Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: TALjX1eRTvbT7PXwmckFBNlbfeDEM4Kl7c38MyT/Auc=
Subject key identifier: B1:A0:0B:63:E2:91:92:C2:A3:A8:55:FE:CE:83:A4:CA:CD:F7:C2:2B
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 019D992B70533D3B767ECF86B9EEA67C1E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: tXhKuNb4B-Nkw-Ko0kv7aBe86Mo.roa (hash: nAgAkoHpMUFVWXw/y+ljVkLkx6oi2l2uF+ZlnoJC4s8=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: SWULFtxZm5PwIURwecrhgA1cyGnc4s9aUGd851j+opE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:70:53:3d:3b:76:7e:cf:86:b9:ee:a6:7c:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=b1a00b63e29192c2a3a855fece83a4cacdf7c22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:78:e7:7f:83:53:34:fe:88:6a:dc:c1:ef:
23:e6:7c:0c:76:5b:36:03:79:d6:96:85:c1:98:b1:
fe:8a:7d:53:a8:b2:c7:f9:53:f0:9e:8a:ba:71:bc:
95:a6:0f:8b:6e:f1:26:fb:3e:66:d1:a9:16:64:33:
83:f2:a0:2f:81:a5:cb:16:85:96:87:66:16:56:e8:
e4:31:06:d5:56:5a:12:06:73:5b:a1:0d:61:e8:77:
f0:5a:87:37:4d:30:86:90:59:00:06:bc:ad:c5:aa:
ae:d5:59:52:49:a5:34:c9:26:55:ad:f3:ef:58:56:
16:49:ec:d5:57:2b:07:cf:7a:fb:2c:14:7a:62:d1:
4f:df:4a:fb:5c:86:17:a4:c7:12:98:39:24:50:29:
50:58:0e:35:38:ce:74:80:5c:c8:cc:5d:ad:12:a6:
8a:28:20:d6:e1:0d:47:02:e0:8f:11:2a:8e:20:72:
cf:82:79:45:b5:f5:9c:0b:14:4f:a6:81:f0:c3:6e:
dc:45:3f:2d:09:b6:c3:69:4e:30:23:50:46:4e:38:
5c:58:10:ac:a9:0a:a7:1b:19:5d:72:dc:62:ea:ce:
d3:28:85:94:24:f9:f9:ed:a2:cf:69:83:db:23:da:
b8:b5:4b:9e:fd:67:2b:9f:34:4d:68:6b:e2:cb:27:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:0B:63:E2:91:92:C2:A3:A8:55:FE:CE:83:A4:CA:CD:F7:C2:2B
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8e:75:65:b3:f5:0a:31:6f:e7:c9:cd:13:c5:05:4b:34:d4:
80:4b:47:50:13:a8:39:3f:e2:42:b8:3a:28:a7:e2:5e:ff:bd:
71:a7:30:d0:77:69:c7:5f:66:26:4e:f3:3e:00:eb:93:a7:2d:
f4:81:da:e2:38:34:8f:a8:68:61:d0:8e:fd:f6:b4:d5:ca:cd:
72:ae:57:af:2b:49:14:ae:bb:11:74:6a:b9:a9:ea:c4:e9:d8:
e4:e2:ce:24:d1:d2:ce:03:d8:a9:68:4e:50:6d:79:1d:ae:6e:
5c:22:8d:e2:03:22:91:61:dc:f8:95:41:5f:15:09:88:25:00:
01:19:85:b2:1a:34:6f:ce:58:9c:27:02:1d:22:6d:c3:b5:7c:
fa:c3:c6:3d:61:6b:ed:91:9e:61:47:25:aa:c8:af:d8:88:c5:
1a:be:9a:43:6a:f5:4d:e3:9e:46:38:9d:9f:6d:c7:0e:b7:88:
55:80:67:da:20:d7:4e:c2:17:41:a5:5e:ed:34:de:16:be:77:
35:29:e8:a6:9b:a5:5e:51:f0:27:c8:eb:9f:c0:a2:fc:fc:e0:
6f:5c:1d:1a:38:33:36:13:7c:8d:91:00:31:f9:3c:46:c2:56:
bd:84:1d:40:55:d0:40:aa:54:9d:bb:0f:18:47:b7:13:d4:8d:
e7:08:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:50 2026 by rpki-client