Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: 1TldUqBtjJ0BusS0AEPQ5Efcb+HiBlZupobjoatva7Q=
Subject key identifier: 38:D3:7F:75:F3:7B:D6:47:9E:8A:F1:4E:A3:A4:10:1A:52:8E:0C:70
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 019D9A3E87695921D346F40D47858D25AB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 07:01:22 +0000
Manifest this update: Fri 17 Apr 2026 07:01:22 +0000
Manifest next update: Sat 18 Apr 2026 07:01:22 +0000
Files and hashes: 1: GpZIgv126Cl3UoGhkY1Uvof1iPY.roa (hash: fP30v2kEF8neAtWHSrqD3PG/OVeu+YIU3qixidi5CQc=)
2: meduvkE4g-7_NYzpwBUpuDy0fCw.roa (hash: Ch8KIvSk+wsICXuHTJIlbbBxjJkAmiuMMWx8HiiHkT4=)
3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: nh4K/yxI4/+i9vsyB1OAUhLsf77pBcRE7TWQTmS5qzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:87:69:59:21:d3:46:f4:0d:47:85:8d:25:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Apr 17 07:01:22 2026 GMT
Not After : Apr 18 07:01:22 2026 GMT
Subject: CN=38d37f75f37bd6479e8af14ea3a4101a528e0c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a4:5a:c2:24:b1:be:19:61:dc:65:33:40:9a:
03:59:38:e3:f1:af:f3:8b:bb:6f:09:88:35:3b:05:
20:1a:0f:26:da:81:ce:27:9a:77:a6:7c:f1:a9:dd:
d3:cb:0b:50:ad:90:68:5b:c1:22:10:67:21:cd:ec:
61:fb:3e:67:92:0b:0d:2b:7c:9e:ba:5c:20:d6:93:
03:dd:a4:01:f8:13:ea:00:af:8a:f5:a2:a2:89:d4:
3e:d2:7f:74:6c:57:f4:42:0f:27:4b:67:28:65:1c:
6c:7e:fb:0e:96:64:f1:f6:66:ee:20:57:63:57:0b:
cc:5d:b0:74:d3:66:6f:d0:39:72:6d:9a:57:82:7f:
a1:10:5d:01:45:09:56:4e:aa:7a:92:7c:f7:7a:f9:
09:2d:a8:3f:1b:a6:59:10:d2:19:65:16:ea:b6:bd:
01:9e:15:66:a6:b5:f6:e5:3a:3b:f1:68:ab:65:00:
90:85:30:96:48:57:83:fe:ba:90:2e:76:22:f8:1d:
94:28:1c:ca:8e:cb:fd:98:b9:6e:b7:78:ca:70:21:
0c:99:34:b9:be:d8:c7:9b:83:36:2b:12:c2:f8:d4:
6e:3b:69:8e:d5:58:f6:08:11:fd:63:af:eb:b7:46:
8e:82:74:2a:4c:d5:84:b5:a1:36:ed:0f:a2:85:92:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:7F:75:F3:7B:D6:47:9E:8A:F1:4E:A3:A4:10:1A:52:8E:0C:70
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:43:3e:9c:0b:66:3b:4b:c3:92:74:48:60:86:06:66:a1:44:
d9:df:7d:ab:aa:c7:43:17:09:ad:97:e5:5f:4d:20:74:82:73:
fe:00:1f:50:6f:a9:1e:2b:ca:d8:73:89:74:63:d5:96:d0:e5:
bf:9b:ca:99:25:41:01:ad:da:fe:89:4c:7f:7f:67:a7:c1:9f:
2a:a5:fd:17:b3:16:fe:0b:70:4f:8c:f8:cd:3b:3d:bb:9e:d9:
ed:2d:c1:9a:ce:46:98:80:62:c2:67:10:a1:44:38:50:64:82:
f5:34:40:85:c8:59:65:fd:e8:51:95:0f:5f:19:7d:45:c4:2a:
29:70:54:fc:90:f7:b7:7e:20:ce:84:ff:28:68:e0:a2:d9:bb:
29:e3:e9:d5:f2:7a:5b:04:ae:55:17:ef:91:a2:5c:02:34:3e:
0c:91:91:4b:45:29:2b:b4:1c:31:95:ea:3a:74:bb:cd:a5:c1:
0b:f0:b6:54:fb:da:0f:b4:00:87:2d:ba:35:ea:f1:dd:b0:0e:
f9:52:a1:56:27:9b:b4:fc:09:1a:e2:b8:cc:66:b6:19:97:d8:
b0:c1:0d:1c:76:03:fd:5c:06:85:38:c3:66:66:21:c9:27:b5:
ea:d9:47:50:6d:bf:66:a9:29:e4:3c:98:94:25:ce:e9:93:11:
37:f5:ba:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPodpWSHTRvQNR4WNJas6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTc5MWE1ODExYzdmNmVkODFmZDQ0MWI1MDI2NWFmNWU5
YzYxYjAwHhcNMjYwNDE3MDcwMTIyWhcNMjYwNDE4MDcwMTIyWjAzMTEwLwYDVQQD
EygzOGQzN2Y3NWYzN2JkNjQ3OWU4YWYxNGVhM2E0MTAxYTUyOGUwYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66RawiSxvhlh3GUzQJoDWTjj8a/z
i7tvCYg1OwUgGg8m2oHOJ5p3pnzxqd3TywtQrZBoW8EiEGchzexh+z5nkgsNK3ye
ulwg1pMD3aQB+BPqAK+K9aKiidQ+0n90bFf0Qg8nS2coZRxsfvsOlmTx9mbuIFdj
VwvMXbB002Zv0DlybZpXgn+hEF0BRQlWTqp6knz3evkJLag/G6ZZENIZZRbqtr0B
nhVmprX25To78WirZQCQhTCWSFeD/rqQLnYi+B2UKBzKjsv9mLlut3jKcCEMmTS5
vtjHm4M2KxLC+NRuO2mO1Vj2CBH9Y6/rt0aOgnQqTNWEtaE27Q+ihZKMrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjTf3Xze9ZHnorxTqOkEBpSjgxwMB8GA1UdIwQY
MBaAFMUXkaWBHH9u2B/UQbUCZa9enGGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEt
ODE5MTY0YjkyYjg4LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEtODE5MTY0YjkyYjg4
LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEM+nAtm
O0vDknRIYIYGZqFE2d99q6rHQxcJrZflX00gdIJz/gAfUG+pHivK2HOJdGPVltDl
v5vKmSVBAa3a/olMf39np8GfKqX9F7MW/gtwT4z4zTs9u57Z7S3Bms5GmIBiwmcQ
oUQ4UGSC9TRAhchZZf3oUZUPXxl9RcQqKXBU/JD3t34gzoT/KGjgotm7KePp1fJ6
WwSuVRfvkaJcAjQ+DJGRS0UpK7QcMZXqOnS7zaXBC/C2VPvaD7QAhy26Nerx3bAO
+VKhViebtPwJGuK4zGa2GZfYsMENHHYD/VwGhTjDZmYhySe16tlHUG2/Zqkp5DyY
lCXO6ZMRN/W6SQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:09 2026 by rpki-client