Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File: mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier: ffeP8uaMGZTIQVQ0SvhhQoStbaArzCzh/5oS62I6ScA=
Subject key identifier: 43:5A:44:69:FC:60:E3:AE:FB:64:08:E4:02:9A:32:03:3E:E3:4B:D1
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 019D98BD1543B5F1E6CCB053BA222A6010D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number: 1186
Signing time: Fri 17 Apr 2026 00:00:21 +0000
Manifest this update: Fri 17 Apr 2026 00:00:21 +0000
Manifest next update: Sat 18 Apr 2026 00:00:21 +0000
Files and hashes: 1: I7V5V1cM7CVsM1y0YVXX0evu4RA.roa (hash: 3YvBTIxXWovXFR/5L6HbEj29abytJrCEZQSlYTFVAvk=)
2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: S0fkCA48iFhX3LA93O563JZTprNJ93b2oW6O3tdDLws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:15:43:b5:f1:e6:cc:b0:53:ba:22:2a:60:10:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Apr 17 00:00:21 2026 GMT
Not After : Apr 18 00:00:21 2026 GMT
Subject: CN=435a4469fc60e3aefb6408e4029a32033ee34bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:4e:5c:73:b8:8a:c0:04:f1:4d:df:c1:3f:
b9:ec:74:6e:19:a1:34:84:a7:28:65:19:28:dd:c8:
82:6f:0f:f3:b9:28:50:b8:36:5d:6d:a7:f8:ab:c4:
1d:55:96:a2:0f:a5:d2:ca:76:d1:d3:bb:3e:1c:dd:
fa:dd:dd:54:13:7f:98:42:5f:84:aa:93:87:ae:4d:
96:9b:13:a4:24:25:a8:6e:60:33:e1:80:93:5e:cd:
89:d3:f7:c6:c4:d3:b9:4c:48:97:dd:30:ab:64:d3:
9a:de:e9:a5:57:47:4c:2f:b5:6e:81:36:a6:83:5a:
7a:05:09:cb:a1:b0:fd:cd:83:4e:fc:85:46:af:77:
cf:f1:bc:9d:e5:03:a5:05:1c:0b:7c:af:6d:06:b4:
11:69:e9:24:2a:8e:9d:28:fc:9a:b9:7f:f6:25:f7:
d7:6d:61:e4:bc:3e:6f:eb:a5:08:d3:f1:7e:da:fb:
9e:a0:f0:f7:76:34:fb:32:99:0c:b8:e8:4f:b5:52:
37:b7:74:e5:be:f0:5d:86:4a:39:32:44:d0:ee:90:
91:df:e2:2d:9f:ec:7c:90:d1:fd:8e:36:c2:26:af:
15:d6:41:65:00:ac:d1:92:5a:78:80:e6:76:65:8a:
e0:0d:d2:f3:e5:bb:36:01:00:d8:91:c6:c7:88:b2:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5A:44:69:FC:60:E3:AE:FB:64:08:E4:02:9A:32:03:3E:E3:4B:D1
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:35:b5:e3:2f:00:3d:56:a7:3a:81:c7:eb:84:f7:8b:e4:01:
69:fd:87:8f:f2:ba:31:2d:47:1f:fb:73:7c:c3:a3:ec:28:6a:
0b:fc:0b:12:bc:81:1e:c2:12:b8:15:87:62:0c:c6:c2:5a:dc:
17:41:62:15:e6:74:a8:b7:53:17:f5:62:32:92:d8:be:9c:e0:
17:34:d7:c1:b5:f7:35:0a:74:4b:5a:65:d7:96:0f:56:c4:45:
82:86:b5:fd:81:16:e8:3f:e9:20:05:e8:6e:37:4c:2c:0a:43:
b5:65:9f:93:0f:97:5d:71:26:2f:d6:51:0e:4c:16:52:77:56:
9c:2f:16:2d:ef:61:09:dd:6f:10:c4:ef:f4:84:88:98:ee:bc:
ae:e8:cd:90:40:09:3c:55:6c:56:58:d3:ba:a0:ae:e0:1c:c7:
fd:85:9b:cc:31:6d:90:4f:6e:40:d5:7f:98:c9:7a:e1:ef:39:
ac:f3:f9:e0:e1:80:2d:d4:7f:8f:27:e5:f7:e2:67:07:81:4d:
36:ac:f5:05:73:fb:ab:4d:8c:23:56:1e:c8:94:fd:a4:9c:24:
54:24:3d:52:a8:78:f8:0c:ec:85:fa:c9:dd:54:52:c3:4b:e9:
2d:6b:f6:4d:47:d5:c5:1f:66:a5:67:b4:7f:a3:ae:ce:a6:8d:
12:66:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:41 2026 by rpki-client