Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: 1GXXWG8k937sLdnTH8NzNCZp2x2NSCK5poCnFs0wJzI=
Subject key identifier: 16:9F:12:B1:1D:9B:99:F5:D1:6A:13:02:44:AF:4E:8C:D2:4A:BD:00
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 019D9A3EB9275109374AC01D5C079472F467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:35 +0000
Manifest this update: Fri 17 Apr 2026 07:01:35 +0000
Manifest next update: Sat 18 Apr 2026 07:01:35 +0000
Files and hashes: 1: 5AsWyF1f4ujjHWSDojwUCJzIsQo.roa (hash: i1HUG5lw4XQU4xSl9+H4tPoxXwRgahcdEdU4boFga8o=)
2: aTIoEqt3GwezbAZZTmKXYT0O0SQ.roa (hash: K+hfO/BW2nP6cpPF3ceYJcKox+Ctdij1CCqhzl808Eo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: RStDetASZGgR7g+L77HBVPsLDL3zJoYQ6pwkYA9xpx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b9:27:51:09:37:4a:c0:1d:5c:07:94:72:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Apr 17 07:01:35 2026 GMT
Not After : Apr 18 07:01:35 2026 GMT
Subject: CN=169f12b11d9b99f5d16a130244af4e8cd24abd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:bb:3c:81:52:36:57:e9:13:23:38:77:b0:
7a:84:cd:a4:15:88:85:71:a2:05:2c:76:15:5a:ac:
c4:1f:4c:d8:8c:85:24:2a:8d:c7:e0:ea:14:f2:85:
e0:a3:90:af:25:28:0b:00:d1:fc:05:ed:2e:42:5b:
6a:b0:28:e7:55:b2:57:26:ac:a2:16:4f:d2:3d:53:
39:52:87:73:76:26:2c:15:64:3e:86:e4:d9:0a:10:
8a:6a:f5:1a:d0:22:e2:a3:24:bf:47:de:4e:d2:c5:
39:27:82:5b:7f:1b:66:22:f0:70:17:54:18:a0:df:
40:11:5a:61:0d:09:63:14:ce:b7:a1:16:71:50:bb:
1d:aa:b7:4b:b8:c8:81:31:5f:10:89:c5:74:08:f3:
8a:e6:8c:35:a2:b3:9a:eb:87:54:98:bc:58:24:0c:
88:28:57:91:a3:95:5f:df:57:08:b7:56:a9:b0:94:
b6:29:41:84:6d:d6:37:ea:cb:9d:85:9e:c7:d8:da:
68:24:bf:42:de:75:5f:4d:ac:de:77:c7:b6:36:b1:
ea:72:6a:1e:7c:9e:54:ba:65:f7:bc:21:bb:d2:cf:
0d:ab:26:42:bb:d2:2b:b7:6e:f9:7e:92:dc:70:8a:
35:06:8f:97:d0:44:25:88:00:4c:03:d2:b3:99:1f:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:12:B1:1D:9B:99:F5:D1:6A:13:02:44:AF:4E:8C:D2:4A:BD:00
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c5:92:03:70:61:bf:6f:0b:34:1e:de:a7:9d:77:0b:ef:3f:
d3:84:8e:7c:0f:93:b2:4d:92:42:55:66:12:02:58:1e:c2:87:
62:de:dc:3f:55:02:b0:dd:86:3e:d9:38:c0:ab:ff:aa:0c:5a:
cb:6d:9d:d7:88:85:13:68:07:a7:33:02:41:83:8d:6f:e5:54:
a5:bb:12:d1:f2:73:31:92:e1:02:ad:df:ee:f2:06:1c:da:69:
f2:34:a6:58:d0:4f:9d:41:bb:85:9a:db:9b:11:5c:ea:f9:ba:
89:2e:65:bc:cc:08:bd:8c:cf:05:46:ac:8f:c3:ec:70:98:de:
a2:b7:fe:d5:b1:d9:9b:d2:bf:01:b7:29:38:e9:64:e1:90:20:
74:ca:c1:57:13:f5:69:c6:8d:3f:53:78:a3:07:09:a7:1e:84:
eb:a3:2b:b4:a0:f0:b6:97:ee:87:2a:40:a4:be:c4:cb:76:a0:
c8:e6:26:2a:e2:16:c9:ae:d4:4e:78:bf:49:71:07:07:4a:02:
e1:d0:70:4f:d8:ff:ed:1d:dd:14:d4:20:65:7a:fc:8e:4d:a1:
73:e6:76:99:34:f5:74:cc:10:d8:d0:82:33:b2:9f:b4:64:dd:
e7:5c:0f:e8:af:93:d0:14:8f:9b:50:b0:70:13:55:cf:23:77:
5f:d9:f1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:13 2026 by rpki-client