Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: sb5yVnWKSxVNoOS9DI5r79Tz041FntLHyBQWvpgw/q8=
Subject key identifier: 4B:57:96:A9:A5:84:49:40:FA:D3:DC:89:BF:A1:60:9E:1C:40:E8:3B
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 019D9A3E0E14B2BA0DDB8773BCB8FA417E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 0625
Signing time: Fri 17 Apr 2026 07:00:51 +0000
Manifest this update: Fri 17 Apr 2026 07:00:51 +0000
Manifest next update: Sat 18 Apr 2026 07:00:51 +0000
Files and hashes: 1: 2DuCV_W-U_DjGo5XDf9E-S3sShM.roa (hash: cc9HcaIk4ywCecPBpWCavoWGQGYzOyoXbURNvhX6CYg=)
2: UF4pzZ4nyW6OV0vWDdSDtWl2FC4.roa (hash: i7rT7fXaiMm+2WOfWQg8Ficq8leAUCxuWRS6LiqQgSo=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: SjSeo5XJ68Qi+EzVetQdlnsd1TQ0AMoHQrogV72a7Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0e:14:b2:ba:0d:db:87:73:bc:b8:fa:41:7e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Apr 17 07:00:51 2026 GMT
Not After : Apr 18 07:00:51 2026 GMT
Subject: CN=4b5796a9a5844940fad3dc89bfa1609e1c40e83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:60:85:5b:3d:ec:8e:40:d0:b7:61:18:9c:
00:ce:c0:68:a6:8b:9e:58:a5:ba:01:a7:ca:c5:93:
e0:1e:da:e2:d5:c2:af:d1:c2:16:f6:10:77:11:d4:
73:49:14:47:02:46:59:d9:b8:18:9a:05:41:e6:2b:
5f:1c:f7:93:00:fe:02:9e:61:7a:2e:37:99:0e:97:
d5:26:f4:2c:0f:55:98:82:ab:a5:e8:53:d2:e8:64:
20:0a:26:66:65:77:03:74:07:f4:d6:07:7c:5e:69:
de:ee:c1:a5:18:cd:74:3a:47:c9:0e:7a:9e:4a:75:
51:98:8c:c9:b8:65:3d:82:be:ea:3d:9b:ad:74:4c:
41:bc:c1:a1:ab:c3:99:fc:8d:a2:ca:b9:df:35:e2:
21:4b:4a:9e:dd:6a:dd:10:61:6c:31:f3:33:2e:42:
c2:98:1d:0c:41:12:6b:c6:a0:57:fd:35:58:ff:61:
e7:06:cb:f7:53:e9:6c:43:e9:8b:ba:e0:cc:9f:ce:
ca:27:8b:39:8f:10:6e:78:90:34:1c:d2:97:a3:2b:
8f:4d:8b:0e:4b:c6:e6:30:a6:9f:c4:c9:93:69:1c:
d9:8c:9a:6a:b8:02:bb:26:1e:de:b9:61:2b:be:c1:
1d:9d:11:06:d6:02:27:46:e7:72:e6:f7:83:93:7c:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:57:96:A9:A5:84:49:40:FA:D3:DC:89:BF:A1:60:9E:1C:40:E8:3B
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:76:5b:af:a4:00:a0:9a:9f:58:2a:4c:92:81:4e:bb:4b:86:
c0:7d:ce:8b:8a:ae:75:81:75:6d:7b:9e:3e:2d:90:14:e8:0e:
e1:53:87:70:e7:6e:71:94:7a:93:be:24:9c:1c:22:ba:87:75:
c1:c6:6e:89:8f:16:48:27:85:f2:ee:b1:86:f7:63:d1:2d:21:
a4:a0:04:34:ab:2c:68:cb:4b:75:00:83:db:be:6a:1d:57:6a:
40:93:ca:df:27:51:06:92:84:7e:45:13:9f:5a:b4:e7:41:77:
2e:c2:ac:cc:7f:b7:20:03:17:cd:07:96:38:2a:11:45:59:f4:
ef:81:f8:98:a9:b6:7c:f4:96:b2:35:ef:51:f8:5f:a1:3e:77:
0f:2f:99:d6:c7:83:af:0c:ef:b1:5b:80:2c:fb:73:5a:06:55:
62:63:8e:4e:6e:12:5f:9c:f7:2c:8b:84:d5:e0:08:46:af:de:
f9:8c:4d:b1:8f:7f:ff:d1:aa:e1:30:92:24:b4:94:30:44:7a:
31:09:dd:e8:06:d9:32:e3:61:74:70:e5:e3:a0:7d:8a:d6:41:
49:3a:16:99:0b:5f:97:fe:c0:0f:c2:81:16:ec:9e:af:4d:6f:
b2:26:31:15:3e:ea:91:a0:3b:2b:0f:79:6c:70:9e:4a:c3:ad:
49:fc:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:40 2026 by rpki-client