Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: Ye24YR19VCjDOesAccNp4d8NVo3oOaapyHeQPmjNEf8=
Subject key identifier: 9C:1F:C1:BE:0D:D5:40:CE:86:FF:F0:89:F9:D6:D8:6B:A0:65:B6:A8
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019D9AAC2C5E802C32C56A735A70DE51AF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 09:01:07 +0000
Manifest this update: Fri 17 Apr 2026 09:01:07 +0000
Manifest next update: Sat 18 Apr 2026 09:01:07 +0000
Files and hashes: 1: EbX7N4kHuDXm0ug317aboa-Elyk.roa (hash: T2hYz7BsiNZAW/oKFsyjXx5vn7Ad21wTFDpKdq1SP6Q=)
2: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: du1JtKbeZ/+GZvrG0NmBxSQ+JxI8frGN8l9wxzDIwS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2c:5e:80:2c:32:c5:6a:73:5a:70:de:51:af:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Apr 17 09:01:07 2026 GMT
Not After : Apr 18 09:01:07 2026 GMT
Subject: CN=9c1fc1be0dd540ce86fff089f9d6d86ba065b6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:82:00:53:55:cf:bf:24:56:b7:2d:9b:b6:ea:
77:04:e0:b3:11:d9:cd:29:d1:95:a6:51:4f:25:e4:
64:59:6d:6c:64:da:98:e6:12:e5:49:d0:d1:50:ef:
25:10:26:62:ea:6a:84:b3:ed:2f:49:04:59:ad:8f:
f7:08:7a:00:c6:37:f4:07:73:56:21:c6:ff:35:ed:
62:eb:0e:90:d2:c5:c3:ce:27:f2:be:43:87:42:66:
42:ad:0f:47:56:c2:a6:3d:bf:a2:f4:b7:a7:c7:c0:
00:68:ed:00:a2:73:3e:63:6e:7f:d4:ad:8b:e3:dd:
89:59:45:5d:27:17:6d:5a:5e:c0:8e:61:fb:83:86:
bb:d5:0c:47:1a:97:d1:2c:1a:f8:43:5b:0a:74:51:
a0:30:f9:46:7e:cc:11:fc:3e:ab:06:34:62:e7:2f:
ce:c5:41:08:6f:50:46:9e:37:46:f7:0c:54:8c:a8:
5f:d3:d5:5c:88:7e:98:34:49:5b:92:7d:e4:3e:db:
1a:05:07:d0:19:69:3f:c3:41:bd:86:4d:fc:48:81:
8d:17:3d:25:fa:5d:26:2c:cf:b4:35:8d:bf:f1:cf:
2a:e5:df:d8:fe:2a:68:4c:eb:72:2d:ff:b3:cd:46:
a6:2e:95:15:1e:50:67:a9:06:5d:f6:d4:4c:d4:39:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:C1:BE:0D:D5:40:CE:86:FF:F0:89:F9:D6:D8:6B:A0:65:B6:A8
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bb:5f:8a:51:e4:7b:e5:80:a7:8f:4b:2e:0e:23:9e:c3:4f:
9f:3c:94:3a:07:49:ef:54:fd:07:74:ea:1d:a8:d6:76:5a:00:
d7:1f:20:1b:71:9e:6a:f7:ca:77:49:00:e1:70:52:9f:6c:2d:
04:15:c8:92:b3:68:b1:d0:ab:b1:c1:7c:78:3e:47:a2:74:48:
2d:f3:88:02:7f:25:d1:e9:42:68:8b:a4:c8:d8:b9:8e:ae:16:
65:33:91:3e:af:a2:1b:39:ba:3e:9e:45:df:53:3f:5b:d5:d9:
9f:fd:20:6b:2a:e7:dc:ca:bd:f0:62:40:ad:a5:1f:06:03:ea:
d6:dc:c9:98:ba:65:b3:e3:4b:e6:56:c4:6b:4e:8a:1f:1b:07:
93:30:2b:98:0c:dd:52:e2:be:75:24:f7:7c:52:81:9e:ab:75:
01:54:00:c3:12:fc:d6:e4:76:a6:f4:9f:3e:0b:d8:28:7f:6d:
8f:02:f9:8d:60:46:cc:84:0f:ec:3a:cb:22:41:64:df:40:c9:
38:5b:fe:58:f0:f6:52:ce:82:e6:bd:5b:00:3b:ab:92:0d:ba:
94:e7:3a:2c:9e:37:f0:ea:64:35:90:ae:66:70:57:2a:1a:54:
85:c4:19:9a:cc:82:f2:01:cd:9a:da:61:db:98:f8:d9:0d:51:
a8:6b:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:55 2026 by rpki-client