Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: +6vAqKDtX+bWB/0pxb9eCzDjsSPcsSTn6TBNAzUhk4s=
Subject key identifier: F5:CE:3B:14:EE:3F:25:D1:7C:11:F5:FC:6E:DB:EC:BF:A5:2A:57:04
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019D9A06C5FC135FB907A7F6557FAAF0D6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0E36
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: AsK2uztnxQm7GmE36ie8VWKszqc.roa (hash: MmG9MMdxlYTR95FSVo5MmqnSkxmRmjdkjXGjYjlA1cA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: Kde8Jz3BfJz8gqEwJDPjVc7bNQtMFKKVa1H0noTW10A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c5:fc:13:5f:b9:07:a7:f6:55:7f:aa:f0:d6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=f5ce3b14ee3f25d17c11f5fc6edbecbfa52a5704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:75:a5:3e:9f:5b:5b:87:1e:ca:68:e2:dc:
c7:0b:d2:7c:13:95:68:29:ac:d0:2d:6d:3b:a0:be:
72:e3:16:33:a5:b6:5c:0d:05:8a:44:10:62:b3:a5:
30:0a:a5:55:08:17:5b:83:36:21:70:cd:1f:71:7c:
61:c9:a2:b3:3b:f4:d8:87:d6:ba:80:3c:79:df:12:
50:e7:ae:72:11:36:08:c7:c3:98:81:6b:dd:5c:28:
70:b4:9c:6e:c3:2e:da:55:16:12:a1:40:fe:6d:2c:
83:9b:c2:b9:f5:02:cf:b3:97:0b:8f:8b:5f:84:a0:
a1:8f:7b:d6:30:90:b1:2f:81:41:05:a9:60:bc:72:
44:a3:c4:6f:29:ce:93:64:0a:50:c0:a8:22:aa:49:
9f:3d:3f:8e:2f:33:b3:9b:b8:31:d1:8b:85:13:ef:
7e:d4:e2:33:d7:30:53:f0:98:74:8f:bb:95:fe:38:
f3:8d:46:90:cf:18:68:4c:ba:97:c7:80:f8:1e:7a:
4d:4b:03:ed:d8:52:b5:28:ee:67:c6:46:db:e6:2e:
7b:e0:39:fe:fa:94:12:35:35:6a:25:fa:11:26:0e:
ba:17:3e:54:ff:30:b3:5f:52:e4:3a:dc:3a:67:ef:
63:78:72:cd:1c:f3:9f:f3:3a:c8:21:c3:c1:86:72:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CE:3B:14:EE:3F:25:D1:7C:11:F5:FC:6E:DB:EC:BF:A5:2A:57:04
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:61:63:6e:f2:9e:d1:1a:d2:36:e4:87:58:2c:c9:ee:c1:7e:
c2:5b:f8:5b:12:0f:8d:a8:c3:68:48:db:49:44:12:54:72:f5:
dd:12:b4:93:e5:64:2c:10:f6:70:0c:2c:68:e5:b8:b8:5c:fa:
9f:71:77:09:7e:dc:16:8a:7a:28:5b:89:10:ef:c4:eb:7e:09:
bc:f5:62:2e:eb:19:01:05:fe:a4:34:e9:40:85:96:a4:47:a5:
0f:b6:d1:69:70:55:04:03:0f:fd:80:e5:60:ee:4b:59:08:5d:
ce:b0:d8:f1:8e:2d:01:18:f6:24:26:b4:6f:1e:b8:7b:9c:f7:
64:77:2a:14:3f:51:70:9b:c8:f6:77:ea:5a:47:a9:df:7d:1b:
e0:6a:f7:0f:32:22:fc:68:92:ac:57:be:fa:ad:3d:3d:e9:88:
13:4f:38:99:38:75:c8:0e:0a:a0:2f:f7:94:07:12:9b:9e:77:
a1:5c:2c:c7:af:e8:3a:37:7b:e8:89:ad:92:3a:56:f2:2e:74:
6b:d9:50:67:c8:58:c8:b9:34:96:9a:4b:02:3b:7d:e7:f6:96:
07:1d:c0:a7:e2:cd:c4:96:5b:8e:66:3f:29:fa:23:bb:7a:d6:
23:7f:e4:82:e8:1d:cd:54:5b:f7:c8:7e:26:8b:b5:6b:0e:28:
a5:bb:48:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBsX8E1+5B6f2VX+q8NakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Mzg5Y2U4MjZiYzhkMjY4NjliNDUyZjNjZDkzNjkwMmM1
NTJmYmYwHhcNMjYwNDE3MDYwMDI4WhcNMjYwNDE4MDYwMDI4WjAzMTEwLwYDVQQD
EyhmNWNlM2IxNGVlM2YyNWQxN2MxMWY1ZmM2ZWRiZWNiZmE1MmE1NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSR1pT6fW1uHHspo4tzHC9J8E5Vo
KazQLW07oL5y4xYzpbZcDQWKRBBis6UwCqVVCBdbgzYhcM0fcXxhyaKzO/TYh9a6
gDx53xJQ565yETYIx8OYgWvdXChwtJxuwy7aVRYSoUD+bSyDm8K59QLPs5cLj4tf
hKChj3vWMJCxL4FBBalgvHJEo8RvKc6TZApQwKgiqkmfPT+OLzOzm7gx0YuFE+9+
1OIz1zBT8Jh0j7uV/jjzjUaQzxhoTLqXx4D4HnpNSwPt2FK1KO5nxkbb5i574Dn+
+pQSNTVqJfoRJg66Fz5U/zCzX1LkOtw6Z+9jeHLNHPOf8zrIIcPBhnJ3dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXOOxTuPyXRfBH1/G7b7L+lKlcEMB8GA1UdIwQY
MBaAFMc4nOgmvI0mhptFLzzZNpAsVS+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2Et
NTIwMDhkMWNiOWI2LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2EtNTIwMDhkMWNiOWI2
LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGFjbvKe
0RrSNuSHWCzJ7sF+wlv4WxIPjajDaEjbSUQSVHL13RK0k+VkLBD2cAwsaOW4uFz6
n3F3CX7cFop6KFuJEO/E634JvPViLusZAQX+pDTpQIWWpEelD7bRaXBVBAMP/YDl
YO5LWQhdzrDY8Y4tARj2JCa0bx64e5z3ZHcqFD9RcJvI9nfqWkep330b4Gr3DzIi
/GiSrFe++q09PemIE084mTh1yA4KoC/3lAcSm553oVwsx6/oOjd76ImtkjpW8i50
a9lQZ8hYyLk0lppLAjt95/aWBx3Ap+LNxJZbjmY/Kfoju3rWI3/kgugdzVRb98h+
Jou1aw4opbtIEw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:07 2026 by rpki-client