Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: EtRlkN2np9v5eWLKOasIVLbQO2tuj6LqaZViKx4mIQc=
Subject key identifier: 25:36:8D:48:2E:E0:9D:5E:F9:5D:9C:A2:19:0F:07:91:33:A1:51:F7
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019D9AAB7B195FFA261FCFF1B638EBACA256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0915
Signing time: Fri 17 Apr 2026 09:00:22 +0000
Manifest this update: Fri 17 Apr 2026 09:00:22 +0000
Manifest next update: Sat 18 Apr 2026 09:00:22 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: oz9KB3mdQWlRHKVBSzY9ttI0CukmvtMDxEYYJoyOJr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7b:19:5f:fa:26:1f:cf:f1:b6:38:eb:ac:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Apr 17 09:00:22 2026 GMT
Not After : Apr 18 09:00:22 2026 GMT
Subject: CN=25368d482ee09d5ef95d9ca2190f079133a151f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:a2:e5:93:39:db:0e:9d:68:d4:a1:c5:d5:
45:3d:fe:db:ad:4d:01:a5:fe:ed:e2:b2:53:60:c0:
b7:99:89:18:72:d9:48:24:7c:bb:41:02:84:a5:b6:
b2:f0:a6:a5:f3:7c:fe:c4:21:f0:0d:d0:47:b3:a8:
8d:32:78:a5:16:60:f2:54:cc:4c:08:b3:c1:5b:3b:
14:c4:05:ee:5a:b1:41:b0:82:67:8a:d6:c0:b2:42:
16:81:87:7f:c4:7b:c4:14:0a:6e:06:d0:97:de:c2:
3a:9b:db:15:dc:44:95:d8:94:be:02:13:1d:77:47:
cf:cc:f5:1c:f2:2a:cc:0f:b4:b5:98:08:c0:7f:91:
0b:91:e4:18:1a:49:76:2b:4d:a1:f2:c9:09:1b:83:
60:fb:19:a4:ca:9b:bf:9f:c5:1e:27:15:ee:f3:ec:
b0:6a:3c:a1:70:f8:78:ec:b5:68:e3:82:0f:7c:2c:
53:dd:13:fb:e8:7a:bc:61:d0:e1:39:a7:42:bf:97:
bc:b8:e1:85:5f:3f:be:44:3b:28:ef:c5:e3:c3:52:
dd:96:23:13:18:c0:81:6f:87:df:94:29:0b:72:64:
73:12:7a:56:a6:57:69:3e:5d:21:4a:4a:4b:ad:f2:
e2:59:c0:1f:35:92:35:9a:3f:46:0d:83:69:a7:b8:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:36:8D:48:2E:E0:9D:5E:F9:5D:9C:A2:19:0F:07:91:33:A1:51:F7
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:a4:b8:b8:c7:9d:98:08:6a:10:36:70:77:f0:16:aa:04:
9f:e7:b9:e5:3f:4f:a6:38:d6:4d:f0:aa:b3:7a:d4:24:04:d2:
58:f1:74:48:d9:85:4e:e1:92:42:16:d7:0f:46:f1:3c:ac:8b:
35:41:74:20:a2:88:4d:dd:37:93:07:88:54:1a:55:a3:9d:4b:
43:27:1f:3f:f9:2d:a9:06:60:c7:3c:e2:71:ba:6f:29:da:32:
8d:72:0f:2d:39:f1:f6:ff:18:ad:54:04:fe:0b:27:98:ca:33:
1a:83:05:25:7e:bb:5d:a2:20:93:b8:e0:db:2f:10:10:0a:5a:
a5:19:d7:98:68:35:90:ee:73:67:13:49:90:79:5d:f9:74:4d:
37:49:76:58:3a:1c:75:fa:c4:52:2b:60:19:18:85:e6:f3:53:
98:90:5a:49:5f:bb:9c:f4:b6:af:15:a7:ea:24:ad:da:73:83:
1d:8c:e6:9f:4b:ca:62:44:37:99:ed:d0:96:4c:fd:ee:9b:ae:
54:a9:e7:d6:c9:08:df:25:41:8b:27:22:bb:9b:3f:a5:2e:2a:
6b:db:51:c3:39:60:25:db:1c:6a:9f:eb:83:93:fe:c2:72:27:
ca:11:5f:ae:35:0f:56:c8:73:8f:24:e0:10:fc:58:fc:0d:53:
66:6b:29:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq3sZX/omH8/xtjjrrKJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTg1MDE3M2M4ZDI4ZDVhZmJmOTEwOTFjYTYzZTVkYTNj
NzVlZDQwHhcNMjYwNDE3MDkwMDIyWhcNMjYwNDE4MDkwMDIyWjAzMTEwLwYDVQQD
EygyNTM2OGQ0ODJlZTA5ZDVlZjk1ZDljYTIxOTBmMDc5MTMzYTE1MWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Wi5ZM52w6daNShxdVFPf7brU0B
pf7t4rJTYMC3mYkYctlIJHy7QQKEpbay8Kal83z+xCHwDdBHs6iNMnilFmDyVMxM
CLPBWzsUxAXuWrFBsIJnitbAskIWgYd/xHvEFApuBtCX3sI6m9sV3ESV2JS+AhMd
d0fPzPUc8irMD7S1mAjAf5ELkeQYGkl2K02h8skJG4Ng+xmkypu/n8UeJxXu8+yw
ajyhcPh47LVo44IPfCxT3RP76Hq8YdDhOadCv5e8uOGFXz++RDso78Xjw1LdliMT
GMCBb4fflCkLcmRzEnpWpldpPl0hSkpLrfLiWcAfNZI1mj9GDYNpp7iirQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU2jUgu4J1e+V2cohkPB5EzoVH3MB8GA1UdIwQY
MBaAFMYYUBc8jSjVr7+RCRymPl2jx17UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUt
YmI4ZGViYzAwMzg4LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUtYmI4ZGViYzAwMzg4
LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCCkuLjH
nZgIahA2cHfwFqoEn+e55T9PpjjWTfCqs3rUJATSWPF0SNmFTuGSQhbXD0bxPKyL
NUF0IKKITd03kweIVBpVo51LQycfP/ktqQZgxzzicbpvKdoyjXIPLTnx9v8YrVQE
/gsnmMozGoMFJX67XaIgk7jg2y8QEApapRnXmGg1kO5zZxNJkHld+XRNN0l2WDoc
dfrEUitgGRiF5vNTmJBaSV+7nPS2rxWn6iSt2nODHYzmn0vKYkQ3me3Qlkz97puu
VKnn1skI3yVBiyciu5s/pS4qa9tRwzlgJdscap/rg5P+wnInyhFfrjUPVshzjyTg
EPxY/A1TZmsptw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:24 2026 by rpki-client