1e:57:b5:48:
ad:fa:00:21:ae:ab:73:0c:e4:8e:8e:ef:b3:16:d7:
23:ba:ce:3f:67:53:d5:bc:3a:ae:92:89:59:06:4e:
28:12:66:99:60:0b:48:1d:2b:c9:ff:7c:61:7b:3d:
26:30:17:c0:af:8e:33:cf:94:de:1e:70:5d:9f:52:
ed:bf:ee:2f:9d:38:a0:a2:ec:0a:19:26:57:4c:87:
86:c7:2d:6b:f1:5e:8b:df:4c:14:fb:23:7d:3c:e0:
32:0f:2d:6f:3d:ea:5a:2c:3b:0b:31:31:49:36:f3:
98:5a:5a:17:86:c5:6b:9c:b5:58:aa:87:f3:fd:3a:
49:0a:50:04:1b:61:d2:74:b5:af:d9:a6:9a:89:04:
68:39:13:7a:73:74:a2:29:a3:3c:60:7f:fe:bc:8d:
15:53:5d:d3:e8:42:44:73:5b:fb:db:a7:55:1e:7e:
20:ca:8c:6b:87:09:61:e2:6b:63:31:69:45:df:22:
61:a6:18:6b:90:42:c2:5d:32:9f:e5:15:f9:c4:e3:
90:83:3f:a6:1e:3d:76:96:dc:5d:7f:85:2d:eb:77:
76:47:0c:f0:22:d7:e3:62:fb:bf:18:0b:13:71:ce:
8b:cc:cc:9e:dc:3f:a8:6a:94:6b:58:30:27:64:c7:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:FF:6D:78:7A:9E:B2:A2:56:93:3D:9C:A3:58:06:BB:B7:1F:58
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:26:9f:f7:ae:d2:d4:4a:8e:07:0f:fb:5a:53:4e:79:ba:ae:
a7:c5:e1:ca:1a:f1:6d:f9:cf:26:68:a5:ea:dc:b4:d5:88:eb:
c8:4a:cb:ff:5f:a9:29:2d:93:9a:b1:80:68:9b:02:f3:3d:88:
45:10:14:3f:7b:f3:a0:18:e9:61:87:34:0a:8e:c6:ed:aa:20:
7e:b7:09:0a:b0:b4:90:48:75:b4:bb:13:aa:fa:e8:19:79:b1:
a3:5b:6e:1d:6e:e9:e8:e3:e8:f2:2f:10:68:53:72:4a:b4:ab:
0c:01:e1:54:2c:b1:63:85:01:cd:b0:cb:91:53:7c:7a:36:25:
79:89:3a:97:49:05:16:a8:3c:71:c7:77:21:d3:49:1d:23:6e:
ff:0f:ba:b9:43:c1:d4:87:22:c3:37:22:95:ac:61:aa:61:26:
c2:fb:0e:f5:95:5d:da:0b:9e:91:08:5c:84:29:6e:cf:0b:e2:
f6:c2:f2:6a:b8:f1:2c:b9:ca:58:33:6c:97:9e:e9:37:a9:30:
ca:73:a7:88:fb:0b:8b:0f:e6:ce:85:82:fd:84:bf:77:25:3d:
30:6a:79:41:c7:ea:76:48:aa:31:da:08:96:4f:fa:4e:d2:99:
7e:f2:d3:91:b6:a7:25:e4:62:1c:45:8d:79:4b:b6:f5:93:e3:
1d:f7:42:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhkTqsSylptf7EWQJ3fmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjYwNDE2MjMwMDI5WhcNMjYwNDE3MjMwMDI5WjAzMTEwLwYDVQQD
Eyg4NjA0ZmY2ZDc4N2E5ZWIyYTI1NjkzM2Q5Y2EzNTgwNmJiYjcxZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZTGKxhqurKMzh5XtUit+gAhrqtz
DOSOju+zFtcjus4/Z1PVvDqukolZBk4oEmaZYAtIHSvJ/3xhez0mMBfAr44zz5Te
HnBdn1Ltv+4vnTigouwKGSZXTIeGxy1r8V6L30wU+yN9POAyDy1vPepaLDsLMTFJ
NvOYWloXhsVrnLVYqofz/TpJClAEG2HSdLWv2aaaiQRoORN6c3SiKaM8YH/+vI0V
U13T6EJEc1v726dVHn4gyoxrhwlh4mtjMWlF3yJhphhrkELCXTKf5RX5xOOQgz+m
Hj12ltxdf4Ut63d2RwzwItfjYvu/GAsTcc6LzMye3D+oapRrWDAnZMd6vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYE/214ep6yolaTPZyjWAa7tx9YMB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiaf967S
1EqOBw/7WlNOebqup8XhyhrxbfnPJmil6ty01YjryErL/1+pKS2TmrGAaJsC8z2I
RRAUP3vzoBjpYYc0Co7G7aogfrcJCrC0kEh1tLsTqvroGXmxo1tuHW7p6OPo8i8Q
aFNySrSrDAHhVCyxY4UBzbDLkVN8ejYleYk6l0kFFqg8ccd3IdNJHSNu/w+6uUPB
1IciwzcilaxhqmEmwvsO9ZVd2guekQhchCluzwvi9sLyarjxLLnKWDNsl57pN6kw
ynOniPsLiw/mzoWC/YS/dyU9MGp5QcfqdkiqMdoIlk/6TtKZfvLTkbanJeRiHEWN
eUu29ZPjHfdCcw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:40 2026 by rpki-client