Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: zZvhBPshrzqk/vnvxynx7eosV1o0TNZtYczN13IBokI=
Subject key identifier: 57:F3:F2:DF:9A:9F:87:6F:26:DF:18:E9:A2:BE:87:63:2A:C1:1A:D4
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 019D9A0725D74A12D2D9C53F7C067B93F614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 12C5
Signing time: Fri 17 Apr 2026 06:00:52 +0000
Manifest this update: Fri 17 Apr 2026 06:00:52 +0000
Manifest next update: Sat 18 Apr 2026 06:00:52 +0000
Files and hashes: 1: 3bor1lJpsbxwoxpTVw7SPphj0KA.roa (hash: MKCpN8MSRgBkERkhEGqpPaY9qiTFWm3a9NewCeOTHfw=)
2: GXk9W9CNwKQiPNxAJO_3YHEC8ks.roa (hash: YHyrtHqWCQuMuxSCOZgnwAowq6pK9w2Oee4ZGOF4rHY=)
3: Pv_B5wrNSOIQ2rOvMqV3MMegG7w.roa (hash: wwJ2iaOAypy2cu/YyFarYyFvvtG9167wYna2ztGjItM=)
4: S4cOm5eDZspURLWbEjjfUiB2w9A.roa (hash: WT7udJa3v1pG5JhWMUlVe+UmSzwa9B/DLth0MoSpo+c=)
5: WGarpJ7r84I2BUjPwsh_FrmY5eE.roa (hash: enfn5n+6zegDsbYCXp7miXXJum8vzX4WWxNLJX5Keh4=)
6: Wi7IqvDgVK392tuCNUoibcF9Xwc.roa (hash: 8UDRh/dVbBhU/0zaDX6N0W8S2rKIEZNL8f2ZIttBB5A=)
7: g-8h1WIO9QvS1_Q2QX1r8pW45zo.roa (hash: fQUVeftZWFTn36Yq3t/fvrdvz2969ngwwOOkfKPmwGY=)
8: rqBI1Yge5d8pkYEHzMcFHLBAy_s.roa (hash: 5Bfk1P6XoOfoIACEr9dJa6ZH0ZEA6wxnqttPtb85Opc=)
9: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: HXM19Pi8/gMix51r6Ux5Rx4QBzgy2XEIvVMlKVBYM1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:25:d7:4a:12:d2:d9:c5:3f:7c:06:7b:93:f6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Apr 17 06:00:52 2026 GMT
Not After : Apr 18 06:00:52 2026 GMT
Subject: CN=57f3f2df9a9f876f26df18e9a2be87632ac11ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:49:1f:c2:b8:eb:a5:bf:a7:30:2e:36:de:
ae:f8:0f:f1:b8:95:c6:71:a1:4c:a4:5d:8e:b4:3a:
37:60:82:7a:f1:55:e5:89:94:d5:c0:ac:5f:f1:13:
71:d5:d9:da:bf:a3:aa:5f:c2:ba:27:58:89:bc:91:
97:b1:8d:1c:9f:5e:03:bd:29:35:c7:2c:bc:53:f4:
ba:ff:9b:cb:b3:27:73:ce:67:27:44:28:f2:ec:4d:
ec:24:1a:b6:db:97:4e:6e:ff:94:22:d2:be:cd:e1:
8a:66:c0:ff:f6:13:b1:56:a9:5a:aa:b9:00:be:7d:
df:0b:e2:2e:e2:bc:ba:0f:90:d9:93:57:e7:a4:e2:
ba:dc:f5:47:a0:c7:50:aa:a7:cc:4b:1b:13:c7:66:
3f:20:99:b5:7e:32:ed:43:5b:20:6c:85:57:31:70:
c0:b8:c9:f4:04:64:70:c6:6c:27:13:a9:4f:1f:8e:
03:ad:80:1a:4b:22:02:e8:77:69:8e:03:28:e8:84:
e9:a3:56:18:0d:1b:aa:41:b5:52:f8:47:f7:c6:51:
6d:60:aa:4e:f8:48:48:08:eb:de:bc:e9:31:15:47:
a2:8b:1a:46:0e:b7:34:9c:ae:a1:c0:62:4e:bb:06:
50:4c:45:fc:ce:b5:17:e1:5a:2e:c4:48:57:f7:91:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F3:F2:DF:9A:9F:87:6F:26:DF:18:E9:A2:BE:87:63:2A:C1:1A:D4
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6d:59:f1:64:2f:87:2a:65:62:51:1d:64:d6:f6:e2:72:df:
09:f4:51:1c:fe:86:e3:b0:43:28:29:64:44:01:e0:49:86:55:
34:54:db:1a:3e:ba:92:42:88:4c:d6:7f:a8:6b:a8:e4:52:71:
f8:24:63:8c:b6:31:5b:1f:4d:a7:83:80:4a:9b:26:11:da:35:
41:bb:02:10:a4:e1:6a:ab:71:d5:98:48:c4:58:df:28:09:c1:
8e:8a:46:bb:63:9e:ba:c2:7e:db:6e:3c:2f:4a:1c:dc:60:0b:
2a:be:66:25:56:01:ba:ba:91:c4:f6:e2:44:bf:d0:ef:c7:98:
21:fa:66:6a:38:bf:e4:fa:bf:f2:70:92:06:ac:0b:14:96:fa:
88:f8:c4:7b:e4:6e:96:ec:fc:4e:39:43:5d:a1:c9:84:91:7f:
16:9f:fc:6d:83:30:cf:d7:04:05:13:a8:92:00:3b:ac:da:53:
e2:b5:1f:15:6f:54:6d:8b:f7:50:5c:a6:0a:b4:6d:d9:0f:24:
e6:e8:2e:de:87:7d:a4:79:e2:b7:0f:6f:17:ca:69:7a:c7:ff:
ac:8d:12:ef:8a:38:90:10:56:ce:7b:af:0a:a6:cb:df:18:fb:
18:9b:da:56:d0:ca:89:40:d8:ba:6d:e8:98:70:f8:7b:97:f7:
2c:ef:c8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:36 2026 by rpki-client