Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: QqeDfzlWIPVkdx1BRFnxLsGcYTj4R2ThmnayMT3oS5E=
Subject key identifier: 77:AD:4F:56:EE:1D:7C:B7:BB:64:43:67:1D:E1:A9:A6:0D:6E:83:E4
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019D98F4B3BA6A1E5C58DC4D2F59F6DC1F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 170E
Signing time: Fri 17 Apr 2026 01:01:06 +0000
Manifest this update: Fri 17 Apr 2026 01:01:06 +0000
Manifest next update: Sat 18 Apr 2026 01:01:06 +0000
Files and hashes: 1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: 5tPYIgUnU9UvljfoFo/5GATOA5FGVU6lYNDaBFCr5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b3:ba:6a:1e:5c:58:dc:4d:2f:59:f6:dc:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Apr 17 01:01:06 2026 GMT
Not After : Apr 18 01:01:06 2026 GMT
Subject: CN=77ad4f56ee1d7cb7bb6443671de1a9a60d6e83e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:fe:fe:15:9c:4b:4f:5b:26:1e:51:68:6b:
ba:13:97:27:80:d0:87:37:bc:f9:7f:1f:b1:b3:32:
72:14:60:82:e0:86:d3:86:29:ab:ac:41:2e:c5:61:
d1:ed:53:3e:d8:5c:00:c3:c6:a1:db:d9:8e:1d:18:
1f:b3:06:1f:e5:08:60:32:3f:24:92:b8:e8:a2:f2:
8e:93:9b:ac:64:8d:cb:c5:51:1a:fe:e2:15:ec:57:
31:c5:64:ad:3f:04:85:19:f9:4a:81:14:db:81:27:
33:96:8d:72:25:d8:20:8a:a2:18:6d:6a:4e:08:d7:
67:42:42:87:cf:da:94:4d:51:5b:32:47:6d:2f:8d:
94:03:00:cd:4e:32:74:1b:f8:75:77:3d:f6:aa:d7:
e4:ad:ee:59:ff:c2:c0:5c:da:aa:76:08:3e:dd:da:
92:f9:06:b3:52:5e:3b:a8:58:2c:04:38:31:16:70:
29:97:7b:22:f5:b2:ec:67:9c:69:b2:43:13:7a:54:
e5:cb:15:d7:08:95:72:28:30:93:85:59:41:cd:f3:
a2:51:dd:f7:2b:3a:f0:bc:bf:e1:bf:8e:07:28:db:
9d:99:ff:e9:07:67:37:5d:9d:cd:b5:08:fa:88:c4:
40:01:14:d9:1d:d0:2d:85:ad:64:7b:cc:94:ff:8d:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:4F:56:EE:1D:7C:B7:BB:64:43:67:1D:E1:A9:A6:0D:6E:83:E4
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8e:1c:4f:a9:3c:45:8d:c6:9c:46:61:68:54:04:16:1c:e2:
7f:a8:63:67:89:7f:3a:ad:14:61:3d:1c:8d:cd:44:4b:5b:2d:
b7:c9:d5:d9:f4:db:98:a3:24:d5:00:24:72:22:9a:ee:96:e2:
25:2a:e2:57:ee:67:72:69:99:02:63:b0:8c:ac:0f:28:e5:d1:
c5:f5:52:b7:a0:65:c6:6a:0b:30:84:41:a1:8b:07:96:5f:6b:
73:55:cc:cb:36:3b:68:ed:b5:fd:f2:6b:67:5f:9f:19:62:08:
f6:90:59:d9:76:a0:95:0e:7d:9b:8e:e9:b7:36:a8:6a:c8:9b:
fa:ce:b8:ee:70:8b:3f:74:d9:41:3e:86:b5:27:bf:13:51:8b:
f1:4d:8e:df:04:c5:f3:5f:f0:f8:65:9a:35:6b:20:bc:eb:f7:
5d:d5:4a:1a:fb:3d:33:1e:18:82:d2:a2:10:2e:7b:6c:5f:73:
b7:71:12:19:b1:fa:f0:37:80:03:2f:ef:1c:b7:62:42:d7:2f:
5e:7a:e1:a5:95:b8:e1:44:2a:02:48:5f:9b:cc:1e:03:65:44:
13:5a:b0:11:fd:b5:37:ca:e5:a6:02:11:1e:09:a8:27:64:9f:
09:28:52:84:d9:a2:b9:8c:86:40:be:bc:6c:ae:d4:0e:1e:3c:
aa:d8:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:30 2026 by rpki-client