Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: 1/ZANcupk8leEBrZkFzr2+bbcBlGB7HJlJyGdP7XSXo=
Subject key identifier: 6C:73:35:9B:4B:B1:3B:09:2A:39:CC:E4:08:57:7D:EC:F4:3B:EE:8F
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019D9AAB7A947750E971D9B4F9C125A811CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:00:22 +0000
Manifest this update: Fri 17 Apr 2026 09:00:22 +0000
Manifest next update: Sat 18 Apr 2026 09:00:22 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: hJ18P52xPD4hOy6HygPB/mVLoyqEKkaD/opalzU5RUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7a:94:77:50:e9:71:d9:b4:f9:c1:25:a8:11:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Apr 17 09:00:22 2026 GMT
Not After : Apr 18 09:00:22 2026 GMT
Subject: CN=6c73359b4bb13b092a39cce408577decf43bee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:8f:9b:bb:50:aa:ef:e7:e8:65:45:36:45:
68:90:aa:16:f5:69:75:49:b9:b0:1b:fa:49:51:48:
ad:04:1a:9f:91:f0:e9:a0:15:9d:9e:3f:ac:76:7c:
68:20:1e:e1:f7:79:c6:92:f1:28:9d:0b:c2:1f:dc:
54:a3:e4:13:76:6a:2d:33:9a:d9:c3:24:5f:e0:cd:
53:27:f8:1d:bc:a7:ca:7d:44:fc:ec:ab:40:4a:d5:
b6:58:fa:64:21:e3:91:12:33:da:d2:69:17:cd:38:
0a:be:40:70:a7:e3:f2:a9:18:89:88:71:a3:78:25:
f9:2d:e9:96:4d:74:92:b4:84:8a:47:19:2f:7f:c7:
b8:e8:22:31:42:b7:33:b0:e5:ae:f6:7e:91:d1:0c:
a2:85:fd:fe:2e:d8:09:07:1a:fe:40:9f:81:c2:e4:
50:cd:8b:ca:db:37:7f:95:ed:2b:dd:de:7e:9e:2b:
db:9f:75:68:ec:a2:2e:b4:f6:52:c7:63:89:1a:29:
50:5c:59:fa:28:19:a8:69:7d:03:16:b8:ae:8b:51:
12:c4:2e:7a:a7:65:1e:59:98:9f:bb:84:f2:15:7c:
f8:66:1e:a7:0e:a3:8b:28:37:55:e3:4a:49:ab:e0:
77:8b:94:c3:09:8b:c0:bd:f4:fa:29:9c:0b:a8:5c:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:35:9B:4B:B1:3B:09:2A:39:CC:E4:08:57:7D:EC:F4:3B:EE:8F
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:e7:5e:da:3b:71:f6:9d:03:8b:74:82:f3:e0:0d:48:00:
1d:2f:ab:ba:70:d2:6d:5c:9a:f6:99:c4:a3:27:9d:c4:94:ff:
2e:07:ac:27:e3:97:b9:28:53:07:b7:01:87:da:bd:7c:d6:5e:
24:fc:1a:e8:3e:3f:8b:cc:ef:80:32:a8:3c:1f:8a:fa:f2:05:
a0:25:12:01:ce:d6:c4:f5:e3:bb:64:fe:94:c9:af:07:24:b6:
55:73:19:91:43:51:5f:b8:80:2c:94:25:98:0f:97:e3:8e:3a:
96:89:a6:72:cb:a5:01:17:b1:2a:56:a2:8f:01:14:87:0d:2b:
d4:2b:b6:30:29:d7:42:9b:28:3c:3c:a3:6a:ba:d6:3b:a6:3f:
85:6b:b4:7c:7d:28:c2:1a:fc:15:e7:4b:08:11:d5:a0:af:08:
54:6c:f9:45:c0:85:19:93:d4:4b:9a:97:98:38:e0:99:75:4a:
b0:31:95:a7:9c:17:13:f9:e1:07:35:90:53:2e:9d:75:cf:c0:
21:e0:6d:d6:db:2d:f5:72:9c:ff:9d:93:08:95:10:6a:68:8b:
a2:56:77:63:d3:5b:3f:cb:44:ca:bf:9d:c9:d7:82:8e:21:16:
62:c4:aa:5c:11:af:c2:40:5d:ff:75:f8:b6:5c:a4:99:dd:0b:
49:e7:3c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq3qUd1Dpcdm0+cElqBHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjYwNDE3MDkwMDIyWhcNMjYwNDE4MDkwMDIyWjAzMTEwLwYDVQQD
Eyg2YzczMzU5YjRiYjEzYjA5MmEzOWNjZTQwODU3N2RlY2Y0M2JlZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptiPm7tQqu/n6GVFNkVokKoW9Wl1
SbmwG/pJUUitBBqfkfDpoBWdnj+sdnxoIB7h93nGkvEonQvCH9xUo+QTdmotM5rZ
wyRf4M1TJ/gdvKfKfUT87KtAStW2WPpkIeOREjPa0mkXzTgKvkBwp+PyqRiJiHGj
eCX5LemWTXSStISKRxkvf8e46CIxQrczsOWu9n6R0Qyihf3+LtgJBxr+QJ+BwuRQ
zYvK2zd/le0r3d5+nivbn3Vo7KIutPZSx2OJGilQXFn6KBmoaX0DFriui1ESxC56
p2UeWZifu4TyFXz4Zh6nDqOLKDdV40pJq+B3i5TDCYvAvfT6KZwLqFxkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxzNZtLsTsJKjnM5AhXfez0O+6PMB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGrnXto7
cfadA4t0gvPgDUgAHS+runDSbVya9pnEoyedxJT/LgesJ+OXuShTB7cBh9q9fNZe
JPwa6D4/i8zvgDKoPB+K+vIFoCUSAc7WxPXju2T+lMmvByS2VXMZkUNRX7iALJQl
mA+X4446lommcsulARexKlaijwEUhw0r1Cu2MCnXQpsoPDyjarrWO6Y/hWu0fH0o
whr8FedLCBHVoK8IVGz5RcCFGZPUS5qXmDjgmXVKsDGVp5wXE/nhBzWQUy6ddc/A
IeBt1tst9XKc/52TCJUQamiLolZ3Y9NbP8tEyr+dydeCjiEWYsSqXBGvwkBd/3X4
tlykmd0LSec8RA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:43 2026 by rpki-client