Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: /xu/NOEdB4e0IiUseheoyLvGc9iVNNTTztcywiiATS0=
Subject key identifier: AB:92:5C:B0:33:F3:82:DC:F5:FA:E8:09:36:BB:56:61:BF:2F:45:C9
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019D9962D4E817E1A62C1C1F7060B4502493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 03:01:23 +0000
Manifest this update: Fri 17 Apr 2026 03:01:23 +0000
Manifest next update: Sat 18 Apr 2026 03:01:23 +0000
Files and hashes: 1: A8hQT388ItEqoQYFOhqCCsEIlTI.roa (hash: 97e6isQPIjw70otEwzd0gLtQm2r1Kv7FnFS5tJziJjw=)
2: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (hash: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: 00cTULzgtlAATCR/pPLtlvcHJ9+HQKAHaD2IzdQUd4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:d4:e8:17:e1:a6:2c:1c:1f:70:60:b4:50:24:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Apr 17 03:01:23 2026 GMT
Not After : Apr 18 03:01:23 2026 GMT
Subject: CN=ab925cb033f382dcf5fae80936bb5661bf2f45c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:a5:0d:42:bb:39:6b:74:a1:57:72:43:e0:
99:36:c8:bb:41:a0:ea:da:db:33:b5:66:3c:f7:00:
29:05:8c:b3:39:da:81:cc:f7:8b:d3:34:7c:e1:64:
71:cf:1b:bc:55:49:8c:f4:b7:23:42:c7:cc:62:f6:
ff:d1:30:b2:dd:1d:d6:6b:26:f9:99:eb:70:d9:6d:
cf:6b:2b:fb:11:a4:76:57:35:f6:79:c9:7c:22:8d:
f4:0e:6f:a7:d7:8e:7a:89:db:8e:79:97:88:78:56:
87:0a:85:f8:5a:30:8e:86:50:25:d2:37:e9:cd:06:
0d:69:c2:36:45:5b:fc:9e:2e:b4:c1:34:1b:f4:a3:
b6:6b:db:8c:f1:0f:31:b3:26:be:bc:45:d3:2a:ff:
af:5e:e0:1b:27:a9:2e:72:ba:66:99:00:6d:6c:ed:
0b:84:20:cd:cb:a0:6f:06:6c:4a:00:7c:92:b6:ca:
5a:3f:58:d0:60:46:82:1c:66:f9:5a:65:97:38:06:
54:7c:6c:4c:b7:e7:5c:dc:a7:a3:22:27:e6:39:0b:
11:07:ea:8a:d3:08:db:3b:59:2a:00:8b:ff:89:5e:
e5:d5:c9:e6:cf:2e:6e:c5:e1:64:97:10:38:f6:d3:
89:ee:72:97:2e:33:32:42:b8:3d:50:06:ae:27:10:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:92:5C:B0:33:F3:82:DC:F5:FA:E8:09:36:BB:56:61:BF:2F:45:C9
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:67:72:92:72:c4:65:5f:bc:60:e7:b7:5f:69:35:3d:ec:e8:
11:d8:f4:4a:52:0c:b7:3a:48:37:c2:a4:a4:a5:66:a4:03:6a:
ee:5d:c9:cb:6b:0b:00:4c:de:b5:4b:27:94:1b:3b:4a:91:88:
89:ab:80:70:39:c1:e3:0f:79:27:48:e3:ad:94:f8:2c:a3:b8:
61:03:ba:52:6b:c3:fa:ea:6c:d3:8a:70:69:ef:ec:91:7f:b4:
23:56:11:b3:85:42:84:e9:6d:72:75:e3:f0:7d:4a:21:3d:e3:
7e:c6:52:77:82:65:6b:75:bf:20:c2:0b:72:1b:36:eb:18:24:
17:2f:a2:3d:40:52:71:f4:68:0b:d9:ff:6f:9f:cc:87:2f:ce:
bf:3a:4f:c0:22:94:5c:1c:6f:5c:9b:8a:f5:2b:8c:f9:18:fa:
bc:af:b6:cd:de:5a:19:23:e5:71:c9:65:a0:d0:27:33:b7:b3:
7d:39:c1:ad:f6:21:b6:e1:2f:27:17:5e:17:2f:9a:7b:dd:46:
ce:b9:a9:b8:e8:e8:2f:89:ef:00:08:4a:d7:ba:5e:c4:74:33:
a0:03:94:0b:72:2e:12:61:63:16:6b:1f:66:94:bc:f1:63:60:
1a:61:94:86:dd:2a:79:9f:9f:3c:3c:3a:5d:b9:78:d9:a9:23:
4b:15:3c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYtToF+GmLBwfcGC0UCSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzcwMTM1ZDBmMGQzMGE4NjhkZjU1MWQ4NzUyZDRiNGJh
ZGMyYzEwHhcNMjYwNDE3MDMwMTIzWhcNMjYwNDE4MDMwMTIzWjAzMTEwLwYDVQQD
EyhhYjkyNWNiMDMzZjM4MmRjZjVmYWU4MDkzNmJiNTY2MWJmMmY0NWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdGlDUK7OWt0oVdyQ+CZNsi7QaDq
2tsztWY89wApBYyzOdqBzPeL0zR84WRxzxu8VUmM9LcjQsfMYvb/0TCy3R3Wayb5
metw2W3Payv7EaR2VzX2ecl8Io30Dm+n1456iduOeZeIeFaHCoX4WjCOhlAl0jfp
zQYNacI2RVv8ni60wTQb9KO2a9uM8Q8xsya+vEXTKv+vXuAbJ6kucrpmmQBtbO0L
hCDNy6BvBmxKAHyStspaP1jQYEaCHGb5WmWXOAZUfGxMt+dc3KejIifmOQsRB+qK
0wjbO1kqAIv/iV7l1cnmzy5uxeFklxA49tOJ7nKXLjMyQrg9UAauJxAufQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuSXLAz84Lc9froCTa7VmG/L0XJMB8GA1UdIwQY
MBaAFMd3ATXQ8NMKho31Udh1LUtLrcLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUt
ZDY0ZDc1Mzk0MDM3LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUtZDY0ZDc1Mzk0MDM3
LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWdyknLE
ZV+8YOe3X2k1PezoEdj0SlIMtzpIN8KkpKVmpANq7l3Jy2sLAEzetUsnlBs7SpGI
iauAcDnB4w95J0jjrZT4LKO4YQO6UmvD+ups04pwae/skX+0I1YRs4VChOltcnXj
8H1KIT3jfsZSd4Jla3W/IMILchs26xgkFy+iPUBScfRoC9n/b5/Mhy/OvzpPwCKU
XBxvXJuK9SuM+Rj6vK+2zd5aGSPlcclloNAnM7ezfTnBrfYhtuEvJxdeFy+ae91G
zrmpuOjoL4nvAAhK17pexHQzoAOUC3IuEmFjFmsfZpS88WNgGmGUht0qeZ+fPDw6
Xbl42akjSxU8ew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:58 2026 by rpki-client