Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: U5cxsB/AgGd3hCL6lFJc71Qka4y7GIRKrbv21onIUwQ=
Subject key identifier: 55:75:CA:75:F9:57:E6:5F:30:E8:F8:62:2D:86:7D:A1:02:6C:9A:85
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019D9AE313139628E5F4ED3A807F32762B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 170F
Signing time: Fri 17 Apr 2026 10:01:05 +0000
Manifest this update: Fri 17 Apr 2026 10:01:05 +0000
Manifest next update: Sat 18 Apr 2026 10:01:05 +0000
Files and hashes: 1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: GJuuNglZAM/LBv9A7/nuIgKuro33quErk4A0KiPitco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:13:13:96:28:e5:f4:ed:3a:80:7f:32:76:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Apr 17 10:01:05 2026 GMT
Not After : Apr 18 10:01:05 2026 GMT
Subject: CN=5575ca75f957e65f30e8f8622d867da1026c9a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:75:b1:85:9e:67:7f:9d:5a:71:f5:33:8d:
c9:e3:98:1c:b6:f2:41:6c:bf:9f:56:f7:b2:9d:71:
ae:ec:5a:25:98:e1:7b:dc:1c:c1:4c:72:c2:c1:81:
d9:b1:28:68:9e:b5:56:2c:ab:27:80:55:7b:0c:13:
d3:e6:40:68:0c:d0:af:01:00:d4:a5:0f:51:3b:02:
cb:15:13:4a:b9:a6:9c:65:c5:81:b9:5e:f1:33:09:
20:ed:75:bb:26:6f:28:71:3b:d4:a9:19:7a:2a:1d:
ac:5c:c4:3b:a0:ad:09:01:65:97:9b:c0:ab:55:39:
67:22:af:a4:f1:51:1f:07:80:41:b5:d2:52:20:68:
ed:2e:d2:55:e7:ca:cd:94:71:cd:05:60:61:4f:74:
46:fe:45:c5:66:3b:4d:cc:80:8f:9d:29:3c:09:ed:
4f:04:dd:32:3d:b3:13:45:ad:93:0f:49:11:b7:4b:
d4:43:8d:ac:9b:9b:cb:5e:c5:f7:f5:bb:bc:14:f0:
35:b5:0c:ee:d1:ad:35:be:14:36:91:f4:04:a0:fa:
e4:fd:c6:dc:94:02:55:1c:9e:2a:51:e2:09:61:01:
9b:ea:ea:93:42:78:0b:dc:0b:14:09:9c:97:c2:ed:
7f:33:6b:7d:54:ed:4a:06:46:bd:bb:bf:be:e5:26:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:75:CA:75:F9:57:E6:5F:30:E8:F8:62:2D:86:7D:A1:02:6C:9A:85
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ed:a9:1b:f6:46:60:18:13:4b:ad:58:b0:0a:07:06:93:d5:
35:d7:fb:a0:74:4c:80:ba:d4:c6:8f:98:4b:49:aa:b6:dc:a7:
a0:0a:1a:cc:f3:1f:6d:61:ce:59:8c:61:c3:d9:3c:79:4a:39:
18:6d:ea:f0:00:e7:69:f9:8d:fc:2a:fd:ce:52:76:bb:e5:28:
16:6f:65:0f:e4:3f:2d:c9:e9:ed:56:58:1a:cd:b9:45:d4:a8:
59:5e:e2:69:97:6c:dd:6b:a6:00:85:ea:53:4d:33:d5:9b:26:
3b:b4:de:40:6a:ba:56:48:ae:41:db:02:5e:ba:d6:2a:9e:20:
5f:58:90:c0:38:3b:79:0a:43:26:b2:46:e9:04:b8:0d:a0:b6:
7d:16:ab:40:b5:c7:20:32:89:20:0e:11:da:1a:e2:9e:be:dc:
5c:a9:b3:1b:17:85:0d:f9:97:2c:41:1f:e6:b8:0c:67:7a:49:
94:2d:10:2c:18:f5:c9:94:96:4f:84:69:9b:51:c8:2b:18:16:
03:c7:28:2a:c6:9a:23:4a:84:6f:74:4e:4d:d0:fe:c9:f6:5a:
6f:87:81:9d:58:55:e6:1e:e0:e3:ea:4b:bd:58:02:51:8c:ea:
77:63:ab:84:47:38:c5:3d:4d:b7:1d:27:36:ff:b5:21:63:c1:
47:80:68:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:55:06 2026 by rpki-client