Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: tKcRfof+GkhHiJbNpN4FNbLdeh7QBaxF7BMzvc0nk3w=
Subject key identifier: 48:ED:70:95:9D:F6:1A:BB:6E:03:8D:47:81:E9:E9:E7:70:2D:26:7B
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 019D992B4D663C86FBC9BA0AE827024B60C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: 7cKCDlZbeTX28BBwTA5QO4eJ2xc.roa (hash: sIuMQVrFFVonk4niSkh2ILAH9kBI8WfPxCPrqjWAlqs=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: G0cxywpwKDi1v3KPWE/cGeG7q3qg3WHLd1FTTUMGjfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4d:66:3c:86:fb:c9:ba:0a:e8:27:02:4b:60:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=48ed70959df61abb6e038d4781e9e9e7702d267b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:dc:42:26:11:af:59:3f:2c:fa:6c:d0:2e:
98:53:18:3a:87:58:65:33:3e:25:9a:ce:1d:73:e3:
a1:b5:b7:b8:26:63:e1:b9:47:07:fa:b2:de:e3:36:
1a:e0:5b:15:69:36:e3:0c:0b:9a:3f:44:6e:6e:a6:
5c:3e:42:a7:75:b1:04:1b:b8:c5:76:fa:31:f6:77:
87:06:98:0e:c9:a5:de:70:d9:02:31:76:8d:88:74:
60:05:3e:d3:c3:7e:3b:87:d6:fc:4c:87:e6:40:04:
6a:79:ea:42:8f:2b:5f:4b:d6:63:0c:f8:90:2a:62:
d0:ab:2a:d1:4f:fd:f6:51:5c:82:a2:16:39:8b:1b:
b2:1e:48:f5:b8:0c:9c:d7:ea:a5:9d:1e:bb:e7:0d:
b6:5f:9a:62:da:d1:da:4c:26:53:28:ba:09:d3:24:
62:16:12:a5:09:1f:74:52:f4:a2:3f:66:33:2d:77:
99:e5:e2:d1:f2:ae:cd:08:da:0d:7f:81:74:1e:df:
54:ca:7a:43:c3:5f:a9:67:35:b4:ba:41:8c:c3:4f:
37:ce:9f:53:fd:8a:46:3f:5d:f1:58:5e:9b:ad:65:
de:20:cd:51:50:90:64:dd:56:ff:af:66:e2:39:a9:
65:b8:dd:90:11:8f:bc:ee:d1:98:b6:f6:c8:a6:2c:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:ED:70:95:9D:F6:1A:BB:6E:03:8D:47:81:E9:E9:E7:70:2D:26:7B
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:83:c6:ad:ba:63:34:08:cd:78:80:bc:76:25:76:c6:4c:88:
33:ce:ff:ed:74:df:7d:1e:c0:c1:47:b5:b1:51:d2:48:39:2c:
bb:df:1f:fa:40:f0:81:9d:12:19:17:48:1a:b8:5d:90:f8:2d:
0a:a2:f3:64:ef:82:14:f2:f7:fe:b4:f3:62:63:c0:a4:a5:d0:
98:4f:ec:28:7a:61:85:b2:dd:ad:48:e1:f5:b6:d5:13:03:4e:
ee:7d:64:43:23:9e:e0:79:59:fd:a9:e2:77:54:39:c3:46:b8:
03:ac:5b:89:61:36:f7:22:dc:5d:5e:86:03:b1:9b:cf:bf:a9:
31:d0:dc:5c:cb:67:2e:df:5d:0d:36:ab:38:cb:0a:70:eb:4a:
ba:73:a6:05:a1:1f:61:3e:db:68:30:cf:87:ef:e7:77:22:8d:
27:56:c3:38:b0:ef:bc:a9:83:2c:49:a2:51:da:9a:90:f1:32:
c9:af:61:02:52:a7:b4:0a:23:d1:76:ec:4d:9a:0f:3a:36:9f:
3f:bf:d5:55:c6:38:38:72:88:b4:0f:e8:ba:21:5e:4e:7b:e0:
8c:e7:9b:fb:71:98:e5:fc:12:51:a0:76:4b:ba:05:b1:6d:eb:
92:dd:8d:da:48:bd:45:32:a7:f6:6b:44:3c:c1:ef:27:ee:b6:
6e:cc:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:20 2026 by rpki-client