Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: EaXewtVWFd42RaXFVJgAYvN1MRejh/ZuehLNyYKjqz4=
Subject key identifier: DB:8E:83:27:C4:CE:A5:41:B1:B0:41:C9:95:17:C0:A6:15:75:A3:4B
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 019D99D09F63AA3F218FE6F014C08A001263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: KK6V4tkkGOTlna1jDdLR34C1144.roa (hash: VJsTur/NQjIjrIZYxVHk28VDPEOKoZ9mo1/7vuIP+oc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: 5DZ++bRQzTVaLo/cmDEEDhfFLnkmKZc7EVn+4quCcxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9f:63:aa:3f:21:8f:e6:f0:14:c0:8a:00:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=db8e8327c4cea541b1b041c99517c0a61575a34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:fb:0b:50:19:19:c4:48:86:d4:63:94:c4:
6d:c2:ea:b4:4f:1e:17:cf:60:4d:6c:ec:c8:8a:64:
18:4f:3e:1d:0f:5e:74:6c:a0:a7:71:82:97:8a:d4:
bb:96:d1:f1:35:ee:07:87:dd:3a:d3:fd:72:a2:d6:
f0:7c:eb:a7:aa:6d:16:0f:92:af:13:e7:9c:56:38:
40:ec:35:d6:78:1b:b2:f5:45:be:49:6d:11:e3:1b:
f0:82:b5:b6:93:6c:d4:45:e3:c5:c5:c1:8e:be:2e:
c0:d2:7f:86:34:2a:24:75:2c:83:ac:90:cf:99:e2:
b1:59:5f:43:ce:0b:e7:8d:0f:55:40:f9:ea:49:44:
0f:43:84:eb:81:bb:f4:af:04:06:ea:21:7c:68:41:
e7:ab:bc:86:ce:9a:5b:d2:44:33:49:21:75:87:7d:
ba:a2:33:fc:e4:ff:81:cd:13:f5:da:97:94:b5:0d:
81:51:c0:ee:f0:a3:86:71:87:03:89:f2:c8:18:88:
a8:cc:e3:c4:48:ce:74:d2:28:7e:43:53:52:67:c1:
f8:2c:dc:45:63:71:9e:a8:e0:d8:7d:ea:b7:b3:6a:
4d:61:9f:33:ce:81:6a:a5:26:95:70:c8:3d:ca:d9:
8f:59:3d:14:b4:ee:3c:2a:74:1e:60:88:99:9c:06:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:83:27:C4:CE:A5:41:B1:B0:41:C9:95:17:C0:A6:15:75:A3:4B
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:54:59:4d:f3:f0:57:6d:4f:e9:d3:4e:ec:1b:db:1f:15:fb:
f7:5b:1c:3e:59:26:b4:4e:29:06:26:fc:9a:c6:79:d7:1a:fb:
3d:fd:21:e5:f5:6b:2e:16:11:69:1f:c8:c3:35:b3:c4:b8:f6:
28:2d:ec:3b:2c:31:b4:8c:9c:2d:bd:d9:53:9e:09:8e:11:65:
8a:76:b2:88:2d:78:e6:9f:8c:b0:6e:98:78:d9:48:26:37:3b:
1b:1a:b7:60:1f:f0:b8:2b:6d:5e:50:5a:7f:a5:9d:28:e9:38:
28:eb:69:a0:d7:b9:e0:4e:59:09:a6:88:79:6a:3d:6a:41:61:
93:2a:82:d3:b7:02:78:78:0f:98:0d:c2:78:fc:8d:5b:2f:cf:
34:f6:00:54:0c:53:c6:d8:42:00:52:ec:39:47:56:b3:f9:01:
94:d5:81:61:59:58:3f:53:f8:83:8c:fa:f6:6a:41:e5:1c:55:
9a:9f:c1:02:b7:ad:ad:ca:1d:db:0a:d4:a7:52:f6:9d:11:71:
1e:ac:f1:01:5e:00:03:3c:7a:72:17:1f:7c:8e:b8:20:29:01:
4a:6b:26:6e:aa:2d:d9:cd:96:53:f7:92:a7:7c:7a:5e:f0:ba:
9c:f3:5b:09:97:37:12:21:29:8b:c7:90:ff:93:fd:5e:ec:14:
78:ea:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:42 2026 by rpki-client