Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: Zt2NorCShOtACIkSXcI4WMvSXrJ6bPYKqiSJ4mmi28A=
Subject key identifier: 78:E0:07:BB:8F:A8:C0:80:F3:2D:7C:28:1C:3F:49:A8:40:3A:82:83
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019D9A3E2BB08ABD30DB20464D8DAB8DCC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 162F
Signing time: Fri 17 Apr 2026 07:00:58 +0000
Manifest this update: Fri 17 Apr 2026 07:00:58 +0000
Manifest next update: Sat 18 Apr 2026 07:00:58 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: 8FE2s/FdrnzO7I8wscBoXITytiuY3vP9Zzu8DdLZv8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:2b:b0:8a:bd:30:db:20:46:4d:8d:ab:8d:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Apr 17 07:00:58 2026 GMT
Not After : Apr 18 07:00:58 2026 GMT
Subject: CN=78e007bb8fa8c080f32d7c281c3f49a8403a8283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:5c:b8:c0:62:46:04:85:39:99:8e:2d:96:
45:b2:58:20:df:78:c5:51:ca:74:f9:43:fa:b9:48:
ac:90:ff:9b:3b:37:90:6b:5c:03:e6:da:c5:95:d5:
f4:55:e8:52:61:99:0a:8f:d5:60:09:b4:fe:48:a0:
fa:b9:25:0e:52:b2:d7:cf:3e:53:ff:dd:19:97:77:
d5:34:7b:48:c6:dc:c6:d6:d8:2e:16:2e:c1:66:5d:
97:56:9b:96:b5:32:e5:c1:75:d6:96:fe:1d:7f:c7:
74:8f:e1:66:1a:f6:66:15:25:1d:ea:e5:c6:6b:4e:
40:e3:ae:96:ac:be:c4:cb:ed:76:e1:5e:2d:77:82:
04:d1:40:dc:e1:b8:eb:ac:f4:3f:71:af:24:dd:cf:
8b:b9:ea:42:a5:ac:ba:e2:c3:87:af:12:d6:97:b8:
da:0f:58:86:59:46:62:3c:fd:2b:29:21:4e:22:c3:
c5:b3:f6:ef:75:d3:39:75:a1:ec:13:fc:57:cd:46:
b0:63:d3:c7:ce:1c:26:3a:b8:f8:0a:48:c9:0d:46:
40:3f:31:d3:c4:db:1e:cc:7b:c3:d1:7f:f4:8e:05:
ed:ca:50:0c:85:b4:99:44:b5:76:6c:51:44:f7:ef:
61:53:69:af:ef:b9:5c:94:48:9f:7a:01:df:99:97:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:07:BB:8F:A8:C0:80:F3:2D:7C:28:1C:3F:49:A8:40:3A:82:83
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:51:39:fb:15:ec:8b:32:6a:7a:a8:84:96:87:07:66:72:4d:
e9:ec:30:bf:2f:29:4a:b6:4d:03:db:bf:a0:dd:a4:4a:3e:e4:
f9:dc:82:66:e6:f2:07:9b:5d:63:03:0b:e9:ba:1a:50:19:b7:
44:8d:b1:4a:62:64:d6:0b:9b:38:ac:27:5a:99:b4:88:d7:98:
79:dd:f2:b0:9d:c2:5c:b6:98:1f:6c:d7:02:53:53:22:ef:df:
19:9b:7a:c3:81:71:57:e1:98:4f:83:34:58:27:f4:3e:44:cb:
04:4e:73:c5:de:b8:c3:2c:a9:b3:79:3a:d4:ab:6e:c6:bf:17:
1d:3b:00:94:26:1b:71:91:40:e5:cf:b1:4d:df:63:cc:4b:84:
fb:ca:2a:d9:c6:68:5c:cc:77:05:98:d9:02:69:49:e5:6f:fe:
74:f5:02:14:a7:ef:91:3d:69:4d:0c:f5:62:df:47:8b:82:2f:
6e:a1:14:30:b4:08:3f:fe:ba:29:57:ae:da:68:03:a0:d8:41:
94:53:05:95:b5:b4:c8:18:af:23:7d:aa:4f:6e:04:5c:e2:1d:
f3:b2:2f:d8:70:d8:db:6a:59:a0:33:7b:7d:d3:e4:38:78:94:
9f:8c:2d:82:d4:0a:33:78:1e:1c:cf:c0:29:a3:cd:97:97:d9:
b1:75:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:34 2026 by rpki-client