Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: X/6z4R+v4tgfTqis7oEOVHAdwClr+dErWbtWQ55c9vg=
Subject key identifier: 03:47:B7:51:A0:98:0A:41:50:C2:7E:6A:AB:53:18:ED:87:84:FC:90
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 019D97AA875780CA40AF84C8DBA9478D7890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 088E
Signing time: Thu 16 Apr 2026 19:00:28 +0000
Manifest this update: Thu 16 Apr 2026 19:00:28 +0000
Manifest next update: Fri 17 Apr 2026 19:00:28 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (hash: +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=)
3: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: 9mhbMGGEFOjGeJHk07pf1Q2GJ605KzQRHDBtSQ84Cs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:87:57:80:ca:40:af:84:c8:db:a9:47:8d:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Apr 16 19:00:28 2026 GMT
Not After : Apr 17 19:00:28 2026 GMT
Subject: CN=0347b751a0980a4150c27e6aab5318ed8784fc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:df:ff:ac:da:a3:d0:e8:c6:74:88:23:97:
48:d2:1b:38:b1:85:05:95:aa:b3:25:bc:49:40:a5:
ad:86:ee:32:96:49:94:19:d4:26:24:ac:90:fe:df:
14:93:4b:42:63:b0:6d:33:a7:e0:13:ae:44:72:79:
30:e8:cf:84:43:de:99:8f:2f:5b:f6:05:55:a2:dc:
28:2a:e0:36:af:89:07:7f:f7:4d:4a:4c:d9:e7:79:
64:19:d2:3b:38:6d:6a:b5:d8:47:8d:4f:3a:7a:60:
c9:57:6b:fe:58:5d:16:0e:ab:3f:dd:9f:05:34:bd:
1d:74:4e:ca:dc:08:0e:f0:33:6a:4c:89:7f:ec:19:
22:e6:5b:fb:9f:db:0b:ff:18:c9:3e:39:1d:dd:b8:
af:41:79:a1:b9:75:0f:4d:c1:30:dc:ca:a8:1b:84:
5e:8d:35:cd:b4:ef:8b:de:33:aa:81:36:20:7b:0b:
5d:e3:1c:82:d5:9a:da:19:da:21:04:c6:5a:9f:1c:
3f:35:20:53:76:92:39:8e:08:0a:70:1b:6a:c7:35:
5d:ea:bd:0d:96:dd:8c:c9:79:83:d5:e2:65:10:da:
a6:1d:16:76:20:a9:7b:76:18:7c:46:f3:55:bd:8f:
69:ad:ef:33:6f:f9:6f:87:74:d1:95:ee:19:42:bf:
ea:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:B7:51:A0:98:0A:41:50:C2:7E:6A:AB:53:18:ED:87:84:FC:90
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:65:40:4a:d5:f1:ca:05:f0:74:80:06:49:c7:32:38:c3:
ef:b7:11:d5:94:34:93:44:f0:9d:53:d6:f3:c8:09:78:16:4c:
34:b2:5d:4d:91:9c:c1:c1:57:df:42:50:24:27:ab:21:36:b3:
b3:89:3b:25:a0:e0:72:ec:6d:1b:cc:ef:64:41:4c:b8:3c:ce:
86:01:5a:22:6d:b9:5b:6e:89:d2:3f:1d:1b:e6:13:12:3f:51:
ec:8b:e8:65:52:95:86:71:1c:97:e3:b8:20:24:6a:25:6a:0b:
f3:62:46:9f:d9:7e:9e:88:90:a6:f5:3d:8c:54:0c:93:88:e1:
46:4d:75:a6:65:66:7b:03:87:fe:f3:b4:62:37:2c:b1:50:81:
fb:db:1f:b3:70:cc:d0:50:40:cc:ea:fb:3b:99:26:a0:b0:df:
1a:a5:ab:03:ef:2d:93:05:11:87:d4:78:2d:4d:0f:25:ce:ee:
a3:64:ca:d6:00:d6:17:90:4d:fa:a9:4f:b1:45:88:b1:fb:63:
5d:9a:3e:74:61:90:a6:6d:9d:c8:1c:79:b7:69:c1:c6:9a:d2:
7d:bc:41:a9:3c:25:de:86:88:9f:80:4f:4c:17:3f:12:65:f1:
75:ce:f5:64:39:a7:51:f6:ac:d2:9b:4e:9f:59:5b:59:99:39:
31:8d:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:17 2026 by rpki-client