Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier: NglIVogsIGySWO1kdvZXcsE9BfNLBfgqYKW9YQASVyo=
Subject key identifier: 27:29:0D:11:5C:7E:C3:66:96:0E:F4:8B:1D:58:C6:06:8E:AF:41:FE
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 019D9BBEBD34B12E00C0BF6AFEDBA68EA3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:01:01 +0000
Manifest this update: Fri 17 Apr 2026 14:01:01 +0000
Manifest next update: Sat 18 Apr 2026 14:01:01 +0000
Files and hashes: 1: bPyQY6SXWWwE0kxuCGK65w1wEbQ.roa (hash: HBq1ZxOHL2v4vjCZS/Tly78qQg5nD5KUf65a7gSUtF4=)
2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: yNRJ3q8vZNhiMbPSUKyCdnSPlyjKDb26IIkAQfTOq08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:bd:34:b1:2e:00:c0:bf:6a:fe:db:a6:8e:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Apr 17 14:01:01 2026 GMT
Not After : Apr 18 14:01:01 2026 GMT
Subject: CN=27290d115c7ec366960ef48b1d58c6068eaf41fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:8d:16:23:e7:65:4b:51:06:3c:ed:7f:b1:
fa:e4:65:99:be:4d:f4:2b:1a:64:02:4d:aa:8d:45:
85:66:b2:13:94:8a:8d:d9:09:10:4d:58:2f:2f:a2:
3f:c6:82:91:fc:20:13:58:ff:43:2b:36:f8:7d:bf:
1d:39:c8:fd:08:22:01:23:92:25:a7:ee:2c:6c:9d:
40:4c:73:d2:1e:11:77:1e:79:f3:af:21:93:d4:de:
eb:a5:5b:bc:d5:9e:39:85:9e:09:2b:c5:31:b1:cb:
7a:99:3e:81:c0:1e:74:24:e7:fa:1f:56:81:af:6a:
64:f3:28:1b:dc:f1:5b:f7:57:ea:b1:5f:2e:e5:e6:
42:59:a9:85:65:0d:be:a7:ca:b4:0c:c7:34:51:4f:
0a:18:3d:75:68:e3:1e:c3:9e:c3:69:00:a5:43:10:
30:12:45:e4:76:60:c4:88:8b:b5:04:5c:13:16:ce:
53:7e:88:fb:94:ed:be:de:b5:75:64:7d:77:77:63:
ad:0d:4d:b1:b3:81:59:a3:cb:3e:cc:85:5e:74:29:
c6:63:a3:b3:9c:e8:9e:3a:a4:ee:04:0e:20:99:f9:
53:99:02:bd:61:41:2d:a4:7a:c8:8d:25:a1:80:7e:
11:16:55:ac:60:2e:f8:59:67:b7:dd:8c:cd:3a:cb:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:0D:11:5C:7E:C3:66:96:0E:F4:8B:1D:58:C6:06:8E:AF:41:FE
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:66:69:63:96:ef:71:f4:a4:5a:9b:f9:c2:d3:10:df:5d:
ac:5b:87:7e:69:fb:96:0a:43:74:b8:6a:8a:c7:52:d2:94:12:
c8:02:4a:e3:ba:d4:b0:6f:5e:5b:0a:d1:47:73:66:e6:d3:bb:
9a:a8:c6:0f:ea:3e:40:cd:df:b0:32:1d:8b:f3:e9:64:d2:46:
3e:0e:4a:f1:74:46:27:64:af:e0:26:b7:cd:ed:09:85:4f:bc:
9d:a1:7d:b6:00:e5:9c:19:15:33:c0:0d:1b:2d:47:63:f8:6c:
02:1b:1c:1c:5a:00:91:5d:ec:ce:70:c4:7b:22:f9:4b:4a:de:
83:15:4e:e4:0f:6e:e4:cf:07:4c:5b:af:6f:93:3a:86:f1:bc:
66:76:43:a9:0f:26:9f:cb:d8:8f:00:b2:8a:e2:cb:04:f7:e8:
1d:bd:fe:86:2d:fb:40:b3:09:d1:e4:2c:89:36:45:4c:a1:7a:
9b:04:d1:ba:c9:ac:7e:d3:af:4a:5a:ed:18:11:87:59:73:e6:
ea:93:79:94:5f:a9:20:2c:a2:93:48:6c:af:39:28:fd:41:ec:
9f:73:81:97:57:96:d8:a5:7a:4d:05:a6:00:25:e3:db:cd:04:
9b:ab:7a:32:85:c2:05:15:fe:5e:e8:7a:72:8e:69:52:45:a4:
ea:07:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:10:50 2026 by rpki-client