Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: 0n3yLpeNwT4axT5dZqi25cOh8ud/3Q9jxtia1OSUfp8=
Subject key identifier: 46:95:F0:74:94:AA:10:A2:6E:D2:0A:D3:18:64:61:2F:60:C8:75:31
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019D9B1A01490EB8CFCAAFD3D4435D9EF643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:01:05 +0000
Manifest this update: Fri 17 Apr 2026 11:01:05 +0000
Manifest next update: Sat 18 Apr 2026 11:01:05 +0000
Files and hashes: 1: O58aCTrbE5lgm64c310ntztX4Wk.roa (hash: 0T3h+C9Xr6EOTPtS+HVLjRGd+kBq9kMPTWwsY3303pg=)
2: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: y1i04NnYpQU+avdw0Gbv7NOLLGxfFKYk9RlDopFwHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:01:49:0e:b8:cf:ca:af:d3:d4:43:5d:9e:f6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Apr 17 11:01:05 2026 GMT
Not After : Apr 18 11:01:05 2026 GMT
Subject: CN=4695f07494aa10a26ed20ad31864612f60c87531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:07:41:9c:50:2e:3b:66:21:fc:a9:e8:29:
29:b9:63:f0:38:84:8e:57:ce:a6:e3:97:a5:f2:65:
ac:e3:b3:a0:5b:4f:1b:b8:a0:e6:02:72:f9:34:e0:
a7:84:05:df:8f:0a:30:38:5f:b9:c0:54:b9:f5:a6:
25:c1:26:09:b2:3e:3b:e1:3e:9f:c3:e7:4e:bb:7f:
da:5a:2b:0a:ed:bf:2c:94:9e:df:d5:16:08:65:dd:
a8:d2:e4:52:e0:ac:de:8b:a4:2c:7d:dd:f7:d6:1e:
1c:08:d7:52:02:5a:ba:e7:68:e4:41:5a:f9:69:0f:
94:2a:00:09:b0:6d:4e:20:eb:89:a3:9c:c7:38:d6:
fb:d3:99:e7:25:ee:60:68:ee:40:67:93:1e:13:ec:
33:9a:48:de:c7:a1:10:e2:5d:8e:7e:b5:ed:0e:da:
8d:f9:87:61:15:32:3a:d4:72:0a:4d:43:bc:6f:86:
b2:e0:de:67:e2:0f:da:88:d9:0f:7f:8c:77:11:62:
f7:a4:52:e3:80:4a:bd:da:c0:15:8b:b0:8e:24:80:
1d:f7:e2:50:ef:0b:5d:3c:eb:b7:a1:7b:a9:b9:0c:
2c:95:a9:f7:0d:ad:de:6d:76:ee:df:61:7c:97:25:
c1:51:30:89:00:ec:8c:a0:f0:28:d9:d0:16:19:2b:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:F0:74:94:AA:10:A2:6E:D2:0A:D3:18:64:61:2F:60:C8:75:31
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3b:ba:fb:e8:0c:7b:8f:ae:7f:6e:13:6b:3c:04:3d:e6:f3:
d4:c8:a9:3c:16:f9:32:80:55:ef:74:e6:d7:34:49:32:d5:97:
8f:80:72:ff:28:0e:eb:ad:e1:4e:e9:27:54:7a:c4:81:71:6e:
cb:24:51:47:36:a8:07:71:a4:7a:5a:33:05:a5:22:1b:d9:64:
5e:5a:2c:2f:d8:37:68:89:bd:9b:f3:52:db:68:03:98:6a:e3:
bc:5d:b7:ba:9a:71:9a:f8:0f:7b:2a:dd:6a:9d:82:89:28:69:
2f:1a:9b:cc:92:0f:31:4b:a6:73:79:1d:50:84:4c:33:f5:4f:
d4:d7:e2:b8:76:e2:57:06:b0:41:af:ce:77:28:d2:e6:ea:27:
9a:13:95:77:ca:43:10:2a:0a:f9:7f:2f:5d:80:03:1b:a4:78:
c6:21:6f:49:33:0c:a9:e0:23:28:c8:0e:a8:0e:78:53:79:a8:
b2:16:d0:c2:4f:47:ec:fc:dd:9f:fa:11:8c:73:c0:19:a6:92:
a3:80:ef:72:e1:e1:76:9e:51:a3:1c:c9:e5:fe:23:fd:78:56:
9e:31:4d:0d:b3:1b:b0:f2:31:c9:30:de:78:5c:73:0e:47:48:
28:df:3b:21:f0:ec:42:2a:d0:61:d2:d1:b6:29:2e:52:09:de:
1e:07:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:55:06 2026 by rpki-client