Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: WqsuaaWLDfsWiy/4OBcaJ2l5XQND+Cjijbf1Zz85N5c=
Subject key identifier: 6E:D5:40:42:01:86:87:EC:C8:F2:27:B0:24:26:A3:2E:0B:2A:C3:21
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 019D984FA15EAF42DC0B406E7988516491BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 12A3
Signing time: Thu 16 Apr 2026 22:00:48 +0000
Manifest this update: Thu 16 Apr 2026 22:00:48 +0000
Manifest next update: Fri 17 Apr 2026 22:00:48 +0000
Files and hashes: 1: Jqfmht0PAQt2HnSQZ-I_FzAJ46Y.roa (hash: cjrDpM/5EqcBfOXqNWcxU7B1Z2/Qb7RmnI4w4dT/TqI=)
2: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: nsXQ/gRZuNuZEUFWFgV1cKwKVm4rugXtWz2SV1gL4Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a1:5e:af:42:dc:0b:40:6e:79:88:51:64:91:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Apr 16 22:00:48 2026 GMT
Not After : Apr 17 22:00:48 2026 GMT
Subject: CN=6ed54042018687ecc8f227b02426a32e0b2ac321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:bf:82:67:2c:c6:53:fa:5c:36:8b:45:bf:
35:65:b0:39:02:ae:8d:06:a2:13:a8:a7:1d:3c:09:
e1:4a:cc:c1:2b:29:2b:f7:09:32:38:1b:96:fa:67:
0f:f5:dc:f1:9c:ed:9f:3f:09:c4:d7:41:6e:87:b1:
bc:06:db:22:bd:23:5a:7e:24:14:45:f5:86:28:f1:
86:8b:ca:c5:3b:30:51:45:b7:a8:5a:1a:79:b6:73:
4c:55:4f:4e:2c:0a:2f:52:8c:f3:c0:07:f4:49:08:
f0:c1:67:e8:bd:d1:b8:45:a1:b0:f2:7f:59:51:ae:
95:4e:81:6b:b8:7e:a5:93:32:6e:89:e7:4a:d4:01:
d8:f2:d3:1e:b3:47:be:f8:e8:17:ff:da:38:fc:f6:
45:a0:07:b1:f0:d1:0b:48:e3:a7:5a:cc:29:57:9e:
18:0c:0f:25:c8:fa:f3:c9:45:fb:8a:f3:79:cd:b3:
b3:c8:e0:5a:2a:56:d1:46:3c:de:b0:76:4c:ba:29:
c8:ea:99:be:e5:6e:63:28:76:36:6f:2e:db:d5:ef:
40:7d:e7:7b:5f:ae:22:cd:8d:e5:a8:7a:db:0b:b9:
fd:5f:0d:bc:a0:45:7e:d8:28:83:70:87:e8:5f:c9:
d9:0f:9e:fc:bf:d0:8f:4b:f0:4a:92:8e:a0:a6:4e:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D5:40:42:01:86:87:EC:C8:F2:27:B0:24:26:A3:2E:0B:2A:C3:21
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:74:a1:56:2a:c0:41:f4:05:30:3a:90:65:bf:bf:aa:47:77:
a2:b0:18:9c:d5:df:67:fd:dc:5f:81:eb:a6:9f:4e:32:6a:3b:
59:ce:e4:66:f5:ca:ef:19:cc:8e:1d:07:5a:99:57:e4:42:f8:
40:16:3f:2c:75:62:95:c6:d5:db:c5:9d:ec:1f:34:b9:98:c2:
05:91:40:8b:ca:bc:17:ce:fe:30:9e:f1:67:c7:68:2c:7a:52:
0f:00:70:23:8a:73:a9:09:99:d1:99:cc:a5:05:75:90:28:f1:
5d:d3:b9:3c:a0:f5:c3:fa:61:34:15:a2:66:b8:49:13:84:1a:
99:0c:94:3d:fd:f2:ed:9d:1a:fa:e2:90:9a:07:9f:3c:a7:dc:
11:9d:65:cb:dc:b6:32:ce:a9:0f:5c:32:be:7e:ee:4e:01:17:
63:19:a8:e4:44:1c:e0:6f:91:71:23:7a:eb:e7:88:8d:bb:5d:
fd:3a:44:eb:48:ba:c5:ef:38:e9:81:ac:fa:03:1f:b1:a3:05:
27:77:74:d5:49:a4:ac:aa:1f:aa:1d:f1:5f:96:d8:df:43:34:
30:c8:f0:f3:64:ec:92:02:6a:00:55:39:3f:fd:94:84:ed:b5:
dd:98:b3:42:bb:c3:69:4e:5e:5a:d6:e4:44:98:91:1d:53:ae:
53:e3:d0:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT6Fer0LcC0BueYhRZJG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZmY3M2E4YjIxODM1ODJiYjRlZmQ3ZGU4NTdkNDgxZjZk
NGI0NjAwHhcNMjYwNDE2MjIwMDQ4WhcNMjYwNDE3MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZWQ1NDA0MjAxODY4N2VjYzhmMjI3YjAyNDI2YTMyZTBiMmFjMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3q/gmcsxlP6XDaLRb81ZbA5Aq6N
BqITqKcdPAnhSszBKykr9wkyOBuW+mcP9dzxnO2fPwnE10Fuh7G8BtsivSNafiQU
RfWGKPGGi8rFOzBRRbeoWhp5tnNMVU9OLAovUozzwAf0SQjwwWfovdG4RaGw8n9Z
Ua6VToFruH6lkzJuiedK1AHY8tMes0e++OgX/9o4/PZFoAex8NELSOOnWswpV54Y
DA8lyPrzyUX7ivN5zbOzyOBaKlbRRjzesHZMuinI6pm+5W5jKHY2by7b1e9Afed7
X64izY3lqHrbC7n9Xw28oEV+2CiDcIfoX8nZD578v9CPS/BKko6gpk5GVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7VQEIBhofsyPInsCQmoy4LKsMhMB8GA1UdIwQY
MBaAFF3/c6iyGDWCu079fehX1IH21LRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGY5enFMSVlOWUs3VHYxOTZGZlVnZmJVdEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNzQ1NTMtMGI5My00YjQ3LWExNTQt
M2E3OGEwOWZlNmZjLzEvWGY5enFMSVlOWUs3VHYxOTZGZlVnZmJVdEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yNzQ1NTMtMGI5My00YjQ3LWExNTQtM2E3OGEwOWZlNmZj
LzEvWGY5enFMSVlOWUs3VHYxOTZGZlVnZmJVdEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3ShVirA
QfQFMDqQZb+/qkd3orAYnNXfZ/3cX4Hrpp9OMmo7Wc7kZvXK7xnMjh0HWplX5EL4
QBY/LHVilcbV28Wd7B80uZjCBZFAi8q8F87+MJ7xZ8doLHpSDwBwI4pzqQmZ0ZnM
pQV1kCjxXdO5PKD1w/phNBWiZrhJE4QamQyUPf3y7Z0a+uKQmgefPKfcEZ1ly9y2
Ms6pD1wyvn7uTgEXYxmo5EQc4G+RcSN66+eIjbtd/TpE60i6xe846YGs+gMfsaMF
J3d01UmkrKofqh3xX5bY30M0MMjw82TskgJqAFU5P/2UhO213ZizQrvDaU5eWtbk
RJiRHVOuU+PQ7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:16 2026 by rpki-client