Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: ICKePZlvpANsXcJsHrnRn+5MoA4aNLLJZ5GvcaiYKms=
Subject key identifier: D5:4C:EC:D6:DF:D6:F5:14:92:FE:25:86:E0:36:6C:37:27:46:82:2C
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 019D9CD16D379FDD4BDFA949ADAB3D9C3C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 19:01:03 +0000
Manifest this update: Fri 17 Apr 2026 19:01:03 +0000
Manifest next update: Sat 18 Apr 2026 19:01:03 +0000
Files and hashes: 1: nd2ovDlF_Zmo_XxAGJs-agTwP6k.roa (hash: wKDGlke9HUoxSKsazb91lMdI0w1rZkvOiuN/NBOarjE=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: 30pHLjMKtrIwfsvBRAJEiX5agXdiumK9QqjLxXwe9jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:6d:37:9f:dd:4b:df:a9:49:ad:ab:3d:9c:3c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Apr 17 19:01:03 2026 GMT
Not After : Apr 18 19:01:03 2026 GMT
Subject: CN=d54cecd6dfd6f51492fe2586e0366c372746822c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:71:38:8b:37:2b:4c:a3:9c:3d:25:9e:8f:
54:f2:e8:5f:2f:6f:fb:23:b0:07:ee:f1:da:fc:3d:
7b:77:e3:78:41:a2:c1:3e:3d:fb:b3:a6:f4:af:39:
20:8e:7a:b3:41:3d:01:9e:5a:65:8a:3c:b4:b8:22:
35:ad:ff:75:c1:b8:1a:a1:19:08:36:21:07:a4:d0:
51:7a:63:fa:f5:22:a4:02:a6:ca:18:fd:42:b8:45:
fe:a8:cd:49:e6:85:fb:5f:f4:a7:33:72:9f:07:6b:
aa:6a:e1:f8:ce:54:e6:99:bc:43:b3:6e:5e:60:3b:
12:1b:0f:85:6a:2f:6a:83:64:de:5a:63:ce:a7:dc:
73:7d:32:bd:fe:4a:1a:bd:9d:5d:53:db:48:32:73:
bd:38:ef:a8:6c:38:80:fc:90:39:b6:22:07:06:a2:
1f:09:6c:53:fc:68:c3:91:46:29:37:88:d3:e5:a4:
51:b9:24:93:7b:5b:e4:58:6d:bd:09:87:11:8f:ff:
69:74:51:ed:c9:24:f2:8b:6b:62:a3:30:a3:92:96:
87:9c:d9:62:89:11:83:77:87:59:f0:fa:7c:96:62:
4e:f3:e3:b1:21:6a:cc:6b:db:ac:29:ce:14:83:30:
f4:3c:63:9e:0f:0e:0e:91:e1:bd:46:4f:dc:9b:dc:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4C:EC:D6:DF:D6:F5:14:92:FE:25:86:E0:36:6C:37:27:46:82:2C
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6d:52:6c:49:db:80:b8:bc:9b:31:e7:37:28:b9:c6:13:c5:
56:fe:63:54:a1:81:95:aa:4e:3c:53:50:83:4c:e1:ab:55:16:
9f:fa:ff:d7:13:88:be:6f:66:4c:fc:94:b4:2c:a5:57:f5:42:
45:84:92:23:03:7e:88:5b:41:76:5d:44:16:03:2d:5d:c7:f6:
3f:6d:6f:b9:f9:b9:2e:41:45:7c:c2:b4:90:36:4a:af:3b:e5:
a4:3f:ac:0c:fb:12:24:8b:69:08:f2:b8:28:a9:7f:a3:6f:9a:
b0:22:b5:d5:cd:80:d2:b6:cd:e9:32:b5:ff:32:0c:e3:73:12:
4e:0f:bd:b7:9c:f6:a4:ad:96:a3:15:b7:7c:66:c0:32:da:f8:
7d:f5:eb:be:b1:9d:49:f0:dc:af:8c:b6:99:b3:18:a7:8d:be:
a3:b1:16:d9:7c:41:ef:6c:71:fb:d3:d0:b5:f2:12:6f:10:93:
0d:d5:01:a3:08:cf:48:7a:13:a3:34:31:03:9a:62:3a:ec:f8:
00:ba:11:dc:68:d6:b0:44:e4:86:fb:a6:de:63:33:9c:e4:d8:
50:64:e2:fe:5a:1f:73:e4:57:8b:3c:88:5b:ab:75:65:66:a7:
23:81:6e:6d:08:cd:4e:3a:be:0d:6b:6a:b9:45:89:8b:28:fc:
1a:d0:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:37 2026 by rpki-client