Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: 18en7+3b4ymHuEhCetrYVrQ1uRGaSjW5bc28tijiJ84=
Subject key identifier: 69:EB:D1:93:40:EB:86:AD:96:82:57:FC:B0:99:0D:B6:4C:23:D8:3D
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019D992B3106CBFBC8C12095F42649EEA0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 150A
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: QzDa7KmediEmBstVZSvXD7DQilFH93DQ7hgm9IizD+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:31:06:cb:fb:c8:c1:20:95:f4:26:49:ee:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=69ebd19340eb86ad968257fcb0990db64c23d83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:23:9b:f4:9a:2f:f0:e9:4e:3f:69:63:fa:a2:
9e:1b:fd:8e:1b:e5:7f:c1:a9:a2:e5:9a:01:e5:fc:
b8:b9:74:58:73:8d:0c:3b:1d:57:ce:81:38:ef:3b:
a5:53:9d:48:98:32:3e:18:1d:7b:5e:51:7e:12:52:
6d:6b:8e:58:c1:87:00:91:cc:ae:f0:58:15:ad:a0:
37:11:ca:e4:c4:0c:3f:8c:13:c4:3c:16:92:d3:50:
b5:f4:e4:59:9d:6f:92:ad:68:4a:c0:08:62:29:50:
8a:4a:56:fc:a4:fb:09:e1:38:91:9e:0d:ac:ae:20:
e0:21:5c:96:da:12:3c:81:44:6b:71:93:8e:2c:0a:
dc:84:51:29:2e:b8:72:b6:28:f2:e6:fd:94:e0:d9:
29:d1:39:00:ef:cd:77:d9:da:91:4c:34:7a:f9:f4:
4d:71:b7:0e:ce:ec:c6:bc:19:c6:55:c5:01:c3:fa:
ec:ec:dd:04:5e:42:6f:28:ca:3d:36:de:f2:37:7f:
4a:4e:96:1f:e0:85:27:2b:42:24:46:90:e4:a4:14:
de:c6:a8:09:eb:67:0d:42:81:87:2d:d7:44:de:f0:
91:e9:63:4c:13:4a:27:20:20:66:06:41:5b:e8:6b:
68:de:fa:e5:1e:58:3b:ca:52:fc:d7:97:0f:f0:a7:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:D1:93:40:EB:86:AD:96:82:57:FC:B0:99:0D:B6:4C:23:D8:3D
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c2:2a:ac:34:91:64:2c:2f:5b:e7:1d:d6:e7:bf:27:0e:0b:
13:8f:02:9b:f5:f8:4a:aa:f1:1b:1b:d2:bd:d1:0a:24:a4:9a:
11:54:3d:d0:8e:e7:e0:3b:25:64:a3:bc:5a:a2:10:75:3f:09:
d6:fb:e9:40:60:42:69:26:6f:ee:bd:ff:26:0a:dd:b2:59:05:
a1:9d:31:61:17:b8:7d:22:3d:e9:b6:34:51:16:ba:e6:14:3a:
4f:da:60:9c:27:d8:e5:91:ff:7f:ba:93:a7:33:15:b7:c1:13:
f0:0d:cb:35:62:8b:f0:01:91:72:e6:a5:ec:c7:86:8e:cf:aa:
a9:9a:f4:7e:28:fa:7a:bd:ae:b2:9b:7b:b0:78:54:19:8a:8f:
b4:c2:13:17:4c:5c:91:e6:dc:17:9d:37:99:a4:c6:2d:aa:66:
b7:73:f5:e5:d6:dd:ff:4c:2e:e1:ed:3c:9a:c4:d4:ed:d4:34:
e0:8f:8a:a5:d9:34:b6:58:34:ee:c7:72:d4:37:2f:03:97:d1:
cf:d1:51:bf:66:1a:57:72:f7:5d:0f:83:bc:83:d8:e1:2a:d7:
29:43:7c:5a:6d:5f:e8:d4:c4:01:31:f6:af:73:00:20:c8:af:
99:52:37:6e:6b:8c:ba:4e:71:e8:f7:3b:1d:b3:38:b0:71:48:
c1:cf:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:41 2026 by rpki-client