Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: z80hpaOoPRCxpBSmrucCJ5OhB0YHCkCIWN1DSu2AsPg=
Subject key identifier: EE:EF:B1:A6:27:26:E8:42:CF:9A:5C:C6:5A:27:F8:DE:03:D0:04:56
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019DA3E64E3391CCCB2DF95BA4525780CEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 17F9
Signing time: Sun 19 Apr 2026 04:01:12 +0000
Manifest this update: Sun 19 Apr 2026 04:01:12 +0000
Manifest next update: Mon 20 Apr 2026 04:01:12 +0000
Files and hashes: 1: pN_P1IlTK7N9Tsyo-7qDne3seo8.roa (hash: 4JuBbaWoHsvx0AsZc9fY1wPJc+hsLORDmTae2tdrxYs=)
2: vCRnh4F_lljPYv3DYF0shQI8Bbo.roa (hash: qW582UkFyFw7De0dFAxA/OIbguYJh97E6vsR4Z29UJE=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: z+v3+uW7k8hRDEH5MkrrPZls+hGexor4jYUiqZzR9aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:4e:33:91:cc:cb:2d:f9:5b:a4:52:57:80:ce:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Apr 19 04:01:12 2026 GMT
Not After : Apr 20 04:01:12 2026 GMT
Subject: CN=eeefb1a62726e842cf9a5cc65a27f8de03d00456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:39:6f:bf:8d:33:74:9a:2d:6c:72:ed:0f:
4e:02:1f:88:34:40:c3:73:d6:d6:fe:58:dc:b2:a1:
32:5d:e6:8b:f1:3c:cb:98:95:41:5d:ff:99:34:af:
46:49:6a:33:cc:ed:bb:61:cb:01:f7:0d:6e:bf:d9:
6f:2e:57:d7:d9:0c:79:90:ee:ac:4a:19:f2:49:1b:
81:f0:08:a7:a4:ff:c6:34:66:0b:06:30:24:61:3f:
06:38:f8:12:bf:d9:dd:12:82:88:df:12:ad:c6:7a:
2c:fe:32:b2:d4:24:eb:b7:8f:82:44:35:65:2b:57:
4c:01:0d:ec:8f:96:51:68:9d:a2:d6:56:25:13:40:
79:a0:0d:cc:1d:be:d2:34:5e:a4:fc:46:ff:6c:27:
18:e1:5f:b1:fa:b4:09:c4:6e:59:76:f7:fa:10:a8:
e9:71:a1:7f:34:be:c8:50:1e:72:f6:ae:5b:f6:72:
5a:da:3f:fa:7d:45:66:61:43:1d:a6:17:3b:bd:df:
90:9a:e3:4c:3f:36:91:be:44:64:59:5c:c9:21:95:
ca:49:15:6e:9c:0d:1b:84:d7:5c:6f:b6:8c:cd:5a:
92:58:96:20:4e:41:07:e7:2f:fb:be:79:1f:26:84:
12:f0:03:72:22:c2:c2:42:6b:06:f6:80:9d:73:46:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:B1:A6:27:26:E8:42:CF:9A:5C:C6:5A:27:F8:DE:03:D0:04:56
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:de:34:00:cd:f3:c0:ac:3f:eb:c2:3f:f1:4e:d2:be:4d:06:
60:7c:26:c7:37:fd:11:0f:2f:9d:0b:96:c5:7e:eb:c1:8f:ed:
2c:39:c2:9d:98:41:28:dc:68:cc:1a:f7:ea:1f:b4:9d:1e:f2:
42:cf:ea:93:36:f2:09:08:30:e8:fe:44:4b:dc:15:09:a2:60:
56:20:2d:ed:c5:61:2c:b1:fa:51:a2:9f:f6:a2:e3:5a:86:46:
8d:16:e0:fe:17:dd:28:a2:8d:08:fd:cf:af:e5:06:3d:a1:42:
dc:f3:31:19:ad:79:fa:f2:6e:1c:01:81:3f:bd:8f:69:3e:68:
1c:7e:a5:92:5f:92:39:4c:72:51:00:ca:5c:7d:d7:c5:fa:ea:
2b:32:75:d6:cf:7b:28:4f:90:6f:1b:08:30:4e:0c:bd:cf:4f:
73:1d:34:36:20:96:71:83:52:f2:6b:af:5e:1f:a4:2f:ea:16:
8f:40:d8:53:99:d3:4c:de:59:0c:42:28:13:1e:ff:f6:04:7b:
2e:5d:f5:67:e6:11:16:2b:44:7b:ee:23:b9:5a:04:f3:2a:fb:
58:ff:af:22:df:0c:54:3e:27:24:47:cb:7a:fc:69:c3:a4:3e:
16:ec:7c:cb:a6:1d:45:c2:59:80:f4:3d:3e:52:f7:2a:d1:d3:
58:23:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:33 2026 by rpki-client