Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: gh8LwbzLpCQVTEVoIsPQLVy8KyMWyMWAVkMH1XzVLNU=
Subject key identifier: EA:E8:2D:D4:02:B7:5D:95:EB:EB:44:0C:82:67:80:0E:EA:54:54:10
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019D9C9AA1DC6031CC2208B159B54112C44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1860
Signing time: Fri 17 Apr 2026 18:01:12 +0000
Manifest this update: Fri 17 Apr 2026 18:01:12 +0000
Manifest next update: Sat 18 Apr 2026 18:01:12 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: rkm1AiLmrXAbk/QebMT3zvwTfMi6RelT6MR7t9QNHro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:a1:dc:60:31:cc:22:08:b1:59:b5:41:12:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Apr 17 18:01:12 2026 GMT
Not After : Apr 18 18:01:12 2026 GMT
Subject: CN=eae82dd402b75d95ebeb440c8267800eea545410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:8c:54:3c:2d:94:ea:25:94:fa:17:de:fc:
2a:ae:ab:67:a6:e4:80:c8:27:6a:a1:79:82:d1:65:
e9:da:8e:7a:7f:cd:92:13:ba:1a:0f:8b:05:30:62:
b5:a2:7e:99:7c:77:df:f5:be:7d:76:11:88:4c:5d:
77:e9:a1:c9:5e:1a:2d:07:94:5f:2b:1b:ab:1e:94:
91:6b:4c:72:c5:e4:2f:95:1c:1f:54:e6:de:79:6d:
2b:ff:d9:6c:f6:a3:ff:10:74:64:ec:81:d5:34:49:
7f:ce:63:00:d3:41:60:13:9b:5a:4c:20:d5:ab:fd:
32:a4:b5:12:31:4b:71:98:9b:8a:aa:dc:14:fd:47:
76:d4:1a:4c:9b:c7:96:59:54:20:c2:1a:dc:4f:5d:
68:3f:a4:7d:ec:81:72:3a:ca:fb:a6:b5:60:74:d9:
08:1c:55:d1:87:d9:12:fe:32:f7:de:72:fa:93:2f:
00:1d:f2:e8:42:8c:76:2a:b0:28:d9:dd:17:cd:32:
b9:c9:0e:b5:b7:82:1e:33:00:c7:c0:c6:2d:b9:3a:
f4:32:a0:aa:3f:c3:0c:16:e7:4c:22:fa:c9:55:ee:
ef:8c:f5:f1:24:f6:80:02:eb:b1:22:f9:09:9d:67:
25:f1:7f:79:60:e3:24:eb:1e:71:1b:09:c6:63:cf:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:2D:D4:02:B7:5D:95:EB:EB:44:0C:82:67:80:0E:EA:54:54:10
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:19:db:ef:87:b5:60:51:f7:05:07:24:d4:bd:01:08:be:d3:
6e:b4:8b:8f:6a:af:b1:70:e7:2e:b1:a0:f5:54:86:71:ae:a3:
03:05:97:1c:9f:d2:36:11:6d:f1:c9:d8:8b:a0:c9:e4:f1:db:
63:b3:39:28:20:89:18:85:69:00:59:b6:ec:49:81:a3:94:e0:
c3:c6:6c:27:28:3c:81:d7:86:c2:0d:b1:ab:41:2e:d9:ea:87:
6a:7d:04:ec:98:6b:3f:89:b5:7d:7d:fc:a2:20:87:a3:8c:6f:
91:9c:aa:f8:9d:53:11:49:56:ce:0d:d6:22:d5:bb:dd:e9:4d:
0d:04:c2:7c:0a:65:1a:a4:f4:08:36:bc:71:99:5c:75:1b:ae:
c1:2f:f0:07:f8:69:a6:4a:4f:8c:a1:fc:9b:ce:ab:13:80:17:
05:c3:3d:84:a4:74:88:02:bb:c0:35:a6:99:ef:2d:8f:28:9a:
b7:bd:67:64:13:c9:1c:71:59:98:48:97:ce:a2:4f:5f:14:7e:
b9:95:70:eb:c8:3b:8d:67:6d:76:0b:ab:e6:71:fe:4b:47:60:
32:88:e9:90:c2:df:b2:9d:bc:16:05:d4:7f:19:84:8e:4a:b0:
9b:4d:1d:f4:10:7d:07:1a:60:8d:00:37:7e:75:bf:99:b8:4e:
82:4f:0a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:23 2026 by rpki-client