Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier: F64WsXFGoJPInOqIm7Lsl5oRkVXRsUSEZXfWYX57EN4=
Subject key identifier: D5:1A:AB:A2:4A:C2:00:D1:85:D6:3D:34:A7:14:E6:A4:7E:FD:9D:E8
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 019D9998D2EF5ED0FEDA3C5BB9EF6C8CB6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number: 14BD
Signing time: Fri 17 Apr 2026 04:00:22 +0000
Manifest this update: Fri 17 Apr 2026 04:00:22 +0000
Manifest next update: Sat 18 Apr 2026 04:00:22 +0000
Files and hashes: 1: k6Kk-SSfPt5X64syTmG4cY1i-K0.roa (hash: CudYTrmTazmdAPM102kIxAqGfFrQWQy3gnFrCAxwveE=)
2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: KHfeirV+umwXETwjvA8T+ABULNrw2HB6UjXmEB5/u/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d2:ef:5e:d0:fe:da:3c:5b:b9:ef:6c:8c:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Apr 17 04:00:22 2026 GMT
Not After : Apr 18 04:00:22 2026 GMT
Subject: CN=d51aaba24ac200d185d63d34a714e6a47efd9de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:8f:24:53:c2:b7:26:98:c6:ec:83:bf:cd:
4a:d5:3b:1b:b8:e2:e3:49:1a:90:48:ba:e7:21:c8:
7c:19:f4:b2:a7:02:56:32:12:fb:df:a4:b3:d0:dd:
75:cb:16:dc:31:4d:f6:71:cf:5f:23:76:01:2b:da:
58:a3:8d:3a:9b:c8:70:79:01:ac:9b:38:04:46:18:
b8:32:75:cd:2f:00:b6:ad:53:5d:b6:fa:c7:93:2a:
03:ee:e5:ae:ea:e8:36:a0:32:a3:77:3e:dc:2a:bc:
f3:f0:1d:d7:d5:9c:3a:29:78:5c:c0:0c:52:9f:ba:
c8:d0:41:87:6e:6a:d0:5f:90:48:a5:38:51:2f:50:
d6:f4:40:01:c3:c9:2a:bf:a9:40:c8:1d:8a:5b:84:
4a:08:85:0a:56:75:6c:a1:ce:94:a9:c6:a9:b1:87:
69:db:0a:cf:ce:fd:9a:45:81:0a:e5:4e:14:8d:62:
b7:5c:f9:76:ca:59:0d:ce:96:c7:b0:50:c0:6a:38:
60:f8:2f:78:93:d4:48:03:bf:68:66:0e:33:3e:2d:
4e:a8:29:2d:2d:58:94:43:d3:02:bf:5e:7b:9d:6d:
1a:34:6f:96:a5:26:31:b3:01:e6:43:a8:0a:4a:03:
df:3a:6a:0c:5a:92:b3:71:a6:69:e1:b3:3c:21:e3:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:AB:A2:4A:C2:00:D1:85:D6:3D:34:A7:14:E6:A4:7E:FD:9D:E8
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:72:ba:2c:cd:a4:3f:67:53:db:8f:08:3c:59:58:e5:9c:7d:
bb:9b:37:24:fe:62:27:2f:bc:df:0e:ca:06:bb:4d:dd:80:5b:
ce:b8:2f:d9:43:a5:a7:45:f5:08:54:b6:d1:d3:82:ab:b5:b5:
38:4d:4e:bc:30:6b:69:b2:9c:98:ac:e6:0e:1e:1f:6d:2c:10:
fd:d3:e3:ce:ce:5e:7c:79:ba:15:d7:b8:8d:b3:89:1a:d7:cf:
57:ef:d7:a5:6e:24:13:52:a7:3a:07:44:f6:53:da:3c:53:fc:
7b:05:b4:0e:4b:52:2b:fd:ad:5c:27:35:6f:89:95:6d:07:f4:
9c:b8:c7:24:6b:14:c9:d4:d4:9b:40:f0:1b:1a:7d:ad:97:a4:
19:e0:a4:ec:09:cc:1a:65:9a:79:cb:20:25:8e:d7:1a:bb:9d:
de:69:6c:d7:27:0b:5a:b6:05:62:8d:33:7b:6e:cb:e9:c7:18:
41:d5:48:b9:c3:5f:7c:f2:47:c9:f9:5e:2b:dd:82:13:f1:01:
b4:05:9e:4d:65:d1:9c:84:a7:ea:5f:58:69:91:41:0e:71:0c:
f1:90:4c:ed:53:fc:b0:5a:4c:ad:f7:7a:1c:5c:10:9e:d3:4a:
77:07:b6:77:05:03:6b:aa:c3:07:6a:e6:fb:05:e3:b7:72:5b:
f1:fb:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:18 2026 by rpki-client