Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: /BxwhKzryFWQ5SIYF36rv0/3XXXwe/5IjviJZdl881w=
Subject key identifier: A8:C0:96:CF:4A:B4:02:37:AD:4C:B6:F0:6D:F9:E0:DC:53:CF:C4:1E
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 019D9AABD3BA3CF1C0A100BECEF02D6BEED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 1845
Signing time: Fri 17 Apr 2026 09:00:45 +0000
Manifest this update: Fri 17 Apr 2026 09:00:45 +0000
Manifest next update: Sat 18 Apr 2026 09:00:45 +0000
Files and hashes: 1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: b1y8TnDRN9vFaExjofPfMWQuyOMGDvVg8TMhQvXbVaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d3:ba:3c:f1:c0:a1:00:be:ce:f0:2d:6b:ee:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Apr 17 09:00:45 2026 GMT
Not After : Apr 18 09:00:45 2026 GMT
Subject: CN=a8c096cf4ab40237ad4cb6f06df9e0dc53cfc41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:63:eb:5f:c4:6a:cd:18:f8:84:7b:2e:eb:
ee:11:25:2e:82:41:d0:a2:e9:da:e6:30:eb:aa:45:
4e:0e:d0:78:67:8c:cd:1e:7f:e5:77:ea:27:1c:20:
44:44:d6:79:24:cc:49:86:3e:8a:75:45:8c:53:80:
15:0b:67:65:7c:ab:cd:a7:98:43:9e:53:ce:41:5d:
f4:c2:60:86:d8:6c:bb:77:17:53:90:5d:1d:36:c7:
2d:77:25:ce:90:5a:cb:d0:4a:d0:e7:76:47:31:e1:
01:90:c6:d7:34:28:27:61:41:a3:f2:a2:76:e8:f2:
79:27:57:d6:ed:b0:03:ea:e9:89:36:20:9d:11:ae:
79:0b:b5:99:fb:56:3d:e1:57:68:64:ec:87:8f:b4:
99:0f:30:bc:a5:c3:9a:7f:48:56:1a:13:3a:c2:77:
a3:a4:12:ea:56:cf:df:1b:db:4d:24:05:4d:63:5d:
94:00:6a:9a:2a:28:fb:f7:5c:fc:0d:3e:b3:3b:23:
b5:76:87:fe:93:30:79:0f:5b:6a:07:01:84:96:f2:
db:ac:0f:07:a8:bb:22:41:fc:8f:8c:72:61:8c:3d:
93:3a:6f:e6:c6:24:8d:77:95:ea:f0:51:8e:ad:aa:
68:8d:b1:c8:a5:0d:c5:17:a3:34:7f:9d:df:2d:72:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C0:96:CF:4A:B4:02:37:AD:4C:B6:F0:6D:F9:E0:DC:53:CF:C4:1E
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:21:f0:64:c6:54:22:2d:5d:19:1a:6e:3c:80:c3:ae:0a:
0b:c1:dd:b6:b3:80:c3:0c:2f:b9:2e:2a:a8:61:42:08:90:11:
33:74:a9:6c:88:58:7b:85:54:a5:c2:32:03:07:74:64:b1:df:
c4:e3:51:4d:8e:3f:29:b5:23:e8:c9:8d:b8:3d:0d:b6:4b:92:
e8:3d:8f:6a:fa:4b:e1:8d:65:77:ec:9f:63:b1:76:72:4a:fe:
ba:5e:f7:24:d8:50:3c:05:32:a1:24:6d:40:69:5e:01:29:2b:
d0:f3:79:12:89:fc:a1:fa:42:ae:fa:14:16:f7:71:e1:47:cf:
17:45:2a:51:76:59:1d:80:13:25:26:6e:1d:ab:f9:43:02:af:
03:9c:59:29:21:f3:90:8f:71:e5:85:6a:97:3f:3b:e5:2c:13:
70:f6:02:cb:5f:b1:53:50:bb:fa:18:c8:48:dc:bb:52:22:15:
41:4c:2f:29:5d:16:f2:26:8b:23:68:10:dd:67:a1:39:4d:fe:
05:91:b9:f1:f2:6b:a6:8c:96:25:f3:d9:54:db:08:e0:d6:62:
fe:35:33:7c:be:6c:27:88:e9:33:18:47:88:85:ee:06:80:be:
19:cf:85:47:2c:c0:a6:17:30:4c:6f:03:34:11:fc:eb:8b:3b:
be:b8:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:14 2026 by rpki-client