Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: Xggg6qJ+6Y/S+XIFtRDbSBP9vAkfMcF1ZJGQ+GbKAoI=
Subject key identifier: 1E:C1:99:A2:56:58:41:9C:BF:EE:44:56:C8:4A:A0:EC:97:4D:2E:E6
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 019D9A0725C83C1B5D09D31F1C6965DEB1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:52 +0000
Manifest this update: Fri 17 Apr 2026 06:00:52 +0000
Manifest next update: Sat 18 Apr 2026 06:00:52 +0000
Files and hashes: 1: biJ04bmigw6iVpUiIdYRLfiKayE.roa (hash: //R/p5jeoEyHzrVxssR2SpOIbWo1BamvM90LorlHczo=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: SlWge4sxqf6C/QiYOhBAzj2gP6v6tOvaBojLzsqB4Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:25:c8:3c:1b:5d:09:d3:1f:1c:69:65:de:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Apr 17 06:00:52 2026 GMT
Not After : Apr 18 06:00:52 2026 GMT
Subject: CN=1ec199a25658419cbfee4456c84aa0ec974d2ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:ec:87:76:b6:93:32:cb:40:cf:06:80:5c:
ae:bb:0b:45:3a:9e:de:ac:d2:38:c4:00:aa:61:52:
bc:8a:e9:5f:db:97:40:40:06:2c:0f:1f:22:4d:fe:
e3:d4:bc:9a:61:1e:e0:32:e3:9c:99:7d:e0:af:1d:
de:9a:ac:f5:d6:ce:7a:4d:b3:31:e2:19:76:81:c9:
e3:a6:d0:52:70:19:49:1d:8b:16:7e:8e:9f:ef:01:
06:09:f2:2d:cc:82:0e:bc:83:90:22:b3:67:1b:c7:
98:56:1a:2b:df:f0:a3:b8:a7:f3:ab:ba:9b:40:15:
64:92:70:da:80:d7:f9:03:9a:69:98:7e:87:b9:f7:
d0:e8:06:4a:48:0d:cb:d6:48:b6:b5:53:eb:e9:ef:
79:a9:b9:7f:fc:5f:4c:d6:57:70:20:0f:bd:6e:1f:
ff:8d:22:06:4d:8b:1f:ce:7e:1d:a2:6c:ee:91:71:
c5:5b:9c:aa:e9:72:84:c5:c7:f6:1f:42:f4:97:f1:
d3:5d:00:9b:c2:59:33:d4:3a:ed:59:92:05:2e:cb:
42:ca:e7:3e:6c:4f:7c:2b:5a:09:cb:fd:14:28:88:
5e:5e:a8:58:55:37:66:f0:f6:e9:ba:73:09:47:20:
d5:7b:f4:8e:ba:55:5b:c3:c5:2f:f9:2d:df:01:bb:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C1:99:A2:56:58:41:9C:BF:EE:44:56:C8:4A:A0:EC:97:4D:2E:E6
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:08:71:fd:ec:21:e3:9a:c6:e4:8a:37:80:9e:7a:dd:b2:2b:
68:d2:e5:b6:d7:2f:ae:8d:aa:93:34:cb:2c:c3:d8:2f:50:10:
55:af:e1:88:68:0f:4d:8d:bd:a2:54:1b:55:98:2e:4c:93:e5:
0d:75:e6:61:0a:05:18:92:c4:93:0f:a0:c9:d7:ed:6c:e1:f0:
b4:32:19:93:4e:5f:b8:3c:e7:25:40:f4:64:89:66:25:f5:83:
75:61:ef:5c:1a:31:c5:7f:f3:37:82:c8:24:f2:c5:da:5c:58:
66:08:7a:ae:e6:fa:5d:00:75:0f:d9:19:ac:51:8f:9d:3e:b2:
31:c8:9d:2f:89:b7:2a:de:30:2c:21:4c:22:85:a5:34:3f:56:
cb:0f:93:9c:69:da:9f:7a:42:b6:86:d4:70:9b:d3:f8:98:2c:
f7:2c:66:4e:b2:23:60:2a:b0:17:7e:15:52:b1:9e:d0:42:f8:
54:01:90:c7:86:d1:49:ff:ba:02:bc:ae:7e:28:7c:27:c4:80:
28:9c:78:8b:fa:d9:40:57:f2:0b:9c:6a:dc:5e:71:53:8f:08:
c6:ba:95:43:69:04:7c:6e:65:1a:0f:78:db:0a:08:04:6e:ac:
f0:d2:b4:49:ba:f0:88:c3:2e:a6:c5:cf:08:6e:22:92:0f:95:
26:47:3d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:48 2026 by rpki-client