Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: +3P22cA7x3sBXMqUAfEdq3+AXnVRfb3N8ArnRP6Ik0g=
Subject key identifier: 8D:15:E6:14:52:77:7A:51:7C:5C:9F:EB:19:BD:D7:DA:73:6F:B9:62
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 019D992B26772A354F1CF89D359285A33631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 16AA
Signing time: Fri 17 Apr 2026 02:00:35 +0000
Manifest this update: Fri 17 Apr 2026 02:00:35 +0000
Manifest next update: Sat 18 Apr 2026 02:00:35 +0000
Files and hashes: 1: TnQqYCMS5HYPe8dBEH3YlnPzvjc.roa (hash: A1cRotYs392TxWY0uuURFIGpI1Dw1TTRzXx3nGsePZY=)
2: UpvlotTuBAXXLl41-kBjCcqtcCo.roa (hash: YX4uJWFavI5W8loihl3QfahdLqjGtJrmnYd/3mcvAmc=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: evHqE6KuTNIakVQgleh/UHDUpMfzPWVZmyBoA0thhg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:26:77:2a:35:4f:1c:f8:9d:35:92:85:a3:36:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Apr 17 02:00:35 2026 GMT
Not After : Apr 18 02:00:35 2026 GMT
Subject: CN=8d15e61452777a517c5c9feb19bdd7da736fb962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:7c:af:d8:2e:83:69:10:d1:bb:d7:47:4a:
3e:aa:62:d7:81:d1:0a:65:3f:4f:a8:3e:0b:a1:f4:
53:26:ab:e9:7b:c1:9a:e9:79:f1:fe:27:29:10:d6:
32:71:90:f7:40:b8:be:df:51:c1:87:26:38:45:88:
53:78:c4:16:a8:19:25:91:69:94:6c:de:2f:dc:ad:
a5:0d:13:70:6a:2b:cb:1c:e0:3f:fb:79:dc:76:bc:
18:1e:94:b2:9a:f8:fc:02:06:00:9d:e3:ad:10:13:
43:5f:e4:03:c6:2b:30:74:6c:81:1c:62:3b:cb:ba:
97:fe:24:b0:99:c6:dc:b5:aa:57:23:b4:31:a8:7f:
19:b0:16:da:c3:44:64:f9:a5:31:5f:a5:65:35:93:
3b:e8:f8:a7:f8:52:9a:f6:db:40:de:23:10:ee:2d:
2a:76:f5:1e:c1:1e:13:04:8a:c6:d8:db:eb:6a:fd:
c6:7c:f5:f0:06:31:6d:90:ad:84:7c:b0:b0:de:94:
2b:07:8c:f2:18:b2:8a:66:f2:09:df:b5:7e:e4:74:
03:5f:19:ee:0f:57:6f:56:d7:49:4b:17:92:b3:d9:
4f:f5:2a:79:ef:a7:55:39:d5:63:3f:b3:69:72:50:
10:fd:bc:88:3c:96:93:32:8b:88:75:fe:68:8d:bd:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:15:E6:14:52:77:7A:51:7C:5C:9F:EB:19:BD:D7:DA:73:6F:B9:62
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a8:97:aa:da:98:36:18:e8:2f:e5:c2:ab:56:63:58:0d:1e:
2e:14:13:ff:de:3d:69:84:0f:41:65:a6:2e:8b:63:15:2c:9f:
38:a6:f8:49:0a:04:e4:6f:ac:1c:46:4f:6c:cb:5f:1f:cc:2b:
bf:20:27:f9:c6:fb:a5:04:6e:66:7f:37:bb:b3:4c:e0:ab:13:
ea:ea:52:a3:2d:ce:ba:b3:44:df:ec:8d:c9:4d:df:d2:81:a2:
b5:e6:61:cb:c3:99:2d:c8:ec:db:df:0d:75:90:61:3d:5c:10:
1d:b6:94:69:e1:b8:95:5c:ad:c7:5c:e2:b4:2b:df:d7:a8:c8:
c5:89:5d:fc:d3:74:f3:d1:6f:6f:7e:a6:fd:f1:90:d4:ef:49:
75:9d:9f:b6:98:f8:da:bc:46:55:79:29:56:2c:bf:f1:d9:2b:
d2:bf:22:1b:a2:bb:c5:d3:f6:46:d9:f8:6e:40:04:1a:44:6a:
a2:a9:6a:2a:c0:17:b4:a8:04:32:0d:52:02:07:86:29:35:11:
57:fb:c5:7a:54:5b:6a:1c:a9:81:4d:85:9a:38:8e:25:97:4a:
74:d9:20:ee:66:31:65:ab:5b:17:c0:c9:ad:7d:f4:81:d3:68:
a5:a4:58:96:8c:eb:af:37:55:6c:28:92:4e:40:17:eb:5d:a6:
76:82:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:44 2026 by rpki-client