Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
File: xJkOwgER9C-2LzmoHHOSqSGVW_I.mft (raw, json)
Hash identifier: NZJxJkzzBisOnTkQyiZSVkhJWPYrG9zq58ZEsdML5t8=
Subject key identifier: D6:31:D5:0F:60:19:F4:87:ED:1B:2F:A5:B0:9F:8A:06:B5:46:80:C6
Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Certificate serial: 019D9A074B546B315FB1B44D553AFBCBCFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
Manifest number: 0524
Signing time: Fri 17 Apr 2026 06:01:02 +0000
Manifest this update: Fri 17 Apr 2026 06:01:02 +0000
Manifest next update: Sat 18 Apr 2026 06:01:02 +0000
Files and hashes: 1: 9xmBM7L_OxbERlsRfyJd0cq_X64.roa (hash: eKCgpHNS7X6MicYQsrZGeTzZ5yIaoRnXGdc8m8M+l4U=)
2: xJkOwgER9C-2LzmoHHOSqSGVW_I.crl (hash: vYqgaDrZozcuffwgbpTaBBSf+eKnnZru5rZAfcnvLRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:4b:54:6b:31:5f:b1:b4:4d:55:3a:fb:cb:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Validity
Not Before: Apr 17 06:01:02 2026 GMT
Not After : Apr 18 06:01:02 2026 GMT
Subject: CN=d631d50f6019f487ed1b2fa5b09f8a06b54680c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:b5:16:d3:09:dd:46:55:2b:44:f8:b7:6d:
db:8b:c9:94:fb:d0:99:df:a3:7d:76:a1:3b:f4:06:
0d:34:43:d8:b7:9f:37:8d:c9:82:ac:1b:d7:ec:8b:
c7:45:ea:48:c3:aa:49:fc:79:4f:64:8b:2f:9a:84:
8b:a7:82:1a:b1:e0:e7:0f:e2:a2:90:4c:21:07:0c:
89:1b:e8:33:bc:3a:74:3a:dc:a6:0c:76:0d:17:e5:
5a:92:84:9c:02:92:54:48:fc:ae:49:06:8e:d1:fb:
cb:7e:1b:7d:de:ba:61:98:81:3a:f1:d9:4b:b8:28:
b5:bc:63:f6:cc:15:bc:fc:ea:1d:06:d4:1e:d2:bc:
01:fa:75:c9:41:d6:ef:63:8b:03:5e:53:c6:3d:44:
c0:6b:00:6d:44:c4:d8:8d:f5:be:62:80:74:56:3d:
21:84:bc:8f:05:10:90:07:a7:74:5c:94:a0:a0:08:
51:9b:e5:5b:2c:d0:b4:21:79:37:87:82:75:e8:9b:
dd:41:91:da:ca:25:f9:23:a8:a9:b5:67:94:8e:23:
86:20:5e:8b:81:7b:75:ba:d5:d4:6b:30:f4:16:a5:
10:ed:b8:00:87:bf:0e:4c:5d:16:fc:8e:33:cf:2b:
b0:9c:6c:5f:d4:23:8b:d6:96:e1:60:8a:f7:a8:28:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:D5:0F:60:19:F4:87:ED:1B:2F:A5:B0:9F:8A:06:B5:46:80:C6
X509v3 Authority Key Identifier:
keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5c:b6:9b:b2:89:ba:e1:09:31:5f:01:d6:35:11:21:63:03:
f1:1f:9d:49:52:7c:4a:d4:f7:75:bf:f9:99:d5:bf:0f:bf:20:
ac:cb:7a:aa:2e:63:36:e3:e2:6a:d9:82:28:69:73:67:c2:56:
64:8b:e1:86:9c:4e:92:cf:ab:1f:aa:bd:84:a6:56:45:94:90:
cd:e7:34:40:0c:19:49:fa:82:03:7d:ea:2f:ab:d2:56:6d:89:
5d:e9:71:83:31:92:aa:cc:68:fe:b2:ad:12:e5:74:63:1d:1b:
48:c8:63:4c:d9:52:ad:fc:53:ea:6f:ef:23:58:07:c9:dc:7d:
e1:9c:f2:d4:d9:a4:e5:d2:7a:7d:63:51:9c:64:be:87:c5:76:
20:a1:95:1f:62:bf:80:8b:46:e2:61:2c:d8:fe:de:30:30:35:
79:c3:2d:13:c5:f6:82:3e:50:79:9e:c2:f8:66:ab:7d:d4:d2:
0c:fb:7e:90:b8:80:6f:ca:7f:2b:49:4d:ce:86:51:55:e6:86:
9e:37:90:c1:d8:f9:5f:41:82:1c:7e:b7:c5:07:f8:df:d6:de:
21:22:b6:49:16:d4:03:0a:fc:8c:8a:c3:12:75:ff:51:2a:f7:
1d:5d:c7:dc:38:8d:c1:d8:ef:07:21:82:0f:a5:54:ec:e7:13:
69:00:aa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:52 2026 by rpki-client