Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: 9TWVJFswNP4sEUWbSiDYMwXyI8K1Gf3ivFe6jD2yfVI=
Subject key identifier: 21:4C:90:A3:83:9C:79:1B:ED:9A:71:C0:65:E7:ED:60:F4:33:9F:D7
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019D9AE3A7DC2547BD68DDAEBCE8849FB97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0E25
Signing time: Fri 17 Apr 2026 10:01:43 +0000
Manifest this update: Fri 17 Apr 2026 10:01:43 +0000
Manifest next update: Sat 18 Apr 2026 10:01:43 +0000
Files and hashes: 1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: GeTTA935IQhZ48ykVK4XB00JWxAQBb8T+8jW0s0tV+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:a7:dc:25:47:bd:68:dd:ae:bc:e8:84:9f:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Apr 17 10:01:43 2026 GMT
Not After : Apr 18 10:01:43 2026 GMT
Subject: CN=214c90a3839c791bed9a71c065e7ed60f4339fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:2d:13:07:33:5b:b3:6b:69:89:f6:0e:7d:
cc:c9:ef:a4:fd:eb:77:6d:a0:d2:52:94:ff:74:9a:
11:7a:20:aa:a8:09:0e:33:a8:18:15:ea:d2:77:9d:
f3:54:11:a2:1d:8c:ea:50:50:da:f9:70:31:00:a7:
a5:66:bc:0f:fa:96:ba:21:10:93:2f:8a:17:04:b1:
3d:8e:e0:29:11:6c:40:30:99:8f:6a:d3:d1:d7:21:
4c:d2:0d:32:f0:96:bb:14:dc:33:7a:a2:cb:6b:07:
40:6e:4c:8a:9e:0c:6f:ed:51:68:1d:97:25:8d:36:
0b:ab:b4:1d:23:de:5f:82:b2:dc:2c:08:01:b9:82:
65:1b:db:8e:a6:f8:c9:da:94:d3:fc:25:fa:35:d5:
ec:db:d8:1b:b2:7f:c8:b5:fb:71:df:85:e4:21:04:
37:46:76:95:98:ae:9d:af:0c:ba:c6:8f:e8:2b:f7:
3a:4e:bb:96:11:e5:db:6a:06:40:f9:22:ea:5f:54:
71:a1:9a:f3:d6:1c:17:6e:6b:05:dd:78:33:ac:f9:
e3:71:26:f0:88:06:41:c8:ea:79:12:f2:50:52:dc:
4b:f3:96:c2:22:58:d9:b7:2f:ac:ad:9a:03:e7:85:
a6:e3:cf:10:e8:1a:e0:9f:7d:f0:4f:7f:ee:a9:98:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:90:A3:83:9C:79:1B:ED:9A:71:C0:65:E7:ED:60:F4:33:9F:D7
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a5:3f:15:18:d9:c5:31:f8:4c:15:ba:88:e2:d7:b6:5a:66:
0a:7b:33:2e:71:c1:fc:8a:31:28:ef:72:43:0f:52:b3:37:cc:
c5:99:7c:c2:94:f8:2c:6d:19:89:8e:6e:3f:d4:fc:c2:c9:3e:
e7:86:a6:79:83:08:e9:f6:4a:df:d8:f9:c4:73:56:0f:d9:68:
ac:c4:56:4e:0a:7f:91:3e:26:6c:ba:e7:f3:de:50:71:22:d8:
e3:49:66:0b:0e:d2:56:a1:9b:11:4a:d2:a4:10:b3:59:74:95:
70:18:b1:91:46:9e:d9:31:ae:4a:2e:7a:5d:58:81:46:16:0e:
fd:da:53:e2:7d:77:7d:cb:2b:77:84:c7:4f:e5:1b:59:87:fd:
ff:30:ff:82:8f:06:63:23:8f:4a:7d:95:63:a4:b7:c1:c2:0e:
36:11:53:61:0e:e8:26:e5:fb:ff:7f:e1:d3:be:74:e8:4e:d5:
f3:d3:4a:cc:ad:5c:53:71:3f:76:30:02:db:a5:be:ef:32:a0:
60:2b:6c:e4:02:95:09:36:06:e2:a1:d1:43:ed:de:7d:23:e8:
9f:73:b1:d6:48:6f:45:96:be:a3:d8:68:8b:6f:17:91:f0:28:
a3:ee:09:a6:bb:c4:ca:4a:5e:31:2b:84:48:d1:28:00:47:1c:
eb:b0:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:54 2026 by rpki-client