Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: MTQ6ItOQB7vcE171b+CerMOHiS7wD6K7trUVx5RxNJ4=
Subject key identifier: AF:D1:B2:BC:E8:39:13:63:5B:81:97:FE:1B:7A:F3:AC:09:B2:FD:AC
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 019D9AAB96A5A8D95C305892685E00132114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 1605
Signing time: Fri 17 Apr 2026 09:00:29 +0000
Manifest this update: Fri 17 Apr 2026 09:00:29 +0000
Manifest next update: Sat 18 Apr 2026 09:00:29 +0000
Files and hashes: 1: YOiCbjbkGoimIbW3nkdcU24V058.roa (hash: jiSJ+O2fFYcLK2VQfO+2IbVyopzNGD9QLV+WZmnKJXk=)
2: qiIZeyX9IxKh6T92ERJD5iYwHJM.roa (hash: wrTzp4KmTWE2/mdXpqaffqeTXDKkOFMqbZCBTP+Yqzg=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: NFu5vuMGlHilP2AW1vozphx23njqusJ8EsrCRB6MXnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:96:a5:a8:d9:5c:30:58:92:68:5e:00:13:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Apr 17 09:00:29 2026 GMT
Not After : Apr 18 09:00:29 2026 GMT
Subject: CN=afd1b2bce83913635b8197fe1b7af3ac09b2fdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:55:04:eb:2f:0d:21:75:eb:81:a5:7a:b0:
44:be:2c:85:a1:8d:17:c1:6f:f4:d7:ef:6b:35:f4:
8d:f1:f2:60:0e:9a:72:2a:d0:53:ad:8c:36:ac:c8:
dc:d9:c0:c7:c7:31:fb:de:3f:04:d5:0c:26:d8:6c:
8c:32:96:da:ae:99:77:4c:31:bf:73:f5:cc:23:7d:
23:ee:d2:a1:69:a2:17:7c:e4:f8:0a:9f:97:5a:90:
f9:e7:7d:80:42:ad:87:61:12:b0:7e:a1:6d:71:e5:
60:d3:7b:32:4f:e5:6b:56:25:13:35:81:7d:09:e4:
78:55:3b:95:b2:8c:e2:d0:c1:d1:67:6f:24:82:8b:
a7:71:5e:bd:4f:0c:34:55:3f:75:e9:0a:fe:9a:a9:
e3:82:59:19:88:33:b1:b1:04:0b:7c:53:4b:97:d7:
aa:16:4c:1b:a7:15:59:2c:f3:ed:a9:02:4e:6e:b9:
7b:5a:6f:ff:8a:5d:d3:ad:65:43:d0:9a:74:e8:80:
8c:2f:d9:f1:c8:09:c8:58:b2:ff:a8:34:53:41:06:
79:03:50:07:e1:a2:00:cb:53:ed:30:50:a9:c6:4c:
f1:55:88:57:d4:24:cb:eb:09:3d:a4:be:be:6c:33:
66:ac:18:f1:6a:a6:9e:b7:55:e7:d1:3e:c8:87:7d:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D1:B2:BC:E8:39:13:63:5B:81:97:FE:1B:7A:F3:AC:09:B2:FD:AC
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0a:02:f8:20:0c:81:f3:40:52:92:56:4f:21:14:b5:a9:d1:
82:27:d3:76:1c:e1:a0:c2:68:b4:a9:e5:bc:1d:ba:aa:13:6f:
d7:00:61:e3:81:d5:02:5c:77:c7:6f:d0:43:b0:74:3c:28:50:
b1:6e:84:7f:04:f2:e6:4e:90:4d:c1:05:fc:02:5c:31:b7:4d:
76:80:dd:dd:ad:36:bd:f8:43:de:e2:38:bd:cf:db:18:e0:37:
50:c8:a7:2d:c4:4b:fc:64:de:67:42:21:44:85:16:6c:84:ff:
7e:db:a3:2c:ae:58:83:4d:de:34:d9:a9:b6:e7:33:bd:e4:98:
9a:f3:c6:ea:d6:a8:c5:b5:ee:a3:10:2f:b6:25:c1:09:cf:61:
67:90:c9:3b:c8:5b:93:55:6e:3f:ec:a4:18:3d:35:0c:e6:27:
5f:3e:57:db:18:23:40:82:5b:6d:c7:b9:9e:f6:d5:45:4a:1e:
c7:89:a1:96:6b:96:03:c3:65:da:ff:07:78:86:ac:15:aa:8e:
76:ff:a0:08:b9:a3:4e:26:05:8f:e7:89:22:b6:c2:06:5e:4d:
7c:13:21:e9:a0:97:c7:89:c3:7a:27:29:8e:5b:54:27:c7:6d:
63:55:a4:17:60:f5:82:12:ad:54:18:24:91:9f:07:a8:6f:b3:
24:76:31:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:07 2026 by rpki-client