Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: YNxbM+q+/pwsbx+J5tqo+t9JR5+uF5gyiymg9OMxm5E=
Subject key identifier: 88:11:0E:69:A0:D5:02:0B:00:4A:3A:82:25:0B:20:CF:8A:0C:FB:29
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 019D99D08638E4B07FFB54E26A19D0A1A763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 1717
Signing time: Fri 17 Apr 2026 05:01:12 +0000
Manifest this update: Fri 17 Apr 2026 05:01:12 +0000
Manifest next update: Sat 18 Apr 2026 05:01:12 +0000
Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: OBUwn7uP7klOsQ6e9z6nxfflOFgWdjAE21MCIAb3j6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:86:38:e4:b0:7f:fb:54:e2:6a:19:d0:a1:a7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Apr 17 05:01:12 2026 GMT
Not After : Apr 18 05:01:12 2026 GMT
Subject: CN=88110e69a0d5020b004a3a82250b20cf8a0cfb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a5:8d:af:22:9c:da:91:ad:7e:09:99:4c:cc:
3b:2d:01:08:02:e4:bc:48:8e:57:af:91:3b:75:45:
36:b1:9d:ba:6f:31:58:45:8b:bf:63:42:d0:6c:ec:
4b:1e:bf:8f:43:30:b4:9b:af:39:cd:60:18:5b:15:
02:81:a5:f7:b4:07:55:3e:de:3a:29:ab:8e:c1:fb:
a2:ed:1d:22:c6:66:77:be:bf:d9:90:85:87:c1:c8:
32:22:4b:5f:0b:45:e1:c5:67:5c:1d:a2:21:71:52:
82:83:f7:5f:8b:06:43:87:75:86:9f:85:5a:2c:3b:
86:5f:c2:7e:6d:18:6d:2a:54:d2:5b:81:bb:8f:91:
99:49:95:16:c0:5e:74:ce:07:ec:60:40:1c:2c:b3:
0e:d3:5e:b1:de:43:eb:d7:f1:77:c7:3e:fc:b8:be:
fc:60:85:50:98:9f:f1:1d:8c:b2:58:15:97:50:e7:
fa:d3:39:69:00:78:ee:10:70:4b:b3:f3:44:97:a8:
9a:69:c5:da:00:00:a0:9d:c5:ef:c5:17:c2:b1:02:
25:71:4a:8c:1f:a9:d6:6d:bd:7f:b4:4b:de:93:4b:
bb:77:22:81:25:a0:b3:3e:2f:45:3e:c8:f4:29:31:
98:4d:e8:7e:4a:64:e0:e0:cb:25:fe:a9:07:4c:9e:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:0E:69:A0:D5:02:0B:00:4A:3A:82:25:0B:20:CF:8A:0C:FB:29
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c2:8f:47:c5:a0:9f:27:7b:8d:60:6f:13:c4:97:dd:8c:f9:
52:b4:3e:6b:8d:1c:77:e1:0c:58:34:ad:dd:3e:fa:df:ca:93:
87:3f:9b:7a:a5:27:b6:ef:b4:46:35:1e:f5:01:64:02:2b:f4:
c4:b1:e2:2d:7b:c1:f0:7a:ee:95:fc:6e:f3:1b:95:b4:c3:43:
24:68:49:cc:b6:c6:3d:0f:24:a3:c0:25:a6:64:7e:19:18:8c:
f7:60:86:74:3d:37:d1:a3:9c:14:13:5a:c1:a9:91:ad:f8:0e:
17:51:2f:8f:5d:0f:31:6f:cc:83:2d:83:35:f9:08:f1:c5:87:
bb:bf:46:69:f6:65:54:b9:32:04:ad:a6:cc:12:b8:64:1c:b0:
72:20:cc:94:30:c5:ac:65:13:cb:40:47:fa:33:0a:f1:c3:51:
93:14:58:1d:13:8b:14:83:ea:1c:d8:96:84:0b:a1:ce:03:23:
47:cc:11:f4:f2:31:bc:d8:1d:4f:b0:f3:86:e6:72:0c:4b:c1:
3f:85:69:ef:9b:59:23:37:90:ac:69:eb:a7:19:ef:93:e5:d2:
f4:ae:e5:d2:2e:3a:1f:53:cc:69:b2:2e:da:a4:95:08:55:79:
d2:0b:61:ac:1f:61:21:b1:9e:4c:e4:6b:8a:fb:ed:2d:a0:5d:
c4:00:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:30 2026 by rpki-client