Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: RA3DYwbpnUpm0MPFw04r0G1HYWdS5913QKPuwvdoMq8=
Subject key identifier: 65:DA:E7:F0:B0:5E:C4:9B:4F:BA:E6:8B:49:41:DE:89:31:71:F7:EA
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019D9850469B467570215B7F4E4A5B7BCF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 18EB
Signing time: Thu 16 Apr 2026 22:01:30 +0000
Manifest this update: Thu 16 Apr 2026 22:01:30 +0000
Manifest next update: Fri 17 Apr 2026 22:01:30 +0000
Files and hashes: 1: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: DEWYFwM1MNVYgtHdvknm+tV/bLXXWDjBOxxMbj81q6I=)
2: coRfEXrfHGck2d3kTCu4-WIF828.roa (hash: seMqqalk2GBduoeIME3C50KibF4OKg4MDnKjSiFIduo=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:46:9b:46:75:70:21:5b:7f:4e:4a:5b:7b:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Apr 16 22:01:30 2026 GMT
Not After : Apr 17 22:01:30 2026 GMT
Subject: CN=65dae7f0b05ec49b4fbae68b4941de893171f7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:6a:cd:f8:9e:c5:2d:15:72:4f:05:90:b9:
98:f0:d4:0d:1d:90:60:5e:32:d8:fa:9f:a6:c5:54:
60:5b:ae:0d:a4:a0:6a:94:1b:ff:01:b0:eb:db:e3:
fb:db:f5:76:a4:96:70:4e:ad:99:97:42:d3:ce:a3:
ec:fe:a9:ba:a6:9f:61:66:62:0a:04:f4:01:cc:a1:
88:4c:02:23:06:57:8b:51:dd:10:47:9a:d2:0b:3d:
b6:50:2a:50:7f:70:20:81:4a:44:6c:63:2c:df:e8:
27:dc:dd:2a:9d:6c:14:7f:9e:a4:4b:c2:b2:e0:7e:
48:c5:49:ce:e0:a1:ae:6e:a3:5c:cd:3c:6d:1e:ef:
7c:dd:eb:b2:4d:64:e6:cb:5f:23:dc:1c:cf:f7:43:
5b:5c:ad:19:71:a0:24:46:ad:24:e9:ac:34:91:a6:
37:7e:14:fb:e8:fe:01:6b:b7:e6:eb:60:a2:df:6b:
00:73:23:3e:83:ff:c4:ae:b8:9b:51:e5:9a:13:5d:
c7:45:43:05:b8:f9:d2:9c:ec:c1:49:cd:4a:16:39:
1d:0a:cc:8e:64:31:83:8d:34:10:1b:00:41:2b:1c:
b8:eb:b9:18:a1:16:49:fb:9c:d8:a4:24:7a:e1:d6:
0d:6f:8b:09:18:91:23:08:a5:b6:d6:94:ee:90:86:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DA:E7:F0:B0:5E:C4:9B:4F:BA:E6:8B:49:41:DE:89:31:71:F7:EA
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6d:21:61:c9:b4:36:09:ce:38:02:ab:ee:ed:99:44:1e:70:
43:66:61:68:00:f0:7c:79:f2:ec:72:4b:dc:22:f3:30:92:ba:
1a:07:13:49:0c:09:10:23:73:b7:13:f6:3e:32:fd:33:2f:48:
fa:8f:d3:75:53:4d:4c:62:54:32:78:5d:a6:65:2b:6a:a8:90:
d6:ed:5b:11:36:e8:2f:cf:59:1e:db:93:1f:9a:59:99:aa:61:
7a:d0:e3:10:4b:c8:29:2b:5f:4c:12:03:73:a0:5d:9d:ee:4d:
ab:3b:b2:63:26:ce:00:a1:ec:c0:be:bc:e1:05:da:bb:05:3c:
ab:a4:4f:08:88:ff:e7:d6:87:bc:21:8a:05:c4:75:70:1f:af:
e1:57:76:a1:de:fe:eb:dc:38:fc:7f:f4:ed:37:e9:79:11:90:
65:c0:ff:8f:e4:1b:0b:ae:c5:85:97:5f:78:4c:6f:d5:72:45:
1e:e1:06:9b:b1:b9:17:02:e3:d9:ae:5e:f6:d9:96:df:1a:22:
c1:93:46:0a:b2:7a:4f:a7:c9:48:94:9d:59:db:54:04:40:1d:
c0:02:1f:18:98:07:12:1e:0a:0b:7a:c6:70:be:31:59:19:ec:
a8:54:c8:64:b8:3b:0f:e5:96:81:1f:30:73:f3:d4:7d:ea:a6:
9c:d4:fc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUEabRnVwIVt/Tkpbe8+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDZiZjFmZjgxNmJlMGJhNGM2MjE3MTIzNDIzMzBhOWZh
ZDhiZGEwHhcNMjYwNDE2MjIwMTMwWhcNMjYwNDE3MjIwMTMwWjAzMTEwLwYDVQQD
Eyg2NWRhZTdmMGIwNWVjNDliNGZiYWU2OGI0OTQxZGU4OTMxNzFmN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycpqzfiexS0Vck8FkLmY8NQNHZBg
XjLY+p+mxVRgW64NpKBqlBv/AbDr2+P72/V2pJZwTq2Zl0LTzqPs/qm6pp9hZmIK
BPQBzKGITAIjBleLUd0QR5rSCz22UCpQf3AggUpEbGMs3+gn3N0qnWwUf56kS8Ky
4H5IxUnO4KGubqNczTxtHu983euyTWTmy18j3BzP90NbXK0ZcaAkRq0k6aw0kaY3
fhT76P4Ba7fm62Ci32sAcyM+g//ErribUeWaE13HRUMFuPnSnOzBSc1KFjkdCsyO
ZDGDjTQQGwBBKxy467kYoRZJ+5zYpCR64dYNb4sJGJEjCKW21pTukIYr8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXa5/CwXsSbT7rmi0lB3okxcffqMB8GA1UdIwQY
MBaAFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUt
YjhkYjE1YjUzMWEyLzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUtYjhkYjE1YjUzMWEy
LzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATW0hYcm0
NgnOOAKr7u2ZRB5wQ2ZhaADwfHny7HJL3CLzMJK6GgcTSQwJECNztxP2PjL9My9I
+o/TdVNNTGJUMnhdpmUraqiQ1u1bETboL89ZHtuTH5pZmaphetDjEEvIKStfTBID
c6Bdne5NqzuyYybOAKHswL684QXauwU8q6RPCIj/59aHvCGKBcR1cB+v4Vd2od7+
69w4/H/07TfpeRGQZcD/j+QbC67FhZdfeExv1XJFHuEGm7G5FwLj2a5e9tmW3xoi
wZNGCrJ6T6fJSJSdWdtUBEAdwAIfGJgHEh4KC3rGcL4xWRnsqFTIZLg7D+WWgR8w
c/PUfeqmnNT8Nw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:00 2026 by rpki-client