Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: /BGsbfZT+jdHlPFA7UkP/6/2i8tt4msFEHLMzjplYhU=
Subject key identifier: 32:A1:3F:BA:7D:3A:D8:EE:FA:D4:62:98:B3:ED:0E:8E:5B:0C:BF:D3
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 019D9AE388BD37A111129F1DFC1BDEC1ADA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: 0154
Signing time: Fri 17 Apr 2026 10:01:35 +0000
Manifest this update: Fri 17 Apr 2026 10:01:35 +0000
Manifest next update: Sat 18 Apr 2026 10:01:35 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: g5UanzxU9XCwEiKH14d0ssqzJpxW38ULOC3n7o+sz8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:88:bd:37:a1:11:12:9f:1d:fc:1b:de:c1:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Apr 17 10:01:35 2026 GMT
Not After : Apr 18 10:01:35 2026 GMT
Subject: CN=32a13fba7d3ad8eefad46298b3ed0e8e5b0cbfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:3e:bf:02:62:1e:e6:9d:af:97:be:f0:3c:
40:c0:4c:fa:c2:06:0a:80:03:30:1c:ff:2f:ce:25:
c6:ea:49:e3:d0:da:eb:30:c7:45:f9:27:e8:af:92:
db:40:7a:94:fb:72:d3:c2:13:9c:7d:e7:af:6c:8e:
71:cf:18:d7:e2:f1:dc:99:28:a9:1d:7c:a6:ec:df:
40:df:0c:f4:4e:5b:6c:b7:8c:eb:67:4b:f8:bf:3b:
83:05:40:05:db:f6:e9:00:5a:4b:bb:0c:ef:06:8f:
4e:3d:76:f4:30:d7:fa:b8:f5:43:66:ac:3c:ea:b1:
b3:18:94:f2:b7:31:6b:49:6e:ba:87:6d:74:d2:91:
7a:88:3d:4f:78:7e:2f:f5:0e:f6:28:07:41:f3:35:
0d:7d:9f:6e:4c:33:b4:bb:26:1b:f9:e7:ca:7e:28:
ad:46:88:cf:ec:e1:32:da:51:f6:b2:8c:ed:3e:f4:
9b:6b:bc:dd:e5:de:23:36:de:6d:28:5a:ee:83:2a:
e2:19:d0:a1:be:40:9c:d0:d2:b2:3f:ea:4c:22:ca:
59:3f:78:e4:38:dc:00:51:e5:8f:e0:6e:d6:4d:42:
55:5f:cf:a4:0b:89:32:90:9e:5c:d0:f7:e0:f8:08:
ab:d7:c4:cf:7e:23:89:e8:37:14:7d:bb:24:b1:30:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A1:3F:BA:7D:3A:D8:EE:FA:D4:62:98:B3:ED:0E:8E:5B:0C:BF:D3
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a7:ab:cc:2c:d4:c1:e0:25:79:bb:ba:9b:61:26:87:d7:28:
a4:a3:3a:cf:de:dc:4c:12:3f:3f:f2:f9:87:10:9b:0f:dc:f9:
22:a2:c5:28:76:0d:28:cc:8e:08:86:06:f2:d7:8b:ee:c2:d3:
5e:d8:af:ca:cd:02:c1:39:f9:89:d2:22:b7:12:ac:84:d4:c2:
3a:ea:10:ea:39:28:c1:8d:59:73:4b:fc:2f:91:c1:a9:67:91:
a2:25:49:bd:73:1a:5b:fb:83:e1:dd:6e:0a:c4:50:72:bc:65:
71:7f:70:29:d4:17:95:54:4b:49:a5:d8:6c:c6:26:3f:70:57:
2d:4c:b0:d8:0d:f3:f3:2e:5a:8c:ab:2c:d6:3c:de:cd:cc:4c:
33:e5:92:9b:6a:04:20:a6:a7:ce:f4:f6:c9:3d:5c:d4:c3:e8:
37:88:ef:8f:d1:a5:4b:58:2a:fe:61:b2:9d:2b:73:1a:77:b3:
77:13:bc:43:ca:3a:a1:b4:66:52:60:57:44:13:90:30:97:10:
09:20:24:5e:36:74:6f:b9:4d:55:b9:26:30:d6:57:83:51:f7:
ef:b3:76:75:7d:7c:44:d0:51:e1:4a:fd:d1:39:3c:d1:3e:cb:
46:1a:dc:46:90:16:eb:e7:d4:a2:40:ed:67:68:0a:98:d0:cd:
a3:a1:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:46:36 2026 by rpki-client