Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
File: xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json)
Hash identifier: n1e9PmGZbOl2m/GDzxdJojouDshY08rr1Wje2RJkkjk=
Subject key identifier: C6:09:32:ED:43:0C:30:94:D3:51:43:1D:37:E7:81:D9:24:DA:EC:5E
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial: 019D985020D3EF85D98166CB3DEC2D86C845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:01:21 +0000
Manifest this update: Thu 16 Apr 2026 22:01:21 +0000
Manifest next update: Fri 17 Apr 2026 22:01:21 +0000
Files and hashes: 1: ghzuYkE_gnJGPgiMxRgv65RQqec.roa (hash: 1+GlWtDdPLwRz4VbLN8GbkLKLROJEbW43VoOa31HX4g=)
2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: 0Db/SXcc0rjjTIWepAZ1URxXfvalVRuDe2husy62gqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:20:d3:ef:85:d9:81:66:cb:3d:ec:2d:86:c8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c98430885628971307c59b5cf241682102378
Validity
Not Before: Apr 16 22:01:21 2026 GMT
Not After : Apr 17 22:01:21 2026 GMT
Subject: CN=c60932ed430c3094d351431d37e781d924daec5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:5f:7f:3b:7c:d5:34:14:9c:1d:a2:11:ae:
8b:e9:0c:66:5a:c7:85:01:2d:b7:51:ce:46:ec:ba:
ce:2b:5c:87:76:b3:ad:a7:d8:a3:20:83:1c:42:eb:
96:75:3b:18:ab:bd:94:38:b8:12:ef:4e:8b:4b:89:
af:b4:2c:83:f9:91:d1:1c:c4:ec:37:3b:15:d6:62:
b3:8b:07:a2:1b:cd:a8:51:5d:89:8c:50:ca:0d:74:
b7:de:e4:31:84:bd:0d:f3:35:bc:7f:61:d1:61:53:
0d:e2:1a:1e:68:65:2d:6f:9f:eb:25:91:87:e5:52:
27:b0:47:c5:1d:36:3c:63:aa:73:fa:c3:e0:16:34:
0c:39:3e:21:d6:ae:af:fc:29:28:cc:99:79:0f:11:
9d:ab:8d:bb:c2:cc:0b:ec:3d:4e:27:17:f6:76:ca:
5b:a8:28:f7:91:55:c6:3b:e2:3a:10:48:f7:3b:fb:
46:90:5c:9f:91:54:38:a5:bb:05:07:b0:a2:a0:c3:
23:0a:b6:d2:2d:93:f2:80:84:11:b0:c2:b8:c9:47:
59:86:8e:60:4f:0a:cd:cb:4a:22:8e:64:39:03:17:
1d:e4:c2:03:22:21:6a:8a:3f:be:d5:51:61:c5:b3:
78:c0:a2:3a:2a:8e:8c:a9:ea:ae:c4:65:cb:82:5c:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:32:ED:43:0C:30:94:D3:51:43:1D:37:E7:81:D9:24:DA:EC:5E
X509v3 Authority Key Identifier:
keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:11:21:c6:62:37:7f:74:c1:89:a6:d4:a1:b3:53:eb:d4:
96:4d:0f:95:f4:b5:2f:5b:35:d0:57:9e:98:48:12:1c:60:d0:
87:52:54:76:0f:1f:e5:18:6e:43:94:4f:b9:2d:b5:48:05:11:
6d:73:e3:b8:24:bf:51:ef:ce:d8:b6:f9:b3:f2:6e:a7:2f:39:
05:c9:85:43:0d:bd:3c:4f:bb:54:94:fc:23:2d:b8:8c:3e:c3:
f5:ea:87:0f:f0:5b:4c:96:ad:9b:e7:59:1d:78:7f:e9:d7:ea:
92:ff:67:f2:07:47:cc:78:4f:57:89:de:9d:09:1e:5d:91:cc:
82:7b:93:2a:e6:5a:5c:fe:b6:2d:75:77:99:59:27:da:02:27:
8b:d1:fc:80:16:08:e1:db:46:0e:55:f1:2a:0d:83:42:5c:ef:
44:b5:b8:e8:2c:f6:17:bc:5a:1a:2f:74:fc:c0:93:af:84:0d:
fe:b2:5c:e8:72:7f:c8:c2:90:68:6f:ce:a5:11:c7:9e:af:a7:
15:f5:83:ce:3c:2a:25:90:2d:9e:6f:39:a4:fa:47:25:f4:9c:
45:18:8e:68:92:50:a2:78:23:56:06:28:36:4e:cb:9f:93:fe:
85:2e:41:a4:ad:41:79:9b:a1:d1:73:23:5a:1d:57:b9:72:37:
ed:47:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:41 2026 by rpki-client