Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: vwdatdgN5E102jIvYd8e/74550i9gxWzQg6FthE4BdE=
Subject key identifier: 3B:61:26:28:F8:DE:F3:01:80:6C:FC:D4:2F:43:77:C1:36:E6:B7:4C
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 019DA3E693139B595F27966F599D39BB787D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 04:01:30 +0000
Manifest this update: Sun 19 Apr 2026 04:01:30 +0000
Manifest next update: Mon 20 Apr 2026 04:01:30 +0000
Files and hashes: 1: XAYcuxsajA5hLrmscRs4oynzyUg.roa (hash: AvPY1r1vk0ST8v3sz0+K9LIFAxv9kmWL/J2CaIlXu0s=)
2: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: UGu7WyGZW9Sez3bvtwo1cB69Ad5hS9vNySW6Eo2lRUA=)
3: mjMQEKksicvgZzYu86cOaUikq_o.roa (hash: 7g64PoLicqxVLeKtHUopkjJGRzw3GYF64nr8YZ5vEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:93:13:9b:59:5f:27:96:6f:59:9d:39:bb:78:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Apr 19 04:01:30 2026 GMT
Not After : Apr 20 04:01:30 2026 GMT
Subject: CN=3b612628f8def301806cfcd42f4377c136e6b74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:a3:a1:1f:00:b8:41:c2:6a:e6:89:f2:44:
e2:6f:84:0c:1d:9a:51:76:6c:71:8b:37:a0:39:0c:
2b:7e:d9:dc:1a:78:67:4e:a9:03:58:a8:b2:bc:f8:
6f:95:93:b9:c8:22:34:cf:e9:3c:84:fa:3e:d8:33:
89:e6:c9:aa:d1:8b:ad:84:d6:9d:2e:24:68:e7:52:
5d:ba:7c:5b:13:81:cf:2c:51:0a:99:ef:f4:2c:c0:
68:3c:29:83:ac:b1:b8:bc:96:f8:25:c3:86:36:62:
75:91:70:30:47:72:96:4e:71:83:cd:35:35:4a:2c:
00:64:a5:79:b3:e2:36:4f:96:96:57:53:cc:02:2f:
f9:30:d0:05:49:6f:33:4a:90:00:1e:ac:69:34:b7:
ad:39:57:5e:dd:24:e7:9f:b4:df:4a:23:0c:ae:43:
47:b1:ac:8a:10:b2:97:0b:a2:f5:7d:d8:0d:e0:52:
62:24:aa:dd:1f:90:8a:d0:0a:35:6c:76:59:c8:85:
47:53:d3:01:0c:02:7c:dc:13:2f:c0:ee:2e:e9:61:
8c:6a:4d:f3:e1:41:88:23:cc:fd:00:c5:0e:cd:4e:
51:26:e0:b9:bc:e2:9f:90:7d:a6:f9:3c:1e:8b:4c:
23:07:30:42:bf:71:cd:ca:89:eb:2a:4e:0f:b0:d1:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:61:26:28:F8:DE:F3:01:80:6C:FC:D4:2F:43:77:C1:36:E6:B7:4C
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1f:d3:2a:98:58:07:18:e9:64:84:d7:23:49:b0:24:4a:e9:
28:63:9e:ce:b8:4a:05:51:ee:b4:4d:6d:dd:d8:27:65:8f:42:
9d:44:19:18:ed:5d:c8:78:9a:ca:de:0b:2e:0a:b2:4b:8a:25:
b6:34:f7:6e:04:95:c7:f0:9b:3f:41:45:55:84:79:af:9c:90:
ce:e5:10:94:dc:f9:7e:d3:32:4d:15:13:7f:40:b4:89:ba:fe:
a6:a7:65:65:51:3b:7b:fe:f1:cf:1f:2e:3e:33:3f:5e:d4:50:
2a:ff:6a:f0:d9:41:ca:b6:77:01:98:4e:0e:02:db:56:e5:41:
58:30:ee:e3:ae:90:07:38:95:db:d1:5a:74:46:da:f5:0c:f3:
eb:4b:8c:e1:cf:a6:56:9a:51:da:d3:38:65:27:84:b0:3f:d5:
7b:51:f8:06:79:07:0f:ae:9d:bc:c6:1b:cf:4c:bb:6c:03:7e:
06:01:07:21:28:57:7e:47:a6:19:9f:2b:51:4c:b3:74:ae:c3:
62:05:c0:b8:07:74:bd:d3:9b:78:d1:ed:e4:23:75:0c:28:e9:
25:cb:52:01:5d:38:34:ca:6e:fd:89:d2:e2:63:6d:e5:67:4b:
59:0c:68:56:1d:5f:02:57:bd:52:a3:20:60:8e:ae:24:ff:3c:
30:37:e4:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5pMTm1lfJ5ZvWZ05u3h9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmU4ZDcyNTI2ZTRlNzNhM2I1N2Q5MzYwZjNhNTFiZWI1
OWE0NWYwHhcNMjYwNDE5MDQwMTMwWhcNMjYwNDIwMDQwMTMwWjAzMTEwLwYDVQQD
EygzYjYxMjYyOGY4ZGVmMzAxODA2Y2ZjZDQyZjQzNzdjMTM2ZTZiNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLKjoR8AuEHCauaJ8kTib4QMHZpR
dmxxizegOQwrftncGnhnTqkDWKiyvPhvlZO5yCI0z+k8hPo+2DOJ5smq0YuthNad
LiRo51JdunxbE4HPLFEKme/0LMBoPCmDrLG4vJb4JcOGNmJ1kXAwR3KWTnGDzTU1
SiwAZKV5s+I2T5aWV1PMAi/5MNAFSW8zSpAAHqxpNLetOVde3STnn7TfSiMMrkNH
sayKELKXC6L1fdgN4FJiJKrdH5CK0Ao1bHZZyIVHU9MBDAJ83BMvwO4u6WGMak3z
4UGII8z9AMUOzU5RJuC5vOKfkH2m+Twei0wjBzBCv3HNyonrKk4PsNEMkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDthJij43vMBgGz81C9Dd8E25rdMMB8GA1UdIwQY
MBaAFFz+jXJSbk5zo7V9k2DzpRvrWaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMt
ZTRkZGZhMzJlNTJlLzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMtZTRkZGZhMzJlNTJl
LzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOh/TKphY
BxjpZITXI0mwJErpKGOezrhKBVHutE1t3dgnZY9CnUQZGO1dyHiayt4LLgqyS4ol
tjT3bgSVx/CbP0FFVYR5r5yQzuUQlNz5ftMyTRUTf0C0ibr+pqdlZVE7e/7xzx8u
PjM/XtRQKv9q8NlByrZ3AZhODgLbVuVBWDDu466QBziV29FadEba9Qzz60uM4c+m
VppR2tM4ZSeEsD/Ve1H4BnkHD66dvMYbz0y7bAN+BgEHIShXfkemGZ8rUUyzdK7D
YgXAuAd0vdObeNHt5CN1DCjpJctSAV04NMpu/YnS4mNt5WdLWQxoVh1fAle9UqMg
YI6uJP88MDfkGg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:22 2026 by rpki-client