Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: vxu056cwhX3AxzjnMeID+70nNF1wUdLJ2fwGAUWE+GA=
Subject key identifier: 8D:CE:8E:EB:35:82:C6:5B:84:B7:0A:9D:15:57:5B:90:93:0E:35:D9
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019D9A073A6D296B28D7DC02675C3EBEE5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:58 +0000
Manifest this update: Fri 17 Apr 2026 06:00:58 +0000
Manifest next update: Sat 18 Apr 2026 06:00:58 +0000
Files and hashes: 1: AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa (hash: TjTKp2DaLx4thRMtFk13G01LVFaqUeVARGlNcCmXfhM=)
2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: pLd3GQLCiKPOhmfwKa5w1DuDakUPxWWTHryidjRwCLQ=)
3: NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa (hash: alZ0M56XHk3ZVrQNYJTxZZ2onR/AK2JyEOwbu/Z8qYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:3a:6d:29:6b:28:d7:dc:02:67:5c:3e:be:e5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Apr 17 06:00:58 2026 GMT
Not After : Apr 18 06:00:58 2026 GMT
Subject: CN=8dce8eeb3582c65b84b70a9d15575b90930e35d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:d7:65:7e:cb:f2:ef:53:83:7a:7f:45:96:
61:16:41:30:cc:1c:b0:0b:a0:84:0d:a2:68:0c:af:
4f:81:45:e6:a9:c7:83:1d:b9:6a:4a:6a:98:de:78:
b8:87:d0:e1:b1:73:d9:56:25:00:52:4c:65:f9:0b:
73:bd:c0:ca:03:5c:09:ce:c2:95:57:a4:9b:38:54:
1a:b4:63:24:03:ae:0b:36:09:ef:ec:c3:0f:d8:6a:
6f:e6:00:9c:79:5b:ff:cc:2a:33:a6:f2:4d:f7:a8:
e6:11:21:5f:c6:79:f5:c1:8c:98:74:fb:56:7d:c3:
b9:fc:41:f8:ab:ea:34:00:63:a7:09:bb:9e:1a:73:
0a:b4:a6:73:93:2d:19:77:c7:a9:9b:7b:45:30:0c:
61:ae:11:e6:6e:a5:2d:20:0d:8a:e6:00:bc:dc:e4:
66:de:58:60:aa:58:03:20:cc:33:bb:a7:65:1b:40:
10:d6:44:5a:a4:24:db:5e:c7:94:71:8b:6f:c7:ce:
e9:d0:9d:87:66:30:a4:4f:f2:e4:01:31:82:43:47:
13:4a:fa:cf:ac:68:40:51:15:81:12:79:62:77:9a:
55:13:d6:99:bf:b7:a8:9b:e9:0e:06:c1:5c:34:3c:
85:14:d2:f0:2a:20:01:ba:7c:af:30:1c:c2:6a:e2:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CE:8E:EB:35:82:C6:5B:84:B7:0A:9D:15:57:5B:90:93:0E:35:D9
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:63:6b:90:61:4f:6c:7c:8d:3c:49:1b:10:d1:50:04:86:9e:
89:db:58:c3:6a:e2:05:0c:53:04:7f:45:87:09:32:9b:e9:ab:
83:52:f9:7f:8f:b5:ba:90:cf:9f:05:70:a8:17:e5:74:e3:61:
2e:95:c4:cc:73:86:44:14:9c:4c:a3:d5:55:05:8b:81:00:77:
6e:0c:88:a0:42:20:46:1b:75:c2:2a:bf:07:e4:45:8e:31:24:
35:4e:fc:c0:82:1d:cc:15:8b:be:89:20:e8:00:31:ab:30:e1:
52:88:2f:94:7d:a9:39:aa:ec:cf:f4:68:5f:2a:d5:ec:d4:7e:
f6:b0:af:c7:52:e7:b5:e5:7b:1f:f9:d7:a5:da:31:6c:5e:33:
93:8b:47:a5:60:7f:0d:6e:9d:95:24:ac:9d:62:ce:61:7b:81:
c2:91:0a:c6:70:07:42:b7:35:75:55:7a:7e:a4:3b:83:f7:29:
a5:a0:b2:d2:51:5a:a3:fe:56:5b:89:ce:2b:e1:66:02:5d:9a:
e9:1a:b7:6f:60:c1:ba:0e:06:ef:36:cf:e0:9a:70:1e:66:08:
1b:9f:83:e3:bb:b4:29:15:8c:62:8e:4d:83:3b:1d:e9:9a:03:
b4:60:23:7e:04:12:c4:cd:e7:eb:51:95:95:96:70:bb:20:a1:
af:70:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:16 2026 by rpki-client