Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: VKXtwYcT1o2qb9N8XdZ4N7WtMcCqIMYYX3UgelPSuPc=
Subject key identifier: AE:31:D0:CD:B7:BE:FC:F8:4A:7A:B3:8D:76:9C:7F:C4:20:8E:45:B9
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019D9A3E7E668F2CDCBD838AF930E353A178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 0776
Signing time: Fri 17 Apr 2026 07:01:19 +0000
Manifest this update: Fri 17 Apr 2026 07:01:19 +0000
Manifest next update: Sat 18 Apr 2026 07:01:19 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: 1VNykC+quy1TNaFKcLBfWioIOsDHhBV9CRXUFt6Z+0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:7e:66:8f:2c:dc:bd:83:8a:f9:30:e3:53:a1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Apr 17 07:01:19 2026 GMT
Not After : Apr 18 07:01:19 2026 GMT
Subject: CN=ae31d0cdb7befcf84a7ab38d769c7fc4208e45b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:e3:73:0a:9a:b1:20:ef:54:7b:b6:e4:d7:
88:f1:ef:93:f0:af:73:ff:3a:ee:f7:e5:0b:f6:07:
2d:92:16:2d:72:4f:74:cf:7d:ee:2d:10:43:4d:60:
2a:45:51:6a:bf:f9:87:c4:de:4b:de:80:42:c0:8b:
e1:b9:93:64:aa:8b:ff:ee:ef:eb:94:be:ba:f5:eb:
ed:09:f7:71:63:75:02:bf:2f:23:d2:4f:71:f6:d6:
5a:d0:ee:99:36:10:f6:f4:fa:53:20:fa:0a:b2:7b:
6a:6a:20:a7:69:ea:4b:28:3e:65:53:1e:32:21:02:
3d:78:cb:f1:c4:58:fb:f9:60:aa:94:81:50:c4:33:
85:c5:6d:e2:a6:31:19:6a:35:ba:95:1c:f1:38:4e:
ef:eb:85:11:e5:25:89:37:16:74:2e:ea:e7:45:4d:
bd:2c:eb:da:5f:56:b0:ec:76:6e:aa:1a:46:ba:6c:
45:85:73:76:b6:11:15:9a:4a:a4:7f:72:65:04:70:
e1:89:93:e7:27:b8:27:dd:f6:b7:86:88:e5:4f:95:
c0:49:69:54:84:a3:f3:2c:87:ae:aa:f8:78:8d:85:
60:b9:e3:9b:e9:09:f0:66:13:53:54:e2:1d:ae:3b:
22:3d:6c:44:81:7a:1c:69:01:a4:07:2e:9f:2c:77:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:31:D0:CD:B7:BE:FC:F8:4A:7A:B3:8D:76:9C:7F:C4:20:8E:45:B9
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:91:1f:38:81:5c:2e:49:31:a5:b2:58:7c:30:2f:df:e4:76:
da:6b:e1:e7:91:67:34:ab:11:53:a0:20:4a:09:f1:4a:93:61:
a5:c0:6d:a5:ba:6c:54:42:6c:7c:07:b3:2b:8e:5c:58:50:e5:
0b:a0:fe:68:4f:ea:17:22:92:06:4a:61:de:6d:bc:e4:1e:6b:
7a:76:ae:c8:37:1a:9c:67:85:e4:58:01:46:bc:b9:30:22:3b:
fa:0e:99:c2:b8:70:17:1e:e7:25:c2:3d:7a:92:dc:d7:85:ba:
74:6b:18:e4:e4:16:43:4c:5d:96:f6:59:c3:52:68:8f:b5:02:
b9:09:e7:13:2a:de:99:b4:74:76:3b:90:4c:b1:45:1f:1c:08:
ea:64:e4:20:39:9a:4b:49:31:d8:06:5f:59:74:02:87:a6:dd:
dc:86:73:be:dc:ba:94:bd:27:87:bb:b9:0d:dc:2f:6d:94:a0:
c5:ea:cd:2c:33:fc:d8:b3:a0:92:ed:e7:a9:bd:b7:ac:6f:c4:
74:ec:88:0a:2d:cd:41:83:4f:9a:b1:be:ea:5d:57:93:ec:e9:
0a:f6:3e:9e:3b:83:2c:72:d2:df:4c:06:c0:5c:21:00:b5:55:
10:9a:59:4f:2f:a2:19:9a:74:f1:8d:30:d2:a8:7b:1a:0b:46:
8b:ea:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:16 2026 by rpki-client