Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: VwATXY+0RJFu+3IILkaE99tdME/Fs5ynOuH5Tm6KdNk=
Subject key identifier: 6E:A0:B2:D3:EA:5A:53:04:7F:34:DE:B6:DC:04:FB:DA:79:59:09:C6
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 019D9AE2A3F8E478E19D0E4CD828E77A8B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0E1B
Signing time: Fri 17 Apr 2026 10:00:37 +0000
Manifest this update: Fri 17 Apr 2026 10:00:37 +0000
Manifest next update: Sat 18 Apr 2026 10:00:37 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: 3yOFh9E0zkrgIFXxZzXznL07uXA8QQrF/SEiUsDYl7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a3:f8:e4:78:e1:9d:0e:4c:d8:28:e7:7a:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Apr 17 10:00:37 2026 GMT
Not After : Apr 18 10:00:37 2026 GMT
Subject: CN=6ea0b2d3ea5a53047f34deb6dc04fbda795909c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:ba:d4:17:90:70:16:23:d6:59:47:e7:90:
e2:4e:4a:65:85:5c:ec:c3:f1:94:7d:6c:2a:f8:67:
47:75:8d:22:7d:41:60:68:82:98:38:31:ef:03:b9:
6b:80:f6:75:f1:6e:c9:9a:be:80:d4:ea:6c:1c:20:
e7:82:75:82:5e:df:d6:af:03:97:aa:4b:16:86:3f:
6d:88:cf:4d:50:e3:e1:19:c1:e2:ed:06:98:95:d0:
7a:bf:c7:59:e1:02:5f:b0:32:9a:98:24:6c:a7:c9:
f8:88:b5:fd:e5:62:ef:53:21:43:9c:72:f7:31:5e:
5c:50:c6:f8:0a:71:16:1a:20:95:36:c1:d4:3f:a0:
37:c6:e7:1a:a2:e3:10:b8:66:4b:30:22:74:a6:fe:
c5:f4:47:cc:ae:15:1c:0a:dc:55:77:a3:ff:fd:f9:
da:c0:e9:b3:94:05:2c:27:6b:84:b7:54:03:5a:3f:
84:17:76:9e:99:0d:ca:64:ff:6f:82:88:96:09:ec:
94:3e:68:e0:77:6a:af:ba:50:a0:66:46:cc:5b:5b:
16:f5:5e:d5:1e:50:20:37:1e:07:ff:f5:ac:90:b3:
fe:6b:f4:5e:63:b1:e8:15:5e:b6:58:89:22:9f:d5:
b1:53:e8:45:34:8f:24:e3:b9:37:28:a4:bf:85:19:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A0:B2:D3:EA:5A:53:04:7F:34:DE:B6:DC:04:FB:DA:79:59:09:C6
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:42:ac:d6:2e:e1:b5:07:4c:9e:36:a2:17:2d:29:db:08:1d:
3e:d6:dc:7f:70:88:82:43:36:4e:c8:bc:16:2a:53:f5:6a:a7:
6f:7b:ca:2e:2e:26:ff:e9:6e:6d:bd:c5:76:0f:88:09:4a:3a:
c7:6b:48:9a:6c:d5:96:eb:3c:ed:60:ff:a2:ef:3d:98:27:81:
62:d8:89:ed:15:bf:85:d4:69:d2:3d:fb:22:f7:72:d3:3e:1e:
5f:07:4d:17:ab:b9:6f:5d:a8:35:01:92:20:94:d4:c1:d2:5a:
61:10:02:ca:a9:23:52:bd:dd:e4:39:6a:08:30:5c:b4:15:d3:
83:c1:21:55:21:83:31:34:f0:0a:5c:9d:18:18:ac:0e:52:79:
ea:e6:e7:da:f7:9d:a0:11:e5:3c:30:c5:72:0d:c8:45:93:19:
90:c8:d0:90:d8:99:b8:38:00:b9:f6:0d:6c:4e:5f:9f:69:aa:
46:58:67:a7:ff:cf:d8:39:0e:68:6c:81:49:24:3a:3e:a5:84:
66:af:92:c3:61:82:50:aa:59:e7:e3:c1:ef:63:88:0c:75:e5:
a8:6f:ca:8b:11:f1:5c:a4:7a:ac:75:9f:73:b9:a6:ce:12:f7:
c7:b8:27:31:f3:b7:18:9a:bb:2a:b9:7a:94:fe:fe:23:8e:78:
97:fc:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:05 2026 by rpki-client