Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: a3sERxJYfwOj1NeWPL9E5Ls5LEyK32yfYsAjmWYAI+4=
Subject key identifier: 46:0D:EA:ED:30:8C:A1:72:90:91:01:3C:52:CD:0F:1F:13:09:42:1D
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019D988689195209A9E4F5E03CCC3980C62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 23:00:46 +0000
Manifest this update: Thu 16 Apr 2026 23:00:46 +0000
Manifest next update: Fri 17 Apr 2026 23:00:46 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: k9xoFL2UHwhcWQIboENOqLRz17W0o3sBDaDWK0hVUO0=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:89:19:52:09:a9:e4:f5:e0:3c:cc:39:80:c6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Apr 16 23:00:46 2026 GMT
Not After : Apr 17 23:00:46 2026 GMT
Subject: CN=460deaed308ca1729091013c52cd0f1f1309421d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:06:1a:46:11:dd:84:62:ba:73:3e:e3:55:
40:24:6e:66:c9:2d:70:4a:30:1c:3b:b7:c2:3f:13:
2b:a3:d5:b1:ca:b5:cc:e9:fc:47:5f:2c:6c:98:e7:
36:26:6f:5c:2e:93:ec:60:c0:a1:7e:53:6e:91:6f:
ee:6e:a9:66:8e:47:5a:b6:1d:c6:8b:86:4c:87:b0:
65:fb:6d:0f:22:a3:d5:a8:df:00:6b:d9:80:92:5f:
4b:5e:74:89:8e:fe:82:2f:17:2d:bb:d1:36:3b:ac:
7f:d7:bb:cf:28:aa:26:58:bc:f3:1a:c8:6b:90:37:
7d:9d:b5:4f:04:17:af:d2:fe:45:6d:ba:7c:1c:cd:
99:6f:4e:7b:ec:fc:d1:6e:b0:bf:13:56:14:9c:d4:
78:34:ce:38:a7:22:48:a5:90:75:4f:04:8a:ac:94:
20:a3:7b:6a:d4:b4:6c:4e:fa:99:aa:67:d4:6e:cc:
4c:e8:ae:ec:c3:3a:86:c9:c9:36:c4:9c:9d:ad:ba:
c2:bf:85:57:d0:d9:67:bd:95:23:83:ee:94:9d:2c:
02:8e:22:bb:65:6a:3d:7e:f5:3b:a2:5d:4a:c7:09:
af:f1:39:fe:8d:6a:b1:42:04:d3:27:8c:da:e9:5a:
9f:68:48:fe:0d:5b:63:19:88:48:ad:b4:d8:20:55:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:EA:ED:30:8C:A1:72:90:91:01:3C:52:CD:0F:1F:13:09:42:1D
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:45:4c:f5:ab:f0:0a:65:65:5c:ef:b8:bf:a3:15:c2:b7:7e:
6e:90:bc:45:95:a4:7c:3c:38:0d:87:e9:7d:d4:46:18:bf:ff:
0b:a5:30:0a:6e:e2:89:26:27:47:a7:81:b4:0c:f8:98:2b:88:
39:82:3f:98:ae:bc:24:e3:3f:3b:40:8d:ad:c4:82:06:b0:6e:
f5:6e:89:a1:4d:35:60:7c:64:f1:9d:3a:83:5a:55:d5:da:32:
44:65:0a:e5:77:9a:ef:ba:c8:e2:9a:75:50:7c:0a:d0:17:67:
04:a6:bf:1d:d5:a8:db:83:8a:6c:46:a5:f1:fb:dc:99:29:4b:
45:21:af:4f:31:45:8f:a7:b3:ca:4d:2f:06:3a:2d:6c:3f:c1:
14:02:9c:d1:f6:d1:2f:1f:82:c5:76:26:00:a7:1a:bb:f9:87:
ed:10:0c:63:2e:df:a4:b8:b4:0b:16:78:6b:46:47:18:68:17:
ef:b6:7d:2b:ad:5b:9a:29:2f:ab:71:ca:8f:fb:0a:bb:a3:00:
2b:08:58:02:29:7e:26:e9:72:1e:2d:cd:89:cf:3b:5a:e0:df:
14:3f:0c:56:84:8d:e4:5d:4b:bb:ff:4d:74:77:98:62:90:7a:
4a:0b:81:fe:17:c5:18:ab:0b:3f:ab:38:c3:27:ce:a0:2f:a5:
99:06:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:10 2026 by rpki-client