Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: CIWX0YMeLdM7cQxACF/8VXBaXLlDe59xrWKKmOB5Qrw=
Subject key identifier: 48:F4:9E:1E:8A:AB:C8:E6:0F:1F:07:B1:3E:E8:A9:30:2C:C2:59:5E
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019D9AAB733D7B8B8A23971725A89377A127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0E03
Signing time: Fri 17 Apr 2026 09:00:20 +0000
Manifest this update: Fri 17 Apr 2026 09:00:20 +0000
Manifest next update: Sat 18 Apr 2026 09:00:20 +0000
Files and hashes: 1: LTb5vPloqkbClBKB9zASxlBnfTI.roa (hash: UXcXLrrBaIHA3rxo2Vg1OLmswtJ0WJsGAG20BgieLSw=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: wmVc9W4wN+0bwhiTewZnOtylpw1jCJaQHJ1e5Vi/774=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:73:3d:7b:8b:8a:23:97:17:25:a8:93:77:a1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Apr 17 09:00:20 2026 GMT
Not After : Apr 18 09:00:20 2026 GMT
Subject: CN=48f49e1e8aabc8e60f1f07b13ee8a9302cc2595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:ee:15:16:ca:5d:67:9a:98:e0:00:79:7a:
be:73:63:c9:ea:dd:93:7b:87:ba:18:36:98:c0:9d:
3b:84:5f:c1:da:08:75:fe:de:6f:45:eb:20:fd:5b:
7a:5a:85:8e:5c:9b:ef:2b:11:dd:b5:c3:a8:82:45:
c1:ee:11:54:03:03:d5:b2:f1:c1:ef:97:44:1f:5e:
ec:aa:c8:74:43:2e:68:d7:a0:d2:a8:6d:98:aa:6e:
7f:7c:a2:ba:87:ec:32:b3:45:52:20:92:bc:fd:40:
b4:99:41:d8:c1:95:c4:1e:3d:8a:c0:8b:50:a3:39:
98:27:4f:89:46:96:a8:92:f0:48:e8:2e:7b:31:53:
b4:ca:70:56:44:67:e1:a6:29:82:b3:e2:15:bb:fa:
2f:3a:2e:ae:27:12:5b:b2:81:fc:ab:92:11:3b:7c:
22:dc:83:eb:0b:4d:af:41:54:df:15:7e:69:93:de:
e6:7a:d8:62:2d:60:a7:35:42:83:51:6f:fb:36:1c:
96:4b:1b:80:71:61:0c:66:91:91:7d:90:b3:82:62:
aa:83:c4:6f:a2:0d:f4:00:41:52:3d:12:49:28:e1:
a7:de:16:82:b9:dd:f1:7d:95:f6:ef:1d:7e:40:76:
3c:b8:b0:51:96:8e:e6:3a:66:85:68:40:f0:56:6b:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:9E:1E:8A:AB:C8:E6:0F:1F:07:B1:3E:E8:A9:30:2C:C2:59:5E
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2a:c9:34:05:f0:c0:8a:73:a8:47:c3:67:ac:ac:cb:70:04:
25:df:16:a8:27:14:1e:d1:84:c0:9e:a3:0d:c7:a6:58:e5:f2:
77:dd:2d:69:14:e9:0b:15:1c:a8:c0:0b:4d:c6:36:5e:76:cd:
28:92:ef:68:32:7f:c6:84:55:ea:24:74:53:94:9c:57:46:3b:
68:8a:7d:0e:8d:02:f9:7b:3e:9e:c2:b5:c4:c4:5a:d1:08:8a:
a7:30:c7:3e:dc:e6:fa:7c:cb:38:15:85:03:5d:90:fb:e7:1b:
b6:c5:d1:13:13:f3:c7:5f:6c:9e:6d:63:57:a4:85:e1:65:21:
8a:f7:76:6b:16:20:b7:45:3a:27:1a:12:6f:db:4a:a1:e7:64:
7c:66:73:84:d5:9c:51:0c:e1:5b:2b:11:e6:8e:2c:a9:0a:86:
b5:59:2e:82:a0:83:6a:dd:d2:e3:59:89:da:e3:06:01:81:f3:
74:3d:77:c8:48:fd:b7:31:35:8b:08:b9:8f:d1:cd:e0:2d:46:
43:49:14:0c:47:4d:c3:44:68:98:e7:e3:31:60:ac:51:da:67:
d4:d8:d7:92:83:3e:58:9d:9f:7e:db:5a:0f:9b:c2:cb:41:be:
65:2a:c2:31:c4:dc:27:c8:a9:74:4a:2b:a2:1c:ee:4a:9e:2e:
69:3d:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:18 2026 by rpki-client