Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: 6c3x4ajhmoNW3c8ZifMopyfZR1/N5JD7TRpKaK1GUGE=
Subject key identifier: BA:72:7C:4D:2D:E4:4D:17:43:D2:CD:16:77:14:92:4F:32:B1:53:BE
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019D9A3EC5BF39342755DB26DCC2E3FAD330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 18EC
Signing time: Fri 17 Apr 2026 07:01:38 +0000
Manifest this update: Fri 17 Apr 2026 07:01:38 +0000
Manifest next update: Sat 18 Apr 2026 07:01:38 +0000
Files and hashes: 1: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: LKUkRPD9Q/Ol7+p2Zrvp02zJlLt5BQSdCVE9H2v4C5E=)
2: coRfEXrfHGck2d3kTCu4-WIF828.roa (hash: seMqqalk2GBduoeIME3C50KibF4OKg4MDnKjSiFIduo=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c5:bf:39:34:27:55:db:26:dc:c2:e3:fa:d3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Apr 17 07:01:38 2026 GMT
Not After : Apr 18 07:01:38 2026 GMT
Subject: CN=ba727c4d2de44d1743d2cd167714924f32b153be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:52:5a:89:db:4a:b1:13:17:2d:ee:aa:f9:
5a:08:b3:11:ce:0f:8b:f2:71:a2:e6:73:05:0b:93:
23:3a:10:c4:44:a7:6a:75:f5:4f:d3:21:10:c9:ab:
80:ef:4c:fc:55:25:cf:3e:16:7f:05:be:44:ba:59:
96:8e:c8:4b:93:c9:14:96:31:6b:ec:e5:89:37:5f:
cc:90:ff:24:f6:99:bb:3f:6d:f5:c9:81:0e:6f:ee:
9a:40:4b:04:4c:b5:a9:48:ff:4c:17:f0:00:10:a4:
e5:e6:b2:f8:e2:b8:e7:7c:4c:0f:b3:ec:85:ad:32:
90:5a:06:bf:c8:b2:56:3e:fb:bc:e4:6c:26:0b:3e:
d6:c9:00:ba:af:e7:91:75:5b:54:8b:ec:53:6a:7a:
3c:f2:d2:b5:05:84:a9:22:3f:0e:8b:4e:ff:61:f1:
67:5b:7e:0a:b4:7e:ce:3c:e3:86:5e:22:c3:91:3d:
d4:8c:d6:6e:65:9e:47:e4:51:30:7c:43:f8:fb:94:
4d:de:aa:3e:4a:2a:7c:bb:e9:05:ce:b5:25:c6:72:
b1:99:d7:b8:97:6b:0e:ee:43:bd:84:fe:78:40:04:
48:c7:57:f7:e0:50:50:86:56:45:1b:e5:22:21:a8:
4b:63:92:0b:6c:55:38:b5:c8:e5:fd:a5:98:e2:4f:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:72:7C:4D:2D:E4:4D:17:43:D2:CD:16:77:14:92:4F:32:B1:53:BE
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:41:5a:aa:99:1b:87:87:64:bf:67:69:6c:2f:14:ed:b9:15:
6f:57:a7:a5:17:0b:5f:c1:b3:ea:c6:e9:7c:1f:94:95:9a:41:
a7:ab:b2:2e:2b:f4:94:61:02:23:d3:0d:af:28:ba:26:47:02:
5d:32:9e:48:33:0a:0f:9d:9e:0b:99:bd:d6:7c:92:61:1e:a4:
9f:b6:16:8f:bb:3d:a9:6e:fd:c1:5a:7e:e9:6e:45:07:15:52:
71:a9:c4:49:35:94:bd:cb:75:a1:45:cc:3d:de:3f:7e:47:f9:
3d:c8:05:d5:4f:fc:82:9c:33:93:7e:54:59:42:58:5c:50:b7:
9c:3a:d7:47:8c:20:10:cd:35:04:d0:c6:44:ac:a7:6e:84:f0:
3c:ef:4e:b3:d7:89:14:52:18:58:b5:1a:09:e8:b1:7e:68:28:
1b:ef:7b:38:20:99:01:0f:5c:93:af:f1:39:81:9f:81:f8:0a:
8a:4b:ea:9f:f4:5e:b1:c1:1b:be:fb:3f:21:6c:e6:e0:e1:1e:
5e:7a:2a:68:43:b2:94:67:59:3e:26:be:4d:4d:4c:a8:88:6d:
87:2c:7f:f2:7b:02:3d:e6:38:da:b7:a7:94:0f:d9:ae:f4:ed:
b2:d5:bd:86:fe:66:bb:30:7d:db:1e:b7:bc:a9:30:43:6d:a7:
86:4b:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:27 2026 by rpki-client