Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: d+PVC3RNClO7FzAoEiUt+r6MI+paasnm4/+kF3PDElU=
Subject key identifier: 72:2E:20:26:AB:25:6D:3C:08:6F:1E:7C:26:DD:5B:E1:6C:43:CE:1E
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019D9B50C288D52BA0CD1796D7C2439F05B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 12:00:54 +0000
Manifest this update: Fri 17 Apr 2026 12:00:54 +0000
Manifest next update: Sat 18 Apr 2026 12:00:54 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: 03EmNKuDwNwUt0NxOA8926vXLYcZrlg47ij6/5gSY3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c2:88:d5:2b:a0:cd:17:96:d7:c2:43:9f:05:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Apr 17 12:00:54 2026 GMT
Not After : Apr 18 12:00:54 2026 GMT
Subject: CN=722e2026ab256d3c086f1e7c26dd5be16c43ce1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:05:cc:e2:a3:3b:7a:43:e3:01:bd:52:cf:
87:30:b1:f0:03:a6:ab:7f:c0:81:f7:9a:84:bd:08:
b4:39:82:55:19:79:0d:f8:b6:18:9d:50:5a:a9:e8:
21:9a:68:20:7a:a1:e4:e5:62:7d:18:14:1f:ae:9a:
00:f6:12:bf:00:aa:30:c2:1f:58:89:1b:18:b2:bd:
17:61:a5:72:f0:95:74:eb:88:01:61:bb:e0:50:af:
ec:de:41:1a:f5:20:6c:50:df:da:6e:1b:24:8f:f6:
2b:89:35:bc:5e:61:b1:d4:52:c5:3e:2c:e8:f7:e7:
9a:05:a7:42:97:16:26:b0:8d:30:88:cd:c9:66:1d:
b0:cf:11:f8:31:45:be:ce:9c:44:43:ee:3c:f9:18:
e2:b5:51:9b:be:39:95:9b:28:b9:cb:e4:9f:7c:35:
eb:b7:07:b1:83:f1:66:62:67:74:c4:87:a2:d6:cc:
fd:12:f6:df:a6:a9:c9:6c:3a:7a:ad:82:8c:63:2c:
65:87:a6:f6:df:95:4a:91:e6:30:0e:7f:de:7c:74:
f4:c2:10:82:62:62:24:52:6b:e7:df:2d:00:a0:30:
5e:82:2c:01:0e:7f:89:da:92:f6:3a:df:ae:45:3b:
34:36:0b:64:6b:91:07:ce:88:8d:63:90:03:0e:bb:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2E:20:26:AB:25:6D:3C:08:6F:1E:7C:26:DD:5B:E1:6C:43:CE:1E
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:3b:84:ee:8f:6b:91:70:ae:85:22:0c:15:1c:d0:6c:60:
7a:74:ca:a6:06:f6:9b:b7:5a:6c:12:a8:ec:20:60:4c:0e:bf:
a5:27:d0:c8:71:9c:6b:3c:7d:01:10:05:20:64:81:93:9e:e9:
37:0e:39:b1:a6:6c:15:5c:3e:dd:4a:42:20:cf:8c:c5:d2:ea:
36:be:3d:72:cf:c3:56:79:b2:d6:44:d5:c2:d3:b1:42:e3:23:
8e:ba:74:f3:f0:db:22:ef:9a:85:1f:47:fc:3b:7d:45:08:23:
41:f4:02:2a:c4:c1:55:6b:1d:80:9e:6a:38:0c:80:00:71:16:
13:f8:47:d4:51:96:a6:ce:72:a4:b3:4c:72:04:88:e4:52:01:
b7:d8:01:63:5c:17:f5:37:1e:a9:1d:af:11:0f:02:f4:89:cc:
19:59:43:a7:9d:1b:16:e6:2d:d6:25:ee:de:f3:f2:4c:39:39:
29:89:7d:be:7b:91:60:86:44:a2:1f:df:7f:40:0d:0c:94:6b:
ce:91:8e:49:d3:7b:22:d1:4e:db:5d:51:d7:0a:95:a9:78:55:
48:97:48:32:23:76:c6:58:c3:15:b6:2c:cb:79:0e:49:27:08:
7c:84:88:6f:7f:64:28:3f:ff:a3:74:d6:7b:e8:5b:13:2e:51:
04:8c:0f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:28:10 2026 by rpki-client