Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: p22WpE8Q391VUjdGysCsP27UHtcMk7fDtIlBa5uiQeo=
Subject key identifier: 5A:44:7A:17:77:C2:E2:BB:3D:B6:5E:51:C8:6E:4B:67:6F:9D:48:7E
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019DA37836C073BB62F9F2E5E67BCBA66D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 09BF
Signing time: Sun 19 Apr 2026 02:00:57 +0000
Manifest this update: Sun 19 Apr 2026 02:00:57 +0000
Manifest next update: Mon 20 Apr 2026 02:00:57 +0000
Files and hashes: 1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: PyQkO4ouOUU9c9AvNM7hJqjF1vZcWKFbMXiZQZKK98k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:36:c0:73:bb:62:f9:f2:e5:e6:7b:cb:a6:6d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Apr 19 02:00:57 2026 GMT
Not After : Apr 20 02:00:57 2026 GMT
Subject: CN=5a447a1777c2e2bb3db65e51c86e4b676f9d487e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:65:37:55:ac:27:5a:88:00:63:cc:85:92:
0c:dc:24:99:6f:b1:c8:6b:c1:4a:2d:8c:da:05:12:
57:cb:74:f9:b3:c1:54:33:06:1f:fd:95:48:50:21:
21:99:fc:33:c4:15:fe:fc:3a:9b:e5:da:e4:d7:c4:
77:a0:25:41:cf:26:60:ee:85:69:31:53:e7:c9:79:
e9:4b:14:fa:75:79:5c:46:35:32:97:ed:ff:ce:bc:
15:a5:0c:10:ee:f7:af:0f:84:e6:ce:39:9b:fd:f7:
bc:ec:ad:10:81:0e:97:16:47:a0:01:6c:4b:82:ce:
f6:49:e5:af:db:dd:06:07:c1:aa:f0:2f:07:5f:41:
8b:35:3d:bf:76:9f:cf:7e:b5:74:39:9f:ed:a8:2e:
c5:09:9c:d2:9e:c8:95:a7:83:18:e9:7a:43:78:a3:
77:86:01:40:2f:29:00:3e:c4:f7:59:e0:5f:5c:5e:
4c:c3:07:ca:e3:09:29:a7:2e:90:39:9a:c9:b4:75:
d2:b5:83:86:30:0b:5d:c5:3c:e8:5e:4d:91:b6:ae:
fe:f8:c4:3f:90:95:78:a5:d0:7b:79:cd:75:92:81:
12:e6:30:a0:00:13:8c:cf:cc:e9:f6:f4:e7:3c:e8:
e7:2e:d6:2e:72:b1:a2:4d:5f:dc:bb:6f:93:50:f8:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:44:7A:17:77:C2:E2:BB:3D:B6:5E:51:C8:6E:4B:67:6F:9D:48:7E
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ff:f6:33:3c:ae:51:b5:9b:97:0f:ce:44:ab:c3:b1:00:0b:
02:fe:e7:ad:3f:9f:6e:67:42:42:74:22:84:ea:25:f5:9f:a6:
6c:2e:cc:77:c6:59:5d:32:92:7e:e2:f1:46:80:15:2e:04:33:
46:c3:14:10:fc:19:4a:93:02:34:e6:43:de:85:ca:0a:02:38:
10:d1:35:46:f9:d6:ee:d1:1a:af:a5:68:07:c2:1f:73:85:c5:
13:1f:56:a5:a7:1f:5e:24:5c:5b:71:70:71:75:13:10:c6:aa:
31:b9:76:67:51:7c:ac:e7:2c:54:03:59:5a:f1:c3:fc:73:74:
2a:cd:4d:88:ef:f5:79:f4:c9:41:e9:15:84:9f:21:b9:0f:fb:
cf:c5:a5:b7:b0:2e:31:9c:b7:fa:24:34:bc:7b:da:68:5e:f5:
fb:1c:3f:ea:8c:7f:b3:a8:7d:60:42:ac:e3:07:44:64:38:e7:
cf:aa:a0:fd:6d:42:13:3f:bd:e2:2a:f1:3f:67:5d:75:2b:73:
10:c9:ed:c4:ba:63:f3:69:3e:e5:69:53:f1:ca:16:06:7a:21:
4b:77:ed:1c:e7:0f:ab:71:2a:d4:fb:23:d0:6a:96:28:2f:43:
8f:c0:c8:2f:2d:bf:38:af:31:f4:70:65:6e:97:5f:7f:6f:7c:
3d:a4:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:58 2026 by rpki-client