
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json)
Hash identifier: hJhSuwNjoOKnVrfQf6kNquCPfaYHHIbeCsS29T0yawA=
Subject key identifier: C3:C2:95:54:3C:97:FA:38:3A:D2:83:E7:A4:2F:E1:49:04:FC:7F:9A
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial: 019D99D052A8F270D84BBBFB9608AD122EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 05:00:59 +0000
Manifest this update: Fri 17 Apr 2026 05:00:59 +0000
Manifest next update: Sat 18 Apr 2026 05:00:59 +0000
Files and hashes: 1: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: bMWqDUd74wu96KXgeBS3jEtqvG0RnvPHDW9AWaHVKA0=)
2: iySFhGXQivVeNiYNcwNxNkr5M5Q.roa (hash: s7fnZRm48jv69+txxsHKvfOf99fkU33jy9Ytdqac+f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:52:a8:f2:70:d8:4b:bb:fb:96:08:ad:12:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Validity
Not Before: Apr 17 05:00:59 2026 GMT
Not After : Apr 18 05:00:59 2026 GMT
Subject: CN=c3c295543c97fa383ad283e7a42fe14904fc7f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:8c:fc:a7:a3:de:65:21:25:f6:45:bb:ed:
af:d2:0c:0c:06:14:e8:62:fc:50:68:fb:c4:f3:2a:
4d:72:63:97:db:54:b6:29:14:dc:5e:af:fe:8d:3f:
5c:12:db:fa:c7:af:30:ff:ea:a9:34:b9:20:33:89:
c4:85:c9:a5:6f:75:8e:03:4a:99:dc:c4:87:86:44:
69:72:f8:fd:cf:93:0c:ad:a6:df:bd:5c:c9:f3:7b:
4f:ba:87:85:a4:7d:72:9a:f0:bb:12:fa:2b:b1:29:
a7:de:19:0a:2d:6a:a7:b8:bd:ff:ae:96:70:f4:9e:
5b:80:11:98:4e:fe:57:13:17:7d:33:f3:27:71:d4:
fc:c9:e5:ff:c8:ff:3e:a6:63:89:db:3f:08:8a:ef:
80:9b:78:7c:eb:b3:36:ab:8e:8e:fa:dc:41:08:9c:
3a:52:0e:77:d3:f0:89:b4:4e:a9:d4:da:48:61:32:
d8:20:ba:58:8e:dd:8a:a5:35:66:31:87:25:5e:8f:
69:e5:f8:e0:f0:47:d0:b9:37:cf:06:d0:53:8b:73:
57:36:5c:4f:c0:66:2d:94:e0:6c:f9:27:a3:54:fd:
c5:c6:b3:96:63:2c:94:37:16:fc:ed:a8:66:3a:b6:
15:3e:0a:dd:62:22:c0:9f:f1:35:40:6f:f4:00:e6:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:95:54:3C:97:FA:38:3A:D2:83:E7:A4:2F:E1:49:04:FC:7F:9A
X509v3 Authority Key Identifier:
keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fd:27:9b:73:0e:9c:c4:ce:48:57:c3:54:20:4e:f8:c7:af:
a4:e5:81:dd:3e:55:04:09:ca:ed:65:5f:a6:01:0a:21:71:4d:
d4:68:26:85:16:79:01:cc:cd:5e:c2:a3:5a:45:22:34:5f:66:
6a:45:ea:07:5d:bc:b7:84:63:82:91:04:92:26:89:37:df:b8:
08:8b:c4:a9:7a:80:18:17:4d:f9:e9:c1:5e:a5:fb:42:a1:f9:
48:73:a6:78:00:45:ba:f6:c3:09:eb:18:72:86:a2:83:cd:7a:
d3:d6:9a:7c:c5:9e:28:79:e0:aa:de:08:87:fa:c4:df:30:2c:
a5:76:5a:a7:65:de:f8:53:6b:60:5e:d4:40:c8:b8:6e:c6:63:
8a:69:29:33:76:2f:7d:73:3f:33:63:ff:24:f3:04:a8:31:d9:
36:58:cf:64:a3:c1:2b:4c:10:23:58:41:d4:02:2f:28:a1:7e:
89:1a:9f:8a:0e:63:51:1a:97:f8:00:b1:52:86:21:f1:b4:48:
d0:c9:c6:87:ac:f0:21:bd:65:da:f7:c1:d6:ce:b8:d4:c3:8a:
15:58:5e:7e:8e:87:67:f2:a4:e8:b5:60:0a:43:c8:26:02:34:
4e:c6:c1:1a:9e:6e:3d:a5:0e:b7:2d:c4:ba:7d:7b:9c:5a:a6:
13:40:1f:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0FKo8nDYS7v7lgitEi7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGNiNmRhMzU4YThkMmQyNzBjMzA1ZjhiNjFmM2M5OTBk
NTc2NmUwHhcNMjYwNDE3MDUwMDU5WhcNMjYwNDE4MDUwMDU5WjAzMTEwLwYDVQQD
EyhjM2MyOTU1NDNjOTdmYTM4M2FkMjgzZTdhNDJmZTE0OTA0ZmM3ZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fuM/Kej3mUhJfZFu+2v0gwMBhTo
YvxQaPvE8ypNcmOX21S2KRTcXq/+jT9cEtv6x68w/+qpNLkgM4nEhcmlb3WOA0qZ
3MSHhkRpcvj9z5MMrabfvVzJ83tPuoeFpH1ymvC7EvorsSmn3hkKLWqnuL3/rpZw
9J5bgBGYTv5XExd9M/MncdT8yeX/yP8+pmOJ2z8Iiu+Am3h867M2q46O+txBCJw6
Ug530/CJtE6p1NpIYTLYILpYjt2KpTVmMYclXo9p5fjg8EfQuTfPBtBTi3NXNlxP
wGYtlOBs+SejVP3FxrOWYyyUNxb87ahmOrYVPgrdYiLAn/E1QG/0AOYpEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPClVQ8l/o4OtKD56Qv4UkE/H+aMB8GA1UdIwQY
MBaAFF6Mtto1io0tJwwwX4th88mQ1XZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMDI2NjEtYjU5MS00ZjVlLWIzNjkt
Zjc0YTVmMmJjYjQ3LzEvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mMDI2NjEtYjU5MS00ZjVlLWIzNjktZjc0YTVmMmJjYjQ3
LzEvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/0nm3MO
nMTOSFfDVCBO+MevpOWB3T5VBAnK7WVfpgEKIXFN1GgmhRZ5AczNXsKjWkUiNF9m
akXqB128t4RjgpEEkiaJN9+4CIvEqXqAGBdN+enBXqX7QqH5SHOmeABFuvbDCesY
coaig81609aafMWeKHngqt4Ih/rE3zAspXZap2Xe+FNrYF7UQMi4bsZjimkpM3Yv
fXM/M2P/JPMEqDHZNljPZKPBK0wQI1hB1AIvKKF+iRqfig5jURqX+ACxUoYh8bRI
0MnGh6zwIb1l2vfB1s641MOKFVhefo6HZ/Kk6LVgCkPIJgI0TsbBGp5uPaUOty3E
un17nFqmE0AftA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:21 2026 by rpki-client