Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: S+e+5wkddXEplR/Y1KenH0znHrNdw2nlz6bmgb2h4rE=
Subject key identifier: 2D:3A:17:58:7D:F2:BD:D2:1B:66:BF:AC:E1:5B:18:19:7E:F3:52:70
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 019DA3E6A2E71F4F5298A9ECDE9A1C4CA439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 185A
Signing time: Sun 19 Apr 2026 04:01:34 +0000
Manifest this update: Sun 19 Apr 2026 04:01:34 +0000
Manifest next update: Mon 20 Apr 2026 04:01:34 +0000
Files and hashes: 1: 8cS6Qj5MYE4B8boPnbZ2kcXbU-k.roa (hash: AKR29eJxFVsOMPaiI3uGdOD049mIqIl+nuPgud2mgtc=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: 8Ak3LB5D1SApuf+gsaWePCeWFRipkq4j59Va0LfcDCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:a2:e7:1f:4f:52:98:a9:ec:de:9a:1c:4c:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Apr 19 04:01:34 2026 GMT
Not After : Apr 20 04:01:34 2026 GMT
Subject: CN=2d3a17587df2bdd21b66bface15b18197ef35270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fa:a1:4c:99:15:1d:7f:69:89:7b:63:12:92:
9a:10:18:89:4e:d2:c1:98:9f:53:99:17:1d:44:86:
d8:40:42:d9:2c:b5:c1:b2:a1:11:43:08:28:7e:46:
8c:76:08:46:fd:d3:37:df:e3:6b:0c:e6:bb:77:62:
a7:5a:5a:bc:f0:b7:1f:8e:da:56:20:31:04:10:24:
d7:cc:09:8b:89:78:f3:5a:71:55:7d:ad:9c:3e:68:
09:f5:3b:b0:36:9c:37:4e:ba:47:39:fd:8b:c5:6a:
d5:f8:eb:65:b4:82:d2:73:70:20:28:9c:f3:80:08:
7f:10:73:21:67:67:f1:a1:f8:6c:db:6a:a3:f3:69:
fd:6a:90:8a:2a:d1:54:87:14:15:f5:4d:67:13:5c:
dd:e6:57:4a:65:d0:c0:37:2a:78:c9:78:83:0a:ef:
10:b5:2b:a6:24:fe:d1:1e:0d:4c:df:6d:38:ba:1b:
d7:8c:07:2f:99:87:e4:c2:50:e2:7c:8f:22:f5:6b:
9a:da:ab:8c:5c:4a:ce:a6:8e:cc:f6:1d:95:12:12:
4e:d5:d7:e2:53:3b:c2:db:fb:55:54:6e:63:dc:a8:
2f:02:64:b4:e8:84:e9:23:e0:b8:81:b5:9f:02:e7:
4c:63:e4:71:0a:2c:40:f4:28:bc:9d:aa:3f:6e:fd:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:17:58:7D:F2:BD:D2:1B:66:BF:AC:E1:5B:18:19:7E:F3:52:70
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:38:a1:f7:d9:fd:bc:09:20:2a:46:30:ae:1e:8f:ad:ea:a1:
00:94:db:05:e3:93:5e:3c:e0:29:74:f6:02:3f:d5:ec:f4:64:
0d:91:55:0f:03:8d:5b:72:8d:94:d4:fe:ad:1c:6f:07:67:d0:
f1:66:07:cd:59:02:64:b6:eb:a0:94:76:7a:d7:6b:28:3b:51:
0a:11:c8:73:7a:11:f2:d8:68:0c:c6:77:f0:3c:57:cb:06:3d:
5b:25:4d:63:ab:7d:ae:aa:5a:fb:7d:70:c9:bd:fe:0f:63:c0:
1b:4f:75:4d:f6:1e:40:3e:5b:1f:8e:b5:01:58:17:28:9d:e8:
15:96:3c:d0:74:fb:0f:d6:a5:4c:dd:ef:f7:b6:17:e6:a9:f2:
64:e7:c4:ed:93:0f:b6:a6:66:2a:b4:e9:c6:ad:a3:10:34:3d:
45:f8:fe:65:19:3e:26:4a:cf:44:d9:c9:a3:7b:53:f5:12:0e:
21:0c:00:06:2c:23:b8:cb:ac:50:8d:e6:38:5a:f6:d1:8c:e4:
b3:eb:b6:dd:cb:9f:62:a4:a1:19:6d:10:9c:8f:b3:80:9d:18:
b2:85:7c:60:82:52:77:e1:a2:44:f2:61:11:ad:a3:8e:ae:6d:
15:af:97:6b:d6:84:4f:c2:4a:d1:ba:4d:56:b4:79:3d:95:05:
df:9e:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:34 2026 by rpki-client