Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: TIqYyrIy3897i0HpVTShPd8JjoJ6F2KSr8ZmGMdpk2k=
Subject key identifier: 8B:62:CA:91:97:34:76:9C:5E:12:DE:C1:48:9F:E2:3F:0A:44:6B:B8
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019D9AAC40CF8E75656EE0C340F48593988A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 18D0
Signing time: Fri 17 Apr 2026 09:01:13 +0000
Manifest this update: Fri 17 Apr 2026 09:01:13 +0000
Manifest next update: Sat 18 Apr 2026 09:01:13 +0000
Files and hashes: 1: 0K2pCDlU0pkDvqWKO7SJxoZ3lsI.roa (hash: Y26TNiFt+U9/ZCJnbcaya/o2zut2SxPMMS0KeeLWubY=)
2: 5bVrHFZm_9x7DsR30S7rosICdW0.roa (hash: TNCtAJMUf4J6FJnN+i2bTj70aWZ+c3ls9gu8xyrRaB4=)
3: 8hvOqdm8XRO6sXWDZkcaHc49vsM.roa (hash: rWJpUZIpb36Ggr6bjwKyRkuAjSB5QQdFYyzRQ+KUdsA=)
4: FXEme31L2W7KjDVDqu37hEKFe78.roa (hash: omRy5gYKlVoWEItXCmHX+rxLDaANZ2/4bfpF5i1mDS8=)
5: NbVqiX6wU_Fr5GSOQfJ8YNe7b_w.roa (hash: Nw5vSu+E6BX+vcoqztio2E9NJTou/UDDEAsPJgGV9fk=)
6: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: zQjpHyLsQcL4eTzOG6VwHVOi3blSDuYPwUFV2sj6PbY=)
7: _ylley7uO-q2SakQqri2IL9Vh_8.roa (hash: 1WOpzM1HXCxDoeeqL/oavgXUUoldzw84YoaeeKakTR4=)
8: eMaqzHhdOLPa-yFxTbqkJXzmfCs.roa (hash: wn03BA6mXWMu6Vji8bsJNtZWRlLC+mrxhHq0SG0AH6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:40:cf:8e:75:65:6e:e0:c3:40:f4:85:93:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Apr 17 09:01:13 2026 GMT
Not After : Apr 18 09:01:13 2026 GMT
Subject: CN=8b62ca919734769c5e12dec1489fe23f0a446bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:dc:2c:b6:fd:17:ea:65:3f:bc:51:82:86:
92:5c:e4:62:bf:c8:a8:91:e5:47:66:6d:62:9d:fa:
fc:b6:2a:e2:e9:ca:23:6b:41:ee:ae:3c:2a:5d:81:
a8:b0:05:36:13:bc:c6:19:e3:62:d7:d7:b0:52:85:
b3:34:86:d6:83:2c:05:db:86:82:be:49:00:84:cd:
25:7c:9f:94:17:ce:d2:38:90:d7:d0:94:78:b6:ab:
ff:ca:f4:5a:67:c2:af:ee:d2:b4:98:da:33:df:60:
17:e6:54:a2:62:6d:6b:33:29:00:0d:90:eb:58:63:
61:f7:39:e6:b1:c0:2c:57:9d:42:64:08:eb:ea:04:
00:8a:ca:9f:47:f7:a7:ba:3b:14:97:11:39:c8:71:
b8:b8:f2:08:e2:cb:a7:83:24:26:f2:95:bb:8c:56:
8f:07:b3:ea:cb:9d:21:2c:c0:96:4a:29:3a:8c:9e:
db:37:cb:4d:48:b3:af:82:b6:51:4a:a1:e3:74:77:
f9:a4:a6:ab:96:0d:a0:62:52:b2:c8:54:e2:e7:03:
61:fa:78:83:bc:02:94:9a:4d:5d:61:c4:4f:49:a3:
16:20:e9:06:ae:7e:8e:4d:54:bc:e7:6b:da:c1:35:
a4:60:a3:27:4d:de:62:f7:9d:a5:55:5d:63:1e:1b:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:62:CA:91:97:34:76:9C:5E:12:DE:C1:48:9F:E2:3F:0A:44:6B:B8
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:93:61:a1:c4:c5:8c:9e:9e:ba:61:51:dd:c6:e7:d0:b4:2b:
69:d0:93:ff:d1:fa:73:93:8e:8a:8a:9b:62:bb:af:39:67:2b:
fc:0a:04:b3:37:22:20:3a:de:eb:a5:3b:32:f0:27:a7:78:21:
90:02:bf:ae:61:e1:ad:a9:9d:20:1e:88:66:0c:8d:7c:84:fc:
7b:2f:55:e4:f7:01:82:51:a5:9e:eb:f8:68:5f:49:0e:04:e0:
f2:6a:23:a8:b7:ff:a2:66:de:03:ae:00:4b:d9:8a:b7:50:d2:
d6:83:67:7e:98:88:c4:3d:00:d4:df:78:40:08:dd:51:eb:67:
0c:65:04:25:2a:27:8d:b7:c5:8d:7b:d5:26:fb:4b:f1:0d:76:
a4:ba:9a:29:b4:df:87:8d:ff:dd:cb:16:c3:c9:97:04:9a:83:
08:5f:1c:f3:ff:e5:14:12:80:df:69:eb:23:78:d1:ff:78:ea:
f6:8c:5e:76:c4:84:31:6f:0c:05:79:bd:29:5a:77:07:54:07:
15:64:dc:01:4e:78:02:25:e2:a2:ca:b4:f1:ff:71:59:01:4f:
1e:3a:fd:64:a8:a4:93:90:0c:59:a6:72:0c:fc:dc:e2:9a:67:
3d:5d:78:01:2b:1c:08:17:7c:8d:23:f2:f1:13:81:cc:58:13:
a3:06:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:41 2026 by rpki-client