Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: AehIzQr4FbTjCSfDUqeI63o/gVmWLPy0SDgMxJVqw4I=
Subject key identifier: 5C:59:9F:82:88:2F:1C:8F:53:70:85:DA:FA:AD:27:B1:41:A6:11:92
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 019D9B1955B17BEB3A5B61E1D43233A37EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 11:00:21 +0000
Manifest this update: Fri 17 Apr 2026 11:00:21 +0000
Manifest next update: Sat 18 Apr 2026 11:00:21 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: d/U6tOek9e9+0/H2qaDNM+pTWLSQ/8KNlIvZxBSOoSw=)
2: rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa (hash: CyKHZsof9BroFMJ4kJHFaNGpd7KJ3UUKrH85vt5M3yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:55:b1:7b:eb:3a:5b:61:e1:d4:32:33:a3:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Apr 17 11:00:21 2026 GMT
Not After : Apr 18 11:00:21 2026 GMT
Subject: CN=5c599f82882f1c8f537085dafaad27b141a61192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:90:64:36:8b:e1:78:b1:24:24:e5:03:f3:
b4:af:1f:aa:46:8d:f7:73:27:b8:37:44:94:b8:16:
b1:d2:94:ec:64:52:80:29:89:d3:ac:62:3a:3a:18:
95:ba:48:25:a0:38:38:41:ed:95:e0:c9:66:d8:df:
83:f8:ba:52:ae:b4:af:81:aa:67:05:38:04:69:55:
8f:2f:db:70:1b:05:8a:5b:c3:89:58:6c:8a:ba:9f:
6a:44:fb:51:e6:7b:3a:0d:d4:d8:5a:bd:16:73:1f:
c9:cf:e7:4b:70:c2:f6:55:42:47:b5:e5:2e:c4:e8:
02:25:b9:1d:97:f7:aa:2f:a3:2a:58:3f:1a:14:f9:
1d:95:a5:e2:a0:04:06:f5:46:a4:fe:3b:fc:a5:21:
3f:0b:f2:6f:09:47:93:e3:2c:d9:d3:f1:d2:00:7b:
86:e9:90:5e:82:cd:9e:02:97:dd:49:74:bd:90:cb:
f6:db:dd:4c:0c:cf:c1:72:92:f6:f5:36:7b:50:cf:
f3:04:47:20:b6:88:72:56:c4:01:e1:58:d6:4a:8b:
3b:18:bd:5a:9d:4c:e3:8a:a2:9d:2d:67:6c:13:a2:
22:1f:5c:b6:2b:2e:40:f0:0e:c4:ac:56:41:a1:83:
43:da:ef:98:a8:ae:d7:fc:99:21:0e:6e:73:0e:b9:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:9F:82:88:2F:1C:8F:53:70:85:DA:FA:AD:27:B1:41:A6:11:92
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c6:a4:f6:ba:5e:7b:8f:65:e9:35:b0:93:ba:be:0f:00:14:
ec:cb:54:e7:55:22:41:72:93:eb:39:66:5c:bd:22:b8:6f:70:
1b:d0:60:92:67:d7:12:3d:b0:da:93:1c:2e:71:8e:09:d0:2b:
2c:89:71:51:b3:fd:3f:b8:63:53:a3:bf:13:37:17:c5:d7:4d:
5d:2e:ff:4e:e0:42:ea:d5:9c:d6:38:29:10:3c:c2:c7:25:21:
56:55:52:c0:a8:43:33:8c:ab:f1:bc:39:2f:76:67:62:f0:92:
7b:3d:16:60:56:e5:8e:54:05:d4:54:e2:e6:6a:a9:45:dd:0c:
f5:c1:d4:61:93:09:4e:9b:da:f7:f7:a2:de:66:cf:d0:ce:5b:
ac:fa:f1:e3:66:92:49:33:e7:2c:92:51:6b:04:ee:b7:fc:6b:
44:25:e4:67:03:24:3f:25:5e:1c:dd:89:47:48:03:ea:ad:22:
f1:05:f0:a4:3d:2f:53:86:20:85:ff:36:53:7b:7e:b4:af:4f:
c8:79:9a:89:a2:db:4b:e8:6a:e4:a9:28:8c:57:84:4a:8b:5c:
6a:5d:fe:e4:97:ef:04:62:10:10:60:1a:7d:e5:8b:5e:80:84:
bd:4b:62:0d:1b:12:60:97:a7:a4:55:6d:36:2f:9f:5a:c1:b4:
4f:3a:b6:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGVWxe+s6W2Hh1DIzo36/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi
Yzk5MjMwHhcNMjYwNDE3MTEwMDIxWhcNMjYwNDE4MTEwMDIxWjAzMTEwLwYDVQQD
Eyg1YzU5OWY4Mjg4MmYxYzhmNTM3MDg1ZGFmYWFkMjdiMTQxYTYxMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjSQZDaL4XixJCTlA/O0rx+qRo33
cye4N0SUuBax0pTsZFKAKYnTrGI6OhiVukgloDg4Qe2V4Mlm2N+D+LpSrrSvgapn
BTgEaVWPL9twGwWKW8OJWGyKup9qRPtR5ns6DdTYWr0Wcx/Jz+dLcML2VUJHteUu
xOgCJbkdl/eqL6MqWD8aFPkdlaXioAQG9Uak/jv8pSE/C/JvCUeT4yzZ0/HSAHuG
6ZBegs2eApfdSXS9kMv2291MDM/BcpL29TZ7UM/zBEcgtohyVsQB4VjWSos7GL1a
nUzjiqKdLWdsE6IiH1y2Ky5A8A7ErFZBoYND2u+YqK7X/JkhDm5zDrlyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxZn4KILxyPU3CF2vqtJ7FBphGSMB8GA1UdIwQY
MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt
ZTYxNWY1NmY3OGIxLzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx
LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecak9rpe
e49l6TWwk7q+DwAU7MtU51UiQXKT6zlmXL0iuG9wG9BgkmfXEj2w2pMcLnGOCdAr
LIlxUbP9P7hjU6O/EzcXxddNXS7/TuBC6tWc1jgpEDzCxyUhVlVSwKhDM4yr8bw5
L3ZnYvCSez0WYFbljlQF1FTi5mqpRd0M9cHUYZMJTpva9/ei3mbP0M5brPrx42aS
STPnLJJRawTut/xrRCXkZwMkPyVeHN2JR0gD6q0i8QXwpD0vU4Yghf82U3t+tK9P
yHmaiaLbS+hq5KkojFeESotcal3+5JfvBGIQEGAafeWLXoCEvUtiDRsSYJenpFVt
Ni+fWsG0Tzq2Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:12 2026 by rpki-client