Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: C7dAcYfWwWSzP29YFrSeNZmBSuDZYiLqh3bhivFlh6g=
Subject key identifier: 9E:F7:26:69:9F:74:A0:AE:4E:DF:ED:A9:74:0D:54:82:42:40:2A:0C
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019D9AE27AF379CC1677DF70377BE8C6ACB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 05DD
Signing time: Fri 17 Apr 2026 10:00:27 +0000
Manifest this update: Fri 17 Apr 2026 10:00:27 +0000
Manifest next update: Sat 18 Apr 2026 10:00:27 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: Dn0NH8trQlVEYVuP1ubWUcUFq5G6Z97tq1M6qRxYK5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:7a:f3:79:cc:16:77:df:70:37:7b:e8:c6:ac:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Apr 17 10:00:27 2026 GMT
Not After : Apr 18 10:00:27 2026 GMT
Subject: CN=9ef726699f74a0ae4edfeda9740d548242402a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:2f:eb:b1:2f:79:b4:62:df:7a:bb:af:aa:
02:11:82:3a:10:d1:11:42:6c:e5:be:22:37:f5:28:
76:21:a3:54:92:dd:21:7d:34:cc:b8:84:5a:52:63:
df:1d:af:83:ea:49:5a:de:72:88:0a:28:bc:81:f7:
90:e2:df:8a:c1:bd:dd:5e:63:bb:a9:77:1b:97:e0:
27:b9:af:b9:21:8e:f8:fb:ce:8c:de:99:f0:5c:06:
a5:9e:b2:56:73:fe:36:b8:90:d6:f5:64:aa:d9:65:
98:2e:64:06:3a:a5:4d:44:43:df:e2:d1:80:af:05:
d6:9c:13:9f:39:eb:c9:dd:95:e2:92:50:45:30:e0:
ad:32:9b:8a:7f:c0:b5:b9:a7:cd:12:c6:d2:b2:73:
14:28:4c:f2:4b:67:7a:37:b9:19:5f:f2:56:a1:8a:
04:42:e4:2d:b8:a6:dc:9e:3c:6e:f6:1d:51:28:cc:
55:5f:8f:de:73:c7:90:7a:02:f9:04:0d:a2:b1:a6:
0b:56:7e:42:28:df:4a:84:5c:bf:0e:a7:60:19:7e:
22:94:fa:12:e1:80:dc:4e:3f:eb:21:a3:1b:49:0f:
a9:62:70:80:60:33:d4:c4:61:00:ea:9e:41:d8:6d:
24:db:92:92:91:91:94:0a:72:bc:0c:47:d0:73:d3:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F7:26:69:9F:74:A0:AE:4E:DF:ED:A9:74:0D:54:82:42:40:2A:0C
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6c:f8:c7:f3:d1:ca:30:d6:3d:0f:07:1b:4f:ca:54:88:5a:
fc:54:63:21:dd:66:67:49:06:f7:9d:6b:94:2c:c2:3d:8e:d7:
ec:7a:82:bb:2d:6c:34:11:e1:2a:d5:aa:39:b9:95:89:79:f5:
94:db:11:24:b7:e5:2f:30:62:b5:4b:94:26:d4:fc:fd:b7:3d:
4e:5d:7d:d4:c0:f1:db:94:3c:19:b3:6c:cd:63:c9:69:6a:31:
25:c3:32:2b:fd:71:f0:28:96:8e:49:fa:0b:87:4f:c3:4e:43:
d6:0d:49:19:1f:53:4c:27:8c:a6:24:bb:f7:e7:8d:2b:44:d3:
ed:5c:a6:51:fb:36:6a:29:61:90:60:75:29:e6:70:c9:66:c1:
f8:f0:e3:c3:98:a6:f2:64:d2:c7:4d:3f:10:6a:3c:f0:98:01:
9b:73:4b:90:de:c2:8f:ab:a1:9c:95:11:83:6b:04:09:53:86:
bc:93:b9:6f:62:d5:b7:d8:7c:dc:8d:7b:c1:ea:bc:3f:6e:93:
e3:c8:22:7b:33:68:a7:e7:4f:9f:c1:15:b0:68:6b:8d:3a:8b:
cf:f6:98:fa:dd:3a:24:d6:02:d3:86:3c:31:ce:33:ad:53:8b:
f8:bd:ba:00:34:6d:3d:78:03:80:ad:9f:41:85:27:35:06:68:
76:1d:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:25 2026 by rpki-client