Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: BIg76877M+gqpcyVmqPihE5GYsnGrhWBvaaqQI3vO4o=
Subject key identifier: 89:37:A4:2D:01:CB:FA:7F:5B:5E:11:B3:CD:11:E5:8B:D7:7E:83:BE
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 019DA3787015A7031E8BA1315B6456003ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:12 +0000
Manifest this update: Sun 19 Apr 2026 02:01:12 +0000
Manifest next update: Mon 20 Apr 2026 02:01:12 +0000
Files and hashes: 1: 3gfFN41_-V5KCVj9bLCnPzDA4Sg.roa (hash: feVZbY6ZTCnUm+ks82CSr0rpu6G60t2RiQeNmO5z3TE=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: VKMxU8IdQDwJTDNSn1Llp/ZR9WIA78ywtmenxB9Rp3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:70:15:a7:03:1e:8b:a1:31:5b:64:56:00:3a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Apr 19 02:01:12 2026 GMT
Not After : Apr 20 02:01:12 2026 GMT
Subject: CN=8937a42d01cbfa7f5b5e11b3cd11e58bd77e83be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:53:2d:bd:a8:63:b9:b3:58:6f:26:48:7c:
59:de:31:58:c9:a8:b1:57:5e:92:e6:63:05:ff:7b:
78:65:90:7e:95:f3:0b:6c:e6:89:a1:ad:cf:28:c1:
08:40:c8:11:50:c5:60:14:58:33:0e:47:ec:87:0b:
78:aa:2d:10:29:31:31:d3:15:a4:15:38:e5:a1:4a:
08:c7:4e:cb:ff:03:2b:ae:08:c3:e8:16:19:28:9e:
a7:94:eb:8b:0f:48:23:e4:53:d5:46:eb:ea:3d:b3:
09:67:03:66:4c:ca:53:95:99:80:6b:7c:43:1c:06:
ce:0f:48:50:bc:09:e5:d8:05:bb:32:bc:91:1b:21:
7d:ab:e5:8a:77:f5:d4:2d:8f:cb:e2:4e:d7:5f:69:
7b:07:44:09:21:d0:87:b4:56:2a:a6:1f:b5:13:b1:
e3:f5:c6:af:5e:94:17:91:63:7c:dc:2a:a1:82:a9:
f3:0e:ce:70:f2:43:e8:5a:7a:b5:0c:60:5e:f3:0e:
b4:1f:c2:af:f8:6e:f4:30:31:20:fa:85:d1:7d:61:
0e:ce:24:5f:d3:19:ea:9f:bb:96:c6:9a:6d:42:aa:
13:c9:aa:db:9e:f8:df:9e:c0:27:5d:c0:03:c1:3d:
1a:bc:d1:3a:9e:cc:20:fe:cb:f9:d1:89:79:84:bd:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:37:A4:2D:01:CB:FA:7F:5B:5E:11:B3:CD:11:E5:8B:D7:7E:83:BE
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:45:be:c6:91:3b:83:f8:b5:d1:5e:b7:e2:5b:c7:29:e9:0a:
28:81:92:61:b8:05:ff:99:7d:c1:21:7b:0d:a5:12:7e:02:74:
74:79:67:74:2a:57:47:d0:ee:1d:1b:95:1c:8d:25:4e:85:a3:
90:3d:82:ca:fd:78:09:ff:75:a2:d0:9a:e3:6c:b2:b9:88:4e:
19:0c:3e:c6:c5:00:a8:3f:39:b1:61:3a:49:b8:be:12:8d:33:
6f:23:5b:44:0e:35:66:f0:a2:96:71:b0:92:c1:8d:1c:27:a1:
62:ac:98:b9:33:a4:cb:00:71:f5:d1:fb:fc:67:42:af:b1:b6:
c8:17:85:4b:84:ca:3e:d9:7e:c3:78:a1:db:1f:2c:dc:0d:c7:
db:6a:07:b1:3a:6e:59:c6:76:ce:73:54:c6:a0:c7:05:a5:39:
83:7e:b3:20:55:83:12:fe:11:7e:a3:93:7a:5f:25:8b:e3:ad:
5a:cc:49:ee:c2:11:d7:86:4d:3b:41:da:96:cc:57:e5:5f:7e:
bf:7e:f0:d9:6e:a8:bf:7a:4c:48:b4:ba:0b:75:5c:a8:28:26:
13:3f:db:38:6f:7c:61:06:10:12:f2:2b:a5:f9:8c:20:5b:a4:
ea:c6:28:bf:7f:f4:58:b7:a9:6b:f3:56:9d:f1:2e:c8:37:f2:
28:c4:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:57 2026 by rpki-client