Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: zJVHKbifLuEk6mPI1/KLMHZVozLj5W5aKbu6Q+GYb64=
Subject key identifier: 82:76:2B:2C:89:8F:B0:CA:6D:76:96:DF:74:F0:CF:63:EC:5D:08:8C
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 019D999902AEF1A74F57FDBC92249E6E2B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 0C36
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: X88KGnsSuMt-1S71eY9zQ3RZ6tU.asa (hash: 7i3IVTiIuvLVvc+83Pz8wtd/lc6dgYITJMUxdSIn8Do=)
2: nVIGqqg1fXe0JSkAFeMlHeHVwU8.roa (hash: xrVagJd5a+kWUDCIbPyPE6cdcRfUEt1we1ew6ErH7ek=)
3: xL3RFgVCSYkC5SVoN-v-4LOaIV0.roa (hash: qCzcRwtjUOKAd+dvykGvkNnkTv7HJHG7XD6ZjU3R0R0=)
4: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: 1Q97qrt2YGsEf22SKa3NJH2cQJyI1Lp6keoP/83at1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:02:ae:f1:a7:4f:57:fd:bc:92:24:9e:6e:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=82762b2c898fb0ca6d7696df74f0cf63ec5d088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:9c:9d:92:ec:a8:55:6e:ff:02:11:28:ea:
e5:0c:4b:55:a3:04:05:48:3f:38:b2:21:2e:75:b5:
13:2e:42:58:1e:ab:13:87:aa:9e:6e:db:70:fc:aa:
46:30:c3:45:10:a8:cc:28:e3:54:f1:d9:d1:70:10:
7f:1b:72:4e:95:25:f0:13:9b:b3:23:75:19:86:20:
11:f8:ce:a6:b8:2b:ff:0a:5c:7f:75:07:e8:2b:31:
97:90:77:69:13:89:bc:a6:17:de:81:46:66:1a:ad:
25:ae:69:e2:6c:3a:a1:b4:f0:a4:68:03:f2:d9:3d:
81:f0:7b:b3:8e:a9:a3:d2:71:42:31:a6:16:07:79:
11:6f:56:91:5a:76:97:38:22:f8:77:fe:8b:36:fd:
44:88:04:86:4c:d7:a7:0a:15:2f:8c:ed:19:e4:ed:
c0:c2:62:69:32:68:91:db:b6:2b:e9:54:46:91:22:
89:5c:c1:1d:93:50:3b:66:83:53:02:f5:aa:24:a8:
02:15:01:c1:fa:8f:52:59:fb:9a:ee:94:b8:9b:c4:
34:46:a2:4c:bd:4f:61:ef:85:8a:ad:2f:e0:27:bf:
a6:b6:9d:74:52:9a:e2:76:8f:54:da:f9:5a:16:46:
07:f2:c8:99:ae:ae:f3:a6:09:79:c8:0f:ea:2b:7c:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:76:2B:2C:89:8F:B0:CA:6D:76:96:DF:74:F0:CF:63:EC:5D:08:8C
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:81:81:b6:07:52:e8:62:62:22:d6:6f:fe:b9:c6:95:6b:fb:
c4:23:bf:9e:62:0e:e8:43:5b:f1:1c:46:1f:3a:4c:73:61:af:
aa:24:1c:b5:12:d2:4f:2a:3a:89:49:f8:6d:62:6e:20:29:e4:
31:2c:fd:1e:4c:e8:13:25:9d:9b:c4:3c:ba:01:fe:c9:0d:e8:
ed:53:c3:ed:ab:e6:c6:e2:34:a3:6c:07:59:11:8a:89:e5:d8:
d6:70:bf:32:2e:e3:70:73:58:e3:50:e8:d2:1b:2c:f1:78:f9:
05:04:1d:8f:83:3a:2b:4b:e8:df:f8:e6:31:7a:84:95:ba:d0:
23:f8:75:03:9e:38:a8:2c:00:15:0d:b7:18:b0:b9:2d:3b:5c:
62:68:cc:81:d9:4b:24:2e:60:70:fe:8d:e5:0b:3f:66:17:02:
dd:ef:29:6a:d4:78:8f:82:f4:a7:eb:e6:eb:e1:54:0b:b0:be:
30:ad:a7:c5:14:48:d5:f2:c3:0c:61:13:61:29:45:a4:44:e0:
7d:4a:61:2a:5a:e5:35:75:7b:1d:9e:29:0a:30:4a:e1:a4:33:
ae:f7:a0:36:69:8e:5e:0b:55:57:b6:7f:d2:97:d1:bf:4b:5d:
50:74:13:52:d1:ca:85:e4:f3:46:c7:26:b0:ff:57:b7:a4:03:
e6:26:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:19 2026 by rpki-client