Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: N8jxlKof6SzRgbi/ww1xjzo+6dnFmnx9fxCyZV62EVo=
Subject key identifier: E0:B9:E2:FC:BD:E7:88:4A:AE:0A:EB:72:0B:DD:91:C5:75:4F:10:74
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019D9999A40BECBE6A862B76AB22639D6E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 04:01:16 +0000
Manifest this update: Fri 17 Apr 2026 04:01:16 +0000
Manifest next update: Sat 18 Apr 2026 04:01:16 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: nMj+yopEOCXXW/z5JkNeW3fzOob6QUk1qevHQUIFUfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a4:0b:ec:be:6a:86:2b:76:ab:22:63:9d:6e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Apr 17 04:01:16 2026 GMT
Not After : Apr 18 04:01:16 2026 GMT
Subject: CN=e0b9e2fcbde7884aae0aeb720bdd91c5754f1074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:1b:36:97:0c:54:13:9a:4e:f9:9f:26:f8:
29:64:ec:6a:00:f8:2f:77:4a:82:95:5d:5a:d4:f1:
51:37:16:26:c9:b3:c3:a5:94:b3:b4:29:34:df:31:
f7:79:b2:1a:f5:21:9d:dc:f4:51:69:e0:78:4c:b3:
d9:c2:74:90:74:da:d2:14:cc:25:eb:66:eb:9c:0e:
f5:51:96:f9:22:e8:b7:6f:b8:e4:a3:54:e1:1c:37:
5e:d4:e6:7b:18:26:4a:81:e9:33:c4:63:f8:37:51:
f7:fa:58:c8:cf:c3:8f:45:ae:00:23:c6:d3:c0:67:
4d:30:a6:e8:1e:8d:f2:90:06:f9:d6:98:ec:a0:69:
31:7e:38:ef:11:2a:8d:52:58:cd:73:23:cc:92:48:
68:03:d6:96:0e:79:34:c6:41:18:cd:c9:39:10:5e:
5e:66:80:91:53:d8:0b:1b:06:02:85:15:bc:18:f6:
3d:8e:61:8c:88:bd:ab:db:0e:7f:59:ff:22:09:64:
30:64:f4:f3:7f:d6:5e:2b:6f:79:8e:d6:ce:12:19:
a5:8e:bc:dc:b6:bc:45:5a:2d:71:3f:5f:17:54:6e:
61:cc:9a:ea:e7:b5:79:fb:d7:65:95:ec:d2:ca:f0:
78:56:ae:09:da:20:c5:ed:0c:a8:b5:8a:74:4e:0c:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:E2:FC:BD:E7:88:4A:AE:0A:EB:72:0B:DD:91:C5:75:4F:10:74
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:55:2f:2d:3a:34:c1:98:74:b8:45:93:20:6b:57:e7:97:
b6:5e:52:02:6a:90:a2:10:d8:48:4a:12:b1:4a:ff:d8:ef:42:
06:e6:ee:b1:93:0c:b3:c4:7b:d1:aa:3d:12:3b:06:57:29:3a:
89:9b:05:2a:e8:d1:f5:e4:6a:0b:b7:48:18:7b:71:ae:57:de:
46:42:80:96:88:e8:eb:e9:df:8a:a5:5d:37:58:55:73:1c:97:
47:ac:51:90:41:bf:bd:13:e9:3d:83:06:3d:71:53:4e:96:82:
5c:9c:bd:06:91:98:f4:ce:ef:51:68:b8:24:61:70:8d:9d:a4:
2f:60:7f:a3:cc:09:52:c2:23:3d:9d:78:c9:af:35:cd:73:15:
70:d9:57:12:bb:1a:3b:49:29:6c:4b:bb:18:61:48:d7:cb:b4:
74:42:44:a3:41:b4:de:c3:a0:09:9b:b8:e6:38:e3:7a:43:c1:
7d:68:50:b3:dc:01:05:c7:09:07:72:57:04:97:18:3f:59:5f:
29:3e:f3:7a:14:64:a8:12:d2:dc:68:2d:15:74:6c:a2:db:17:
1a:dc:c1:dc:d1:11:56:6a:96:3e:2b:9b:6a:7f:f4:d5:9f:b3:
e8:3c:8a:43:47:6a:32:55:cc:c9:bd:35:be:cb:04:fa:a3:20:
f1:71:61:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmaQL7L5qhit2qyJjnW5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YTRkMmY2ODkxM2VhY2U2YzlmNTA5MmJkYzdkZDIwZjU3
NGY0MzgwHhcNMjYwNDE3MDQwMTE2WhcNMjYwNDE4MDQwMTE2WjAzMTEwLwYDVQQD
EyhlMGI5ZTJmY2JkZTc4ODRhYWUwYWViNzIwYmRkOTFjNTc1NGYxMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtusbNpcMVBOaTvmfJvgpZOxqAPgv
d0qClV1a1PFRNxYmybPDpZSztCk03zH3ebIa9SGd3PRRaeB4TLPZwnSQdNrSFMwl
62brnA71UZb5Iui3b7jko1ThHDde1OZ7GCZKgekzxGP4N1H3+ljIz8OPRa4AI8bT
wGdNMKboHo3ykAb51pjsoGkxfjjvESqNUljNcyPMkkhoA9aWDnk0xkEYzck5EF5e
ZoCRU9gLGwYChRW8GPY9jmGMiL2r2w5/Wf8iCWQwZPTzf9ZeK295jtbOEhmljrzc
trxFWi1xP18XVG5hzJrq57V5+9dllezSyvB4Vq4J2iDF7QyotYp0TgxqqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC54vy954hKrgrrcgvdkcV1TxB0MB8GA1UdIwQY
MBaAFMek0vaJE+rObJ9Qkr3H3SD1dPQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTkt
ZjlhMWJiYzM2ODQ1LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTktZjlhMWJiYzM2ODQ1
LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvFVLy06
NMGYdLhFkyBrV+eXtl5SAmqQohDYSEoSsUr/2O9CBubusZMMs8R70ao9EjsGVyk6
iZsFKujR9eRqC7dIGHtxrlfeRkKAlojo6+nfiqVdN1hVcxyXR6xRkEG/vRPpPYMG
PXFTTpaCXJy9BpGY9M7vUWi4JGFwjZ2kL2B/o8wJUsIjPZ14ya81zXMVcNlXErsa
O0kpbEu7GGFI18u0dEJEo0G03sOgCZu45jjjekPBfWhQs9wBBccJB3JXBJcYP1lf
KT7zehRkqBLS3GgtFXRsotsXGtzB3NERVmqWPiuban/01Z+z6DyKQ0dqMlXMyb01
vssE+qMg8XFhmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:39 2026 by rpki-client