Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: Vw48CrLEsB/0UeUr3fB2/woHfyGAQYqPM0wM8egkK3Q=
Subject key identifier: 5C:75:28:01:9E:EA:D6:A1:D4:CE:0A:EB:7F:DE:03:8D:4B:FC:B9:1E
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019DA3E69229829D5F73316AE0BDA80941D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 13DC
Signing time: Sun 19 Apr 2026 04:01:30 +0000
Manifest this update: Sun 19 Apr 2026 04:01:30 +0000
Manifest next update: Mon 20 Apr 2026 04:01:30 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: 9Dg3kWerxh4O5RlI50EZVWoMBa6lkLG8Lw76N3WFLe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:92:29:82:9d:5f:73:31:6a:e0:bd:a8:09:41:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Apr 19 04:01:30 2026 GMT
Not After : Apr 20 04:01:30 2026 GMT
Subject: CN=5c7528019eead6a1d4ce0aeb7fde038d4bfcb91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:a9:cb:a3:74:51:32:4f:a5:b8:6d:fd:88:
42:b7:43:bd:c3:a8:91:4f:2b:42:ab:46:e3:4f:1a:
c1:06:86:f8:56:ef:97:c7:c8:26:e4:1b:13:a1:b4:
c0:30:c1:de:1f:e8:7a:bb:2c:8d:15:d3:9f:38:6a:
9b:2a:e6:01:13:73:9e:a4:63:16:72:80:7a:f5:a5:
5b:03:bd:f2:3f:88:d0:c7:ed:99:8f:ef:7c:d5:2f:
28:81:c2:c2:dc:41:0c:96:ed:c7:27:ef:6a:72:38:
8f:12:97:1a:fd:f5:34:55:cd:46:b4:27:8d:81:5b:
da:5f:40:62:85:ba:12:1c:8a:ad:9c:59:d2:79:40:
17:16:66:81:45:66:f3:b0:cc:b1:be:b7:35:43:e5:
f9:b0:ab:b9:ee:83:7d:0e:65:cc:e9:92:f3:5e:ba:
7a:9a:a8:d4:8b:98:e4:a3:9c:6a:f0:3e:21:f1:4b:
f6:4c:be:a6:8e:2f:d0:a6:76:73:88:7b:dd:04:39:
6c:26:89:69:22:2c:89:41:5a:b5:d7:21:66:73:51:
ab:6c:51:cd:4c:0b:03:b3:02:47:88:70:49:9b:a5:
63:42:5b:6f:74:bc:60:cf:18:32:05:da:13:82:d9:
67:5a:4c:64:30:b1:b6:9a:06:87:23:0d:e9:f9:eb:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:75:28:01:9E:EA:D6:A1:D4:CE:0A:EB:7F:DE:03:8D:4B:FC:B9:1E
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:40:9a:e9:27:c4:83:1b:db:e1:53:a5:43:12:95:a9:74:27:
0c:fd:a7:00:f0:24:83:67:76:03:13:4e:7e:69:14:92:ea:db:
a3:7e:26:99:70:b2:d6:f1:19:6c:66:d6:38:07:8c:d5:0a:86:
0c:c4:32:36:8e:6e:f4:63:6e:59:0d:20:67:60:2a:65:32:82:
6c:d1:6a:04:3f:94:64:fc:91:ca:98:c7:2b:46:71:66:4d:af:
97:6e:36:4a:d5:9c:2b:28:7f:89:d8:9f:5b:5a:91:47:70:80:
b7:d2:d4:c8:42:d5:f4:0f:d0:58:82:34:f4:0e:5f:ef:37:e1:
6e:99:66:11:26:18:2b:0a:dd:22:9c:2c:a9:39:74:60:4e:a9:
36:5b:0a:6b:fd:0c:cd:fb:83:c7:0c:0f:47:5f:ca:d5:82:dc:
0c:ca:a5:d8:ca:49:df:8e:b6:ec:44:ab:7b:12:e5:a3:c0:3f:
01:19:f0:67:3e:c0:1a:c2:fb:18:d5:66:03:a2:5b:db:93:1c:
b4:60:f1:3f:90:d0:69:55:eb:ae:51:05:20:ed:6d:51:d8:57:
86:0a:05:ef:a7:90:f6:dd:a2:65:a3:70:d2:ea:9a:56:c5:d6:
09:3f:1d:20:a6:31:5b:0e:37:fa:48:47:c6:d9:89:b9:35:13:
9c:8b:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:39:41 2026 by rpki-client