Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
File: xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json)
Hash identifier: bC1i4JKMY4mqsBywOxWnGPkFPx/bWCmaNsrEXbN10uc=
Subject key identifier: D4:7E:AA:16:AA:36:B3:23:87:B4:68:66:D5:5E:3C:48:AC:09:19:E3
Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
Certificate issuer: /CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Certificate serial: 019DA45435DD7023B563EA39163CA4B14FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
Manifest number: C7
Signing time: Sun 19 Apr 2026 06:01:15 +0000
Manifest this update: Sun 19 Apr 2026 06:01:15 +0000
Manifest next update: Mon 20 Apr 2026 06:01:15 +0000
Files and hashes: 1: Lte9ihIhwLMJEwykODf0-Ea8xPQ.roa (hash: v/rTSSPoZthEpEjHR7Sqj/7dnyWCaWiGBnHcyQGxAwA=)
2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: ATC/rt2U1xGRJ4zVH5NiwXhC7Ppvb+kI6MqTM54zCuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:35:dd:70:23:b5:63:ea:39:16:3c:a4:b1:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Validity
Not Before: Apr 19 06:01:15 2026 GMT
Not After : Apr 20 06:01:15 2026 GMT
Subject: CN=d47eaa16aa36b32387b46866d55e3c48ac0919e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:47:cb:0b:a5:52:dd:79:cb:2c:ad:d9:91:
50:57:11:67:60:cc:19:82:e0:92:dd:95:f8:d2:56:
8f:0a:2e:dd:d4:c4:af:d7:97:43:e5:14:38:f0:38:
41:ed:e5:1f:ee:3e:9b:55:1d:99:ed:1c:72:66:06:
0e:b4:4d:2e:4a:10:cc:85:db:92:fe:a3:b3:ce:b4:
6c:f7:c4:64:b7:2f:b6:2e:5f:e9:1b:6d:06:5d:27:
b4:0d:9c:b1:e9:47:66:de:ef:78:5a:cd:38:2a:45:
d0:2a:44:33:84:e1:b0:fc:ab:02:36:e9:c1:88:14:
2b:ff:f7:84:88:7e:85:5d:6e:b4:27:9e:05:d8:1c:
a3:1b:7d:c3:0f:26:d9:61:81:2a:98:b7:fc:4a:a2:
15:19:9c:63:ac:15:75:68:d4:c2:ea:5a:52:d0:6b:
32:a3:ff:a5:ae:52:db:48:0b:81:71:9b:38:0e:a9:
31:f9:6a:ad:23:7d:41:ca:98:7b:08:36:33:c6:aa:
c0:ba:cf:ce:29:7a:ae:5e:6f:b4:ba:fc:a3:92:11:
f6:1b:81:10:44:a2:21:c7:cd:5c:0c:da:f3:52:d1:
8a:0e:fd:2a:c3:7b:8a:17:8c:ba:33:49:06:c7:b9:
8f:37:e6:29:91:40:d7:96:c7:1f:5a:d7:fd:74:4d:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:AA:16:AA:36:B3:23:87:B4:68:66:D5:5E:3C:48:AC:09:19:E3
X509v3 Authority Key Identifier:
keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:89:17:1e:15:2e:c6:02:6f:00:71:e5:60:fb:a0:27:1b:5f:
81:ce:af:c9:8b:d1:49:c7:55:a9:70:b3:56:e8:45:c7:2f:4d:
08:99:43:26:be:6e:d2:36:a4:3d:97:3a:85:4b:1f:63:d3:61:
84:9f:68:3f:c2:7a:bf:0e:3a:76:33:e3:64:33:b7:60:91:a8:
58:c4:07:d2:eb:79:bb:9f:02:07:17:10:d0:cc:07:a2:dc:db:
b7:54:37:d1:11:d4:30:13:ed:c4:d4:b9:c6:32:bc:84:a9:c2:
e1:63:d3:3f:9f:4d:8a:76:a3:b2:d4:8b:33:81:06:00:e7:bd:
e6:2f:06:84:61:aa:57:c6:be:7c:b6:64:3d:7e:59:c1:b3:4a:
4b:91:3e:5a:90:d7:26:c8:1a:ad:2c:a9:47:b0:c1:9a:43:a0:
b7:2b:ae:43:59:31:6e:b9:90:01:89:ba:38:28:e0:6b:0e:75:
e3:83:f9:b9:ba:68:f7:e4:66:38:6a:91:b4:94:2a:01:f9:e8:
c5:d6:39:55:84:c1:f8:a1:ec:8f:da:01:5d:ae:60:65:a2:70:
55:00:26:39:42:d0:93:85:5f:11:82:47:09:b1:3e:d9:15:63:
55:c7:7e:f5:36:fe:dc:d4:e4:59:84:a7:c2:43:52:b7:93:45:
ab:a9:39:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVDXdcCO1Y+o5FjyksU+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MmUxNjYyODllMWMxZmMzYTk4YjU0NTQwYmNjNzMxNDZk
NzQ4ODIwHhcNMjYwNDE5MDYwMTE1WhcNMjYwNDIwMDYwMTE1WjAzMTEwLwYDVQQD
EyhkNDdlYWExNmFhMzZiMzIzODdiNDY4NjZkNTVlM2M0OGFjMDkxOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYNHywulUt15yyyt2ZFQVxFnYMwZ
guCS3ZX40laPCi7d1MSv15dD5RQ48DhB7eUf7j6bVR2Z7RxyZgYOtE0uShDMhduS
/qOzzrRs98Rkty+2Ll/pG20GXSe0DZyx6Udm3u94Ws04KkXQKkQzhOGw/KsCNunB
iBQr//eEiH6FXW60J54F2ByjG33DDybZYYEqmLf8SqIVGZxjrBV1aNTC6lpS0Gsy
o/+lrlLbSAuBcZs4Dqkx+WqtI31Byph7CDYzxqrAus/OKXquXm+0uvyjkhH2G4EQ
RKIhx81cDNrzUtGKDv0qw3uKF4y6M0kGx7mPN+YpkUDXlscfWtf9dE1iIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNR+qhaqNrMjh7RoZtVePEisCRnjMB8GA1UdIwQY
MBaAFMQuFmKJ4cH8Opi1RUC8xzFG10iCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUt
NWFkOTg2NDUzMmE3LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUtNWFkOTg2NDUzMmE3
LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4kXHhUu
xgJvAHHlYPugJxtfgc6vyYvRScdVqXCzVuhFxy9NCJlDJr5u0jakPZc6hUsfY9Nh
hJ9oP8J6vw46djPjZDO3YJGoWMQH0ut5u58CBxcQ0MwHotzbt1Q30RHUMBPtxNS5
xjK8hKnC4WPTP59NinajstSLM4EGAOe95i8GhGGqV8a+fLZkPX5ZwbNKS5E+WpDX
JsgarSypR7DBmkOgtyuuQ1kxbrmQAYm6OCjgaw5144P5ubpo9+RmOGqRtJQqAfno
xdY5VYTB+KHsj9oBXa5gZaJwVQAmOULQk4VfEYJHCbE+2RVjVcd+9Tb+3NTkWYSn
wkNSt5NFq6k5hQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:12 2026 by rpki-client