Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: hwx8s9dpl6aOLD2MEJ3grlw8ZzQ+eqJlwBzlTcx9wUU=
Subject key identifier: F3:B4:51:05:37:FA:AE:77:61:CC:6A:31:DA:F6:C0:92:48:C3:45:81
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 019D9AE30090C0C123AE0DD051A8524D47C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:01:01 +0000
Manifest this update: Fri 17 Apr 2026 10:01:01 +0000
Manifest next update: Sat 18 Apr 2026 10:01:01 +0000
Files and hashes: 1: 5SqsuyoErucRezmQTfvpY2XQz9g.roa (hash: 2gIJFCrAFvF4esdLzO2MxH+s496fv76stiFCWqMIITM=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: 6WiRZXc+nLKUZvP+KqTD/pmtz3JyBWe87WfgOBUEzjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:00:90:c0:c1:23:ae:0d:d0:51:a8:52:4d:47:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Apr 17 10:01:01 2026 GMT
Not After : Apr 18 10:01:01 2026 GMT
Subject: CN=f3b4510537faae7761cc6a31daf6c09248c34581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:bb:8d:c9:bc:95:02:6a:46:fa:f0:91:92:
45:58:3a:c3:b5:8b:ce:03:66:f9:12:0a:f6:05:71:
4d:2e:08:47:61:46:43:2f:74:7e:1e:36:cd:a4:f0:
d2:bf:6a:81:80:f9:79:7b:28:aa:c4:df:80:66:71:
0a:a7:46:bc:2f:c2:de:e8:43:00:ac:ee:83:9e:bf:
c7:90:7e:d6:51:6d:ef:9e:69:db:c4:4e:26:e9:92:
e5:0b:18:5f:2a:ad:84:c3:ae:78:f4:f7:d3:42:5c:
89:c7:ef:1d:b6:16:48:5c:30:1e:5d:81:26:87:39:
92:5d:c2:1d:f9:c7:fb:e6:ed:23:7a:bb:00:b1:e6:
93:82:20:7a:14:fc:1a:19:ac:ec:a5:3c:01:0b:fa:
b8:69:4b:88:14:75:14:82:cd:b7:b7:e7:7f:55:1c:
83:bc:26:76:2b:b7:af:62:87:51:25:6b:37:fb:d3:
4a:b4:fe:0d:70:47:5c:16:31:5f:50:18:c3:34:37:
81:59:88:cb:1d:40:52:51:91:7d:dc:d0:e7:06:d3:
eb:31:15:0d:d4:d1:31:1c:8b:c3:8c:97:62:36:e6:
35:66:e7:88:6e:9a:e8:bd:41:0d:83:ba:cd:bc:27:
40:be:e7:36:bd:e5:91:22:56:0f:7c:d7:f6:a3:5c:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B4:51:05:37:FA:AE:77:61:CC:6A:31:DA:F6:C0:92:48:C3:45:81
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:76:2d:06:32:fd:8e:93:bb:58:42:65:3c:3a:aa:3a:2f:65:
1b:00:79:c7:e6:f3:2a:60:37:b0:71:d2:43:a9:53:8e:50:c3:
4b:b2:41:bf:d5:6d:62:38:aa:f5:7a:8f:ba:4d:93:a5:ec:eb:
2f:3a:c8:cf:a0:9c:43:a8:d8:1f:e5:b8:56:6c:1f:fd:b0:f6:
4c:40:62:54:d0:aa:6b:ff:7c:ad:c9:50:d3:3b:18:91:44:6b:
e8:95:2d:e9:d6:1a:b3:b8:f8:22:45:17:26:04:30:f2:86:ca:
fb:da:d0:14:38:bc:07:62:15:7a:7e:15:ec:b0:60:e7:f6:82:
fd:92:6d:b9:3f:10:61:80:80:24:bb:98:51:84:a9:e7:35:58:
c1:39:48:ac:a9:da:8d:40:22:13:64:6e:53:47:12:b7:75:cf:
15:4e:90:45:b8:4f:30:08:46:4c:fe:38:d7:12:07:ff:d7:0d:
59:d5:1e:93:91:d0:15:43:9a:c8:e4:fe:c3:c3:e9:6b:2f:72:
34:84:0c:da:64:b4:b2:f2:dc:b9:bc:c8:6b:c6:d0:e0:7a:20:
40:7a:ab:a2:05:74:ec:ba:84:6d:b0:32:b4:df:be:92:1f:24:
03:44:54:f3:df:9f:63:98:a7:9a:e0:5c:7a:ee:81:6e:7f:9f:
cf:bb:ac:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:42 2026 by rpki-client