
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier: ZcciReDZxqo3OizDMts3y9UAyn2VDnChtNqf+3CDuAU=
Subject key identifier: 80:4E:B6:22:85:BD:01:02:8C:89:25:58:46:E4:A7:7B:EA:61:EE:3B
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019D9886DB5D70260E44B456F27713252C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number: 18DE
Signing time: Thu 16 Apr 2026 23:01:07 +0000
Manifest this update: Thu 16 Apr 2026 23:01:07 +0000
Manifest next update: Fri 17 Apr 2026 23:01:07 +0000
Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=)
2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=)
3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=)
4: 5LAgRSl9fFhy_RrY6Y4h_ItS9pw.roa (hash: 9uPoQd7e20GSb4ZNenQ4RHHLA/wWGAuknlkGqZ4eRPg=)
5: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=)
6: AyulhXyOhP2buicHYb4PF6awarA.roa (hash: o1jB5gIRXTUngRxBAxg2DTNhVQcSy127ziFioxQ1PVM=)
7: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=)
8: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=)
9: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=)
10: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=)
11: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=)
12: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=)
13: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=)
14: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=)
15: V1PdVFoshW1ar5HpIYyNCl-wxZg.roa (hash: 8JNuhL/a0qXG5i850tam3mN3diEt2c5ox0iX3jf8huA=)
16: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=)
17: XSRfDKJB1vWxhWr5_nnhi8kY_Ro.roa (hash: vbcx865viaCEEplLJzs5WTHypNQpAu7A3ivTLIG9UFw=)
18: XUBXC0DROf8_aCxS_neH8O6J0e4.roa (hash: /C5B3L/2hO5EvNBmbIy9wgx/1sbjdRkGMDg2OXb+bOM=)
19: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=)
20: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=)
21: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=)
22: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=)
23: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=)
24: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=)
25: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=)
26: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=)
27: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=)
28: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=)
29: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=)
30: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=)
31: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=)
32: r5EQFD61hWzkJjB7v7Y30uUhewc.roa (hash: 6ypgI1gg3G9f0KTPTcY2gQYHH5FXI074w6M2BK68aUs=)
33: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=)
34: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=)
35: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: Wsq7z7mybLFv5Dr98rUF9KC8WEhUPDOrT9zSKpyqbd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:db:5d:70:26:0e:44:b4:56:f2:77:13:25:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Apr 16 23:01:07 2026 GMT
Not After : Apr 17 23:01:07 2026 GMT
Subject: CN=804eb62285bd01028c89255846e4a77bea61ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:ec:70:e0:04:be:4f:db:07:21:a8:1e:0b:
a4:2b:1c:17:12:c0:5d:52:ac:1c:14:95:1d:38:71:
89:d6:ea:83:96:80:ff:8e:40:02:d2:94:b6:68:60:
40:67:63:46:a3:41:47:c4:fa:a6:26:c0:2c:ad:8d:
c8:1a:d1:9d:3a:22:dd:1e:35:eb:b4:48:4d:75:2c:
59:aa:c0:66:4f:66:61:09:41:c6:65:d9:2c:4c:93:
5a:4d:c1:31:ba:bb:a4:78:eb:2d:b1:74:59:bb:d1:
26:06:83:fc:ef:ac:0b:44:5c:07:d7:67:10:4e:97:
fb:a1:55:88:00:c2:e7:96:fa:2d:44:b1:bb:13:9e:
aa:de:52:08:8f:ce:58:25:a7:5a:af:63:1c:07:92:
1e:15:1d:57:75:d3:5c:58:53:eb:20:e1:b1:28:6a:
c7:34:2a:45:a0:55:18:31:fc:7f:6f:3f:92:c0:28:
21:6c:c1:d4:2d:2f:0e:18:cb:1d:78:77:c4:4b:71:
6d:0b:91:ae:12:82:55:81:7f:20:08:40:e9:f6:bb:
48:f2:b4:06:a5:ba:cc:b1:3e:09:ca:e9:73:4e:03:
b0:6d:7f:bb:71:32:e5:e7:98:38:e0:aa:72:c1:1d:
43:0b:bd:a0:6d:d6:be:78:ba:87:00:01:d1:ee:02:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:B6:22:85:BD:01:02:8C:89:25:58:46:E4:A7:7B:EA:61:EE:3B
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c9:85:73:6f:a5:ad:87:42:c1:f5:d0:13:48:26:fe:aa:ec:
45:e8:ab:f1:d7:d1:7a:8a:c8:4e:90:e3:ae:81:d5:f8:63:b5:
3e:53:22:cc:7a:f3:25:d4:b1:3e:8b:c7:9c:ce:ad:6e:bf:f7:
5d:45:88:c3:f3:6b:7d:93:1c:e6:7d:99:0f:2a:3e:70:f6:e2:
87:5e:04:a5:d7:02:90:62:95:c8:21:58:7b:56:83:e6:01:eb:
40:10:f9:94:f7:f9:09:8e:c2:fc:76:ca:89:f9:df:d7:32:44:
fe:2a:86:cd:a6:c6:39:7c:96:ff:7b:ac:e4:12:8d:09:ac:cf:
19:9a:76:26:08:23:10:40:74:da:48:c8:39:83:0f:27:32:36:
64:c0:1a:7e:99:cf:62:74:65:92:0d:d0:d5:d0:b5:22:cb:35:
8f:5f:fc:c7:5b:36:da:2a:18:a4:4a:a4:a2:87:ae:74:48:14:
42:51:ce:40:8c:31:22:37:6c:d5:f3:41:24:3b:67:d4:28:f0:
c3:e1:cf:af:51:cf:32:46:3f:90:ae:8e:f6:aa:8c:0a:fc:e8:
5d:c1:1f:e0:a9:c1:e6:18:27:34:38:30:7d:99:dc:59:91:76:
ec:99:18:d8:57:c4:d5:46:f9:07:a0:11:57:93:b9:20:a4:c4:
1a:64:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:07 2026 by rpki-client