Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: dZYl343ydqclG5uc3JSlT0cfDBjCvHEIKwVJ/J6JCxY=
Subject key identifier: B1:A7:B9:49:DA:A5:5E:70:72:FD:8D:3E:37:EA:48:45:C5:60:9E:61
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019D99624F0993D9C9F7EB4BE9D0BBB51523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 07B7
Signing time: Fri 17 Apr 2026 03:00:49 +0000
Manifest this update: Fri 17 Apr 2026 03:00:49 +0000
Manifest next update: Sat 18 Apr 2026 03:00:49 +0000
Files and hashes: 1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: n4vKATJyvquPvTWJlJdfC+VtnaV7J5jQ+exHKBmGDh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:4f:09:93:d9:c9:f7:eb:4b:e9:d0:bb:b5:15:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Apr 17 03:00:49 2026 GMT
Not After : Apr 18 03:00:49 2026 GMT
Subject: CN=b1a7b949daa55e7072fd8d3e37ea4845c5609e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:e0:ff:79:51:23:06:6c:7b:40:c5:6c:0f:
57:5c:6d:70:9d:04:25:a3:24:2d:9e:cc:24:30:85:
a9:e1:93:5f:5f:99:19:7f:75:7b:ac:fa:06:7c:07:
6b:9e:7f:ef:b7:eb:ad:04:8c:38:1f:34:ab:70:31:
27:ce:1a:f9:f1:8b:eb:6f:54:e2:c7:b2:41:06:8d:
14:bb:70:a1:5f:0a:61:20:68:6d:8e:d9:03:d3:5b:
3f:d3:d4:9f:c5:20:68:53:22:ba:4b:db:ab:a6:a0:
7b:94:a2:e7:d9:44:78:71:75:1c:ad:0d:e7:60:31:
bf:38:fe:93:99:23:f4:38:16:a7:d7:2d:c4:5a:72:
c6:a0:1c:f1:87:e5:38:3f:0b:e2:f2:dc:0d:ed:c9:
da:10:3b:a0:57:5e:8c:ae:23:49:9a:60:69:04:ec:
52:a5:42:d1:69:1a:98:81:d7:98:a9:90:b7:e1:9b:
27:40:31:e3:de:b0:75:21:43:cf:5a:2a:0d:bd:34:
e7:06:d4:0f:60:0b:48:9f:ad:83:df:d1:72:5b:d1:
c2:e9:9c:66:d5:ed:b7:1b:e8:b4:55:d6:28:17:de:
d8:98:44:15:48:65:81:7c:e8:18:06:f0:45:ae:00:
22:ce:75:5b:78:03:d1:f0:cf:a2:94:c8:20:05:ef:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:B9:49:DA:A5:5E:70:72:FD:8D:3E:37:EA:48:45:C5:60:9E:61
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:05:cd:1c:18:07:9c:b9:05:6c:c6:13:1d:1d:48:91:a1:de:
b8:14:f8:06:07:f1:e0:d3:27:26:05:20:47:b0:fe:74:2f:5a:
c5:0e:c1:68:bc:cd:2f:60:e8:ea:1f:c7:30:cb:04:77:79:44:
52:4d:fe:0d:fd:dd:17:ac:54:2f:e2:73:04:b5:39:ce:fa:bb:
eb:86:cd:48:e4:fc:6e:f4:64:ae:31:de:14:53:70:b4:83:25:
51:8b:05:93:f3:59:43:68:94:3d:1e:6a:a3:19:8d:7a:db:f8:
de:3e:54:e4:88:7a:eb:d4:46:fc:bb:76:17:b7:cd:2a:6f:9d:
e8:b5:29:73:e6:19:ae:3f:d3:6c:9d:f3:c1:1e:6e:6c:44:6e:
86:38:e4:5e:83:e7:98:8f:f5:8f:76:e1:e6:e2:da:4f:b3:57:
7c:00:b3:01:ea:1a:72:a9:63:8e:e8:d5:f6:4a:bb:44:21:2c:
49:63:5c:be:53:15:ea:d3:07:f2:92:72:6b:77:48:6c:d4:75:
7b:b4:6d:11:08:cc:1e:d8:7b:da:56:72:5a:e4:62:3c:38:e7:
cb:e1:a9:c2:84:50:f3:71:fc:60:8d:8e:10:b6:68:62:5b:af:
48:f3:7f:0e:ab:df:c3:7c:54:84:c0:1f:91:a4:fd:8c:0a:29:
60:f2:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:22 2026 by rpki-client