Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: 7WKq4VkNvhSuVwppj+7egdgrzlOT1/SAnyYEEsokPkQ=
Subject key identifier: E7:27:83:EE:DD:52:6D:E1:8B:E4:A0:6F:13:A0:3E:24:49:DE:AC:3F
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 019D9B5068E4D05465C8B9550DF19EB27895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: DB
Signing time: Fri 17 Apr 2026 12:00:31 +0000
Manifest this update: Fri 17 Apr 2026 12:00:31 +0000
Manifest next update: Sat 18 Apr 2026 12:00:31 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: KiNMgdfJ-jED44ngYXhsk4y4eUo.roa (hash: a7w7sWRkPS/IylXEpEG2ZktzWT1XLIn8MRkkpzcobUA=)
3: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: 4TGlagBO3eWm0PQd11Q10TQ4OI2pZjpldL0F1p2+/MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:68:e4:d0:54:65:c8:b9:55:0d:f1:9e:b2:78:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Apr 17 12:00:31 2026 GMT
Not After : Apr 18 12:00:31 2026 GMT
Subject: CN=e72783eedd526de18be4a06f13a03e2449deac3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:10:8c:fc:92:56:53:74:f1:a0:7a:37:2f:
a9:bc:2e:93:fb:1c:de:c9:88:39:7c:14:3c:18:6c:
ad:a7:e7:47:b1:9b:9f:e9:a3:27:79:03:86:2d:3b:
cd:71:9a:20:ff:26:76:1b:56:05:2c:2e:97:16:1a:
51:b5:8e:a9:c6:8a:9a:df:4e:16:d8:7f:0e:d1:fe:
ca:1f:ce:ce:66:80:1a:8f:08:61:c5:39:62:45:84:
a3:fa:28:de:5d:0a:99:b0:a7:0e:b2:cd:18:3b:ea:
ca:66:f9:7e:74:7c:15:c1:29:15:1d:c5:bd:d1:c6:
4d:b4:b7:2e:14:f0:30:dd:9e:da:ec:b2:33:52:4c:
86:b9:13:4c:be:45:93:04:34:38:fb:cd:bc:2a:32:
9e:35:2e:fa:20:b4:bb:dd:fa:67:f0:86:4c:31:f2:
9f:64:2b:53:d4:d3:2d:e7:54:33:af:de:be:15:59:
68:5e:3c:64:70:a0:56:f4:8a:b4:80:e4:7a:00:3f:
bd:ad:c3:ef:c3:00:ec:9f:2d:b7:c3:6c:98:af:d3:
97:0b:71:9b:4d:57:78:1d:4b:e6:50:84:2e:df:b7:
d5:57:bc:05:89:b7:7f:ec:8b:1b:db:5c:00:06:b9:
f1:24:56:fc:75:a9:7c:9d:02:21:fb:3e:cb:c1:5b:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:27:83:EE:DD:52:6D:E1:8B:E4:A0:6F:13:A0:3E:24:49:DE:AC:3F
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ba:fd:6b:58:9a:6e:f1:39:24:0c:bc:1a:87:0a:72:c0:0f:
d8:7e:6b:76:b7:dc:32:8f:93:b8:28:92:2e:d9:b7:ac:ff:af:
5d:10:df:4e:27:14:06:a5:c0:cd:6f:37:52:5d:bd:26:05:b8:
dd:eb:ce:84:8b:f4:c5:ff:0b:cb:7e:c8:61:a8:a2:52:c2:db:
20:4e:b8:dd:72:c4:46:eb:7e:12:56:2e:1c:6e:9a:a3:db:d8:
e7:90:2c:6b:f6:00:c6:1b:51:b9:87:e5:d4:6a:5f:8a:8d:0a:
c1:a8:2c:9e:ee:69:28:41:f2:1e:8c:fd:0a:db:79:d8:7e:87:
fb:97:38:44:48:b8:33:e7:50:cc:da:32:b5:4e:20:a7:49:bc:
a4:7c:82:e7:8d:e9:8c:1c:86:b5:df:5d:00:19:6c:3c:00:98:
96:c4:87:07:18:8f:19:69:51:e7:9c:90:6d:2e:07:e5:bb:c4:
8d:2f:f2:36:c4:d7:c6:a1:55:48:2a:59:a2:45:03:ed:ce:f2:
3c:ae:2b:a4:81:7d:7f:dc:a1:5e:01:ee:7f:75:96:8b:cd:23:
8b:38:fe:85:bc:d1:a0:b0:26:71:7a:a4:8e:82:36:65:85:8e:
c6:10:93:40:1f:ec:f9:cc:d5:d8:6b:4b:92:7d:28:0b:3f:33:
5e:bb:17:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:16 2026 by rpki-client