Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: gNe4HPvgmvCgCOWHGDnlQP0tX9xfbLzS4xga0DPYxEI=
Subject key identifier: 11:FD:79:BE:0A:89:01:97:F7:4C:3D:5D:AE:C3:04:61:4E:35:A7:22
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019D9A06F675B1DFE732312611C231CFC61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 06:00:40 +0000
Manifest this update: Fri 17 Apr 2026 06:00:40 +0000
Manifest next update: Sat 18 Apr 2026 06:00:40 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: 8gwFDIBK/UYukU7qmWSa1TJA7HNq2LJNvYTRP3hRjb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f6:75:b1:df:e7:32:31:26:11:c2:31:cf:c6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Apr 17 06:00:40 2026 GMT
Not After : Apr 18 06:00:40 2026 GMT
Subject: CN=11fd79be0a890197f74c3d5daec304614e35a722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:d5:b9:a5:d3:3c:9d:65:b6:65:46:61:87:
4e:ec:ff:df:e4:5c:f6:23:78:0d:8f:5f:76:27:36:
b3:e8:98:2b:cc:38:7a:9d:54:dd:f7:81:8b:1b:44:
af:0d:db:d8:e7:0e:d5:9b:d0:26:21:40:64:af:7a:
fd:dd:3a:d3:44:a8:86:66:9e:69:67:78:ea:ed:49:
df:be:61:b2:ab:c3:2f:35:20:7b:0d:63:3b:40:10:
df:4c:75:21:68:74:28:a9:8d:3b:60:12:a7:be:76:
00:cb:b2:66:32:de:06:ab:ed:5c:1e:95:6f:2c:39:
0f:51:7a:ec:12:78:5e:a0:1a:3f:27:b6:4b:b2:6a:
32:7a:7d:12:a2:f2:c4:5c:4f:e5:7c:ad:69:69:2b:
25:dc:db:d1:c9:39:8f:8d:87:9c:7d:ba:22:67:56:
58:b5:86:6e:88:39:8f:17:1e:8f:84:19:9b:7b:d3:
b7:20:67:f5:ea:f9:72:b2:3f:07:e9:1c:64:6f:01:
ef:2b:d2:54:29:24:ef:4d:2d:e3:0a:40:2f:34:d1:
a3:d3:1d:a9:45:c5:77:ed:7a:78:ae:5e:15:27:0d:
97:58:7f:31:76:3b:5a:32:58:b5:fd:f0:f8:ae:cd:
94:af:18:ee:14:59:18:ac:21:f4:e4:03:11:29:3a:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:79:BE:0A:89:01:97:F7:4C:3D:5D:AE:C3:04:61:4E:35:A7:22
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8e:db:1e:f8:d2:08:9c:d4:3e:66:82:a3:e3:fd:d7:72:48:
d2:31:2a:f0:f8:bd:ec:c9:ce:ee:a9:8b:62:f0:9b:15:8f:e2:
1c:ea:d9:be:72:ed:ca:a5:50:5e:1d:05:81:50:aa:13:28:73:
aa:f9:0a:a1:7f:e5:4c:5b:98:77:ef:cd:8b:0f:43:d7:b1:03:
2a:09:fd:61:2b:33:31:60:a1:99:72:23:90:7a:4b:d5:1f:b9:
20:fd:fd:49:3a:ee:84:13:05:81:28:75:be:87:9a:f0:59:fe:
af:8c:be:34:2c:58:82:33:26:91:7c:70:0a:16:70:6f:ad:92:
22:97:8b:e2:01:cb:fe:42:55:9b:30:9d:df:64:35:96:32:ac:
a3:f1:67:11:46:7a:23:f9:18:22:1b:32:18:40:5f:be:c0:1b:
11:1e:32:47:d3:18:80:3f:36:b8:d1:cc:da:13:fa:c4:71:00:
51:a6:97:10:d3:9a:0c:d7:8e:cd:b7:f0:1d:fe:2f:16:a5:e5:
ca:ec:89:8c:cd:a1:e7:cd:39:4d:02:ef:39:c2:2f:78:29:44:
8d:86:32:2f:25:67:ed:e3:48:1f:c7:80:30:bc:50:dd:b5:2f:
0f:af:3b:c1:1f:8f:f9:e1:17:a6:d8:f8:11:e5:5a:dd:72:a4:
1c:87:01:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:10 2026 by rpki-client