Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: TyfH5FVRnFj4a9sIri/0Z3pYpMnbWWaGUyRDuJ+0hSA=
Subject key identifier: DB:4A:83:CE:6C:DF:91:77:DA:71:FC:4D:B7:04:08:C7:BC:5D:95:83
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 019D98BDFA2C48CF59D3DC363400F273CA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 00:01:20 +0000
Manifest this update: Fri 17 Apr 2026 00:01:20 +0000
Manifest next update: Sat 18 Apr 2026 00:01:20 +0000
Files and hashes: 1: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: fn/YiFunMgqu/+sp/GbzNAyEYOsvRyZ0IBLZJBbhjqg=)
2: g5nPMDhR1xXE3aUl3Zj948mnSZo.roa (hash: hy3Afkla54p1JUhAk/RCQlLZSfZ1AsKTh6gnAbaPJ04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:fa:2c:48:cf:59:d3:dc:36:34:00:f2:73:ca:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Apr 17 00:01:20 2026 GMT
Not After : Apr 18 00:01:20 2026 GMT
Subject: CN=db4a83ce6cdf9177da71fc4db70408c7bc5d9583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:56:07:79:27:1c:8d:59:95:22:83:7e:d7:
8a:98:2a:c7:09:b3:5e:b2:93:db:8b:55:97:52:fc:
d4:ad:7f:a2:f7:5a:a2:fe:e9:02:9b:94:fd:6f:5f:
ec:15:75:4a:d2:40:b7:32:95:f9:f4:14:e6:44:26:
85:26:14:f5:9a:05:22:e0:6b:94:b6:72:96:34:fc:
d9:08:07:f7:6a:8f:50:76:11:a8:c8:5e:2b:04:31:
61:22:8a:3d:f6:5f:36:27:d2:32:cf:05:66:06:30:
f7:d8:00:67:c4:b0:95:e5:f3:8b:83:91:27:c9:bb:
aa:0c:ec:af:db:96:e2:e3:20:37:76:df:75:b0:4f:
f4:a2:a2:a0:7e:72:a0:64:e8:fc:ba:fb:fc:20:6a:
b1:71:7f:e8:f1:d3:cf:64:68:81:1d:5f:b1:9b:23:
21:db:e2:07:88:fe:50:a3:2f:f2:f3:22:22:3d:6d:
a4:ce:07:11:5e:e8:d5:b9:d4:bc:be:25:b8:ea:4f:
e3:c3:c5:13:6b:eb:8d:a6:a3:59:44:94:ae:10:e1:
22:ca:00:05:a0:33:6f:40:24:45:01:81:94:c5:ee:
c3:cc:9f:a1:c0:1d:4c:5b:4c:8c:b7:54:e7:19:c0:
fb:b5:4c:fc:b9:0d:68:46:2a:09:08:bb:db:08:2d:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:83:CE:6C:DF:91:77:DA:71:FC:4D:B7:04:08:C7:BC:5D:95:83
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:be:7e:57:94:ac:33:5a:d1:fc:c0:f8:37:bd:f3:fa:fd:
81:d7:32:77:a8:f5:a8:01:a4:df:7c:9a:62:85:57:61:16:ee:
c3:7c:aa:be:7d:3e:39:ab:d7:f0:25:de:4e:bb:b0:d5:3d:73:
4f:2d:8f:c4:a3:c3:94:0a:38:b4:dd:91:c2:01:06:25:6c:c2:
94:85:8c:8f:df:7b:b5:dd:90:98:4c:72:fa:91:25:19:94:92:
21:00:ee:ae:97:38:79:37:45:f3:01:7f:0e:c2:39:2e:76:3f:
64:1f:75:b5:88:83:96:49:7d:de:0f:37:af:04:7a:b4:37:63:
6a:82:97:49:58:0a:5f:d3:ad:69:c6:dd:05:b8:e4:ba:a5:fa:
c3:28:b8:39:55:ab:d1:de:da:5f:d4:99:22:f0:8d:4e:ab:a0:
bc:bf:15:48:db:84:8d:fa:9a:9e:b3:3e:30:22:a6:dc:78:be:
0a:2d:56:6a:d3:3c:94:01:33:b9:5b:e6:3b:ce:22:55:e0:89:
c1:6e:6e:b6:be:0b:1d:10:05:c6:3f:0b:c2:59:c5:f1:73:46:
c7:fa:88:02:dd:f8:23:ef:74:3d:da:e8:44:8b:f1:fa:01:46:
81:45:4c:e3:d6:c2:37:7f:74:e1:f1:52:98:d1:92:19:85:7b:
4f:0e:27:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvfosSM9Z09w2NADyc8pUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTVkOWFhMzQ3ODZiYWExNmQ0NTZiZGYzOWVjYWZiNWQ5
NzMwZjgwHhcNMjYwNDE3MDAwMTIwWhcNMjYwNDE4MDAwMTIwWjAzMTEwLwYDVQQD
EyhkYjRhODNjZTZjZGY5MTc3ZGE3MWZjNGRiNzA0MDhjN2JjNWQ5NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNxWB3knHI1ZlSKDfteKmCrHCbNe
spPbi1WXUvzUrX+i91qi/ukCm5T9b1/sFXVK0kC3MpX59BTmRCaFJhT1mgUi4GuU
tnKWNPzZCAf3ao9QdhGoyF4rBDFhIoo99l82J9IyzwVmBjD32ABnxLCV5fOLg5En
ybuqDOyv25bi4yA3dt91sE/0oqKgfnKgZOj8uvv8IGqxcX/o8dPPZGiBHV+xmyMh
2+IHiP5Qoy/y8yIiPW2kzgcRXujVudS8viW46k/jw8UTa+uNpqNZRJSuEOEiygAF
oDNvQCRFAYGUxe7DzJ+hwB1MW0yMt1TnGcD7tUz8uQ1oRioJCLvbCC2rFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtKg85s35F32nH8TbcECMe8XZWDMB8GA1UdIwQY
MBaAFD/l2ao0eGuqFtRWvfOeyvtdlzD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2Qt
NTk0YzFhY2Q5ZGFmLzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2QtNTk0YzFhY2Q5ZGFm
LzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEve+fleU
rDNa0fzA+De98/r9gdcyd6j1qAGk33yaYoVXYRbuw3yqvn0+OavX8CXeTruw1T1z
Ty2PxKPDlAo4tN2RwgEGJWzClIWMj997td2QmExy+pElGZSSIQDurpc4eTdF8wF/
DsI5LnY/ZB91tYiDlkl93g83rwR6tDdjaoKXSVgKX9OtacbdBbjkuqX6wyi4OVWr
0d7aX9SZIvCNTqugvL8VSNuEjfqanrM+MCKm3Hi+Ci1WatM8lAEzuVvmO84iVeCJ
wW5utr4LHRAFxj8LwlnF8XNGx/qIAt34I+90PdroRIvx+gFGgUVM49bCN3904fFS
mNGSGYV7Tw4nxA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:13 2026 by rpki-client