Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
File: xxovfXzIw2N0bpa8P8yLBflgb-o.mft (raw, json)
Hash identifier: hB8MKkDl0wBYluOZVfNwjxmyd8KHmeHOP20uMK/9ASA=
Subject key identifier: EA:6E:7B:DD:77:91:E6:8F:B9:62:D6:66:93:7A:D3:A1:62:19:5F:5F
Authority key identifier: C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
Certificate issuer: /CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Certificate serial: 019D9C2C42947AEC3CF8E9EED1B531C64FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 16:00:39 +0000
Manifest this update: Fri 17 Apr 2026 16:00:39 +0000
Manifest next update: Sat 18 Apr 2026 16:00:39 +0000
Files and hashes: 1: xxovfXzIw2N0bpa8P8yLBflgb-o.crl (hash: NkHPP3xrsUac8szvF8+yziaEjWqHKV+xBuwspC+Dsgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:42:94:7a:ec:3c:f8:e9:ee:d1:b5:31:c6:4f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Validity
Not Before: Apr 17 16:00:39 2026 GMT
Not After : Apr 18 16:00:39 2026 GMT
Subject: CN=ea6e7bdd7791e68fb962d666937ad3a162195f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:38:4b:a6:f5:e5:83:9c:9a:80:d4:e7:d1:
c9:08:53:07:61:0a:f9:b0:7b:a9:b4:29:3f:26:00:
2e:f3:38:48:5f:f2:6e:3a:0b:ec:c0:c9:37:20:2a:
e0:e0:6a:ac:ba:e8:03:4b:84:97:36:f4:36:b0:8d:
90:75:f7:f5:7c:27:a0:3a:d1:51:e6:79:e8:ad:98:
dc:65:60:82:29:ab:26:02:fa:09:7f:89:ab:7a:db:
bd:bc:c7:c9:53:cf:6f:3a:92:e0:7c:77:e8:e3:10:
c2:00:7a:22:aa:be:cf:e3:f6:a3:05:31:4c:c5:f9:
fa:fb:bc:f3:9d:28:5e:a0:0e:14:e2:e8:35:a7:91:
f8:6a:71:61:e6:a4:cb:5a:d9:8f:49:77:e5:53:93:
d6:87:38:81:fd:57:96:43:6c:14:09:06:3e:d4:bd:
3b:c0:a6:bd:96:97:f0:d3:07:85:f0:b2:5f:41:2a:
f6:48:2a:be:7e:19:f4:39:51:16:ee:74:17:ab:01:
36:f4:5a:85:6d:66:14:06:47:7c:b3:1d:33:c6:8e:
e2:5b:0b:c1:2c:a9:d6:4c:4f:4c:96:00:78:e6:16:
8d:5c:10:b3:6a:7d:f7:5a:b6:0d:bc:57:c8:63:f6:
fa:69:9e:76:b6:72:fe:b5:fa:d0:2e:ab:1a:94:cd:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:7B:DD:77:91:E6:8F:B9:62:D6:66:93:7A:D3:A1:62:19:5F:5F
X509v3 Authority Key Identifier:
keyid:C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:27:c3:64:68:4f:fe:bb:cf:60:9a:34:b3:ff:07:bd:95:1f:
e3:77:c2:4e:9c:1a:06:2b:e0:43:8c:c9:fa:d0:11:63:fb:44:
32:62:6a:ad:aa:95:87:86:f7:d2:05:ef:9d:fd:d1:95:89:7b:
42:b8:3c:46:ea:ea:60:a4:97:98:98:68:d5:1a:d6:e3:61:74:
1c:19:a3:a0:55:08:6c:7a:51:89:23:af:ee:38:b6:c7:ea:4d:
da:72:8d:ed:b8:d3:5d:cc:40:a9:ba:a0:0e:86:a6:88:26:2b:
4c:d1:63:ec:8b:cb:61:b9:47:6a:6b:b6:31:c3:4f:d6:fb:8e:
68:70:01:a9:9e:10:dd:b8:3a:33:c6:ce:7a:7f:25:b5:05:5a:
d0:fe:0b:02:3b:48:4a:cf:87:9d:db:e2:50:7c:e8:9a:24:15:
f0:79:1d:ff:a1:30:c2:0b:c5:b9:96:f9:8d:95:b7:3a:02:7f:
0e:a0:d1:c0:78:61:bb:37:6d:04:48:b4:d7:ad:b2:25:56:b7:
f1:44:ed:07:a8:c0:d3:b2:87:a0:58:65:9b:74:2c:35:be:c7:
14:a9:56:4f:bf:67:6c:2e:79:71:1f:e7:cb:0c:c8:b8:91:ca:
0d:a2:37:05:ea:54:23:dc:29:a7:17:23:36:6c:7d:d3:55:2b:
63:37:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:33 2026 by rpki-client