Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: b78tfJoaAorzNoKvzsTY24UMX60vtE9QnXFRnYw7gi0=
Subject key identifier: 3D:64:5A:A3:8E:47:CE:DA:27:A1:23:83:1B:C0:0F:B0:06:18:31:8C
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019D99D032B128B3C4464D79585F8FCDA6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 09BA
Signing time: Fri 17 Apr 2026 05:00:51 +0000
Manifest this update: Fri 17 Apr 2026 05:00:51 +0000
Manifest next update: Sat 18 Apr 2026 05:00:51 +0000
Files and hashes: 1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: /DeATR9d8WsHgxGX3tzRaBOrSodcchpgKBIAekC20TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:32:b1:28:b3:c4:46:4d:79:58:5f:8f:cd:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Apr 17 05:00:51 2026 GMT
Not After : Apr 18 05:00:51 2026 GMT
Subject: CN=3d645aa38e47ceda27a123831bc00fb00618318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:f9:06:ea:6c:00:00:f7:73:f0:ea:13:be:
2f:6b:56:47:7f:69:84:21:81:7b:7c:5d:a4:64:b1:
13:ec:2f:e0:7d:5b:5f:56:b0:01:11:92:00:63:a2:
b6:d8:71:eb:3b:6a:22:5b:f8:63:6e:81:bd:58:20:
65:b8:84:45:07:96:50:c4:ee:0c:ed:13:ea:ce:06:
ee:1f:14:05:8d:a2:a3:66:d0:64:86:15:5a:eb:87:
0c:9b:d7:31:64:24:41:25:64:a3:f1:a3:37:5b:d9:
fe:e8:6f:5d:28:22:a2:cb:1f:55:59:68:40:cf:5e:
8b:63:43:13:99:4f:6c:3a:f0:75:e9:b5:9e:26:c1:
b5:00:7f:c4:3c:be:e6:16:8b:97:c0:2e:8a:1c:25:
fa:35:eb:69:ac:32:5b:1c:e3:4f:76:30:4b:7c:dc:
80:03:98:65:23:29:53:28:0f:03:52:d2:3d:a4:cb:
7f:ba:6a:bc:03:0a:e3:72:e3:fc:a4:a8:8b:91:49:
f3:aa:1d:24:4b:04:62:ae:e7:66:4d:cd:2a:4a:a2:
8f:03:e5:bd:c1:7a:10:fd:79:72:e3:f4:1e:44:5e:
c1:aa:04:ed:66:9e:3c:b6:81:fb:c2:9d:f5:5a:17:
a5:b2:ec:d6:57:f8:95:78:91:44:33:c9:b0:cc:e6:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:5A:A3:8E:47:CE:DA:27:A1:23:83:1B:C0:0F:B0:06:18:31:8C
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:af:c6:df:15:05:fe:86:60:ad:29:12:0d:10:f6:63:9c:4c:
80:bb:84:c8:05:a3:51:e6:1e:4d:1c:20:af:ec:a7:b5:e3:45:
74:3b:87:16:b2:dd:21:32:c1:13:d3:75:0b:2b:15:9a:75:10:
ab:eb:1c:93:b8:dd:29:48:6f:57:8f:0c:23:a4:31:50:34:bc:
cf:05:39:17:bc:ea:6f:a8:41:11:19:90:15:fe:43:71:3a:ad:
54:2e:33:cd:ca:42:11:5d:b3:16:1a:70:1b:a2:88:25:81:ba:
5d:83:50:75:65:86:b6:75:79:dc:7f:29:94:a3:63:c5:dc:84:
f8:2b:f3:30:ef:0b:86:c8:42:f6:c7:47:e7:1b:21:c2:35:17:
7d:5a:18:e0:be:09:f4:53:a8:6e:71:31:8d:5b:0b:eb:5c:f2:
76:2f:4e:fe:0f:a6:8f:d6:4a:64:d3:79:ec:c4:b2:b5:a5:bc:
c0:05:b5:1d:24:bc:87:89:2d:f9:70:bd:55:e2:d1:28:8a:6b:
bc:c7:9e:ca:dd:96:d0:62:2a:5c:3f:6e:ee:c8:88:20:57:c6:
db:da:fe:a7:ca:45:e7:f5:ce:98:67:5b:57:e0:9b:ee:04:ab:
c6:02:9b:0b:63:a3:4e:c0:d0:0d:56:03:70:04:e9:e9:f9:87:
00:a7:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:58 2026 by rpki-client