Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: o3tW1Xfxk/dHIQkvyaQWm9pfwtjsB+xKFg0BOCoi0m0=
Subject key identifier: A8:05:F7:BD:89:52:6B:D6:6B:A9:FF:6E:8B:33:EF:74:B2:D7:E4:B5
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019D99D09D48D7E2B4FFC605128D887E290E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 15C9
Signing time: Fri 17 Apr 2026 05:01:18 +0000
Manifest this update: Fri 17 Apr 2026 05:01:18 +0000
Manifest next update: Sat 18 Apr 2026 05:01:18 +0000
Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: eHlrfINuNJr5hj07w64DU9iEWVmd025+0hrhn19wtDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9d:48:d7:e2:b4:ff:c6:05:12:8d:88:7e:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Apr 17 05:01:18 2026 GMT
Not After : Apr 18 05:01:18 2026 GMT
Subject: CN=a805f7bd89526bd66ba9ff6e8b33ef74b2d7e4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:6a:96:86:4a:2c:90:6c:16:d8:a7:f9:51:
e2:1f:48:4c:1c:4f:05:40:e7:27:a5:58:e6:62:dd:
ad:c0:4e:2a:0f:b1:4a:3d:b7:38:d6:1a:40:c5:a7:
99:e4:a2:b5:50:de:01:b0:c4:31:15:11:a4:09:1a:
91:15:69:80:53:d6:ac:7b:ed:35:b5:4a:77:2e:c9:
39:09:dc:d7:19:7d:bf:3c:2f:6e:3e:3e:61:15:62:
4c:a2:01:47:b5:08:1b:06:ca:e9:aa:ac:58:d9:05:
b3:2f:17:0f:41:b6:3d:10:b8:fb:b6:d4:35:95:14:
34:38:c3:a1:be:90:51:10:ac:c9:a7:71:19:be:ce:
c2:41:b7:aa:79:ee:21:9f:d6:ef:43:d9:cc:cf:ea:
82:c0:cc:8b:cc:de:8c:bf:88:22:65:4b:c0:5a:ec:
b7:ff:45:23:7d:f7:ad:3a:26:f7:c6:16:b2:b7:9b:
7a:63:8e:1d:ae:54:92:d1:e2:b2:8f:c4:61:d1:94:
c3:6b:38:6f:54:6c:02:4d:36:73:94:86:b4:8e:ed:
68:f7:4a:15:50:fe:ec:6d:18:89:c8:42:fe:0f:7f:
bc:e5:ee:cc:9c:c9:64:45:68:62:52:d7:c6:c9:3c:
4f:14:97:63:51:83:30:5b:28:90:00:47:52:1e:8c:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:F7:BD:89:52:6B:D6:6B:A9:FF:6E:8B:33:EF:74:B2:D7:E4:B5
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:72:6b:6d:62:28:97:df:86:31:b5:ca:eb:f5:38:3f:c9:c1:
70:07:45:cd:1b:8c:06:3d:a1:83:88:47:52:76:ef:9b:77:49:
76:51:40:e5:92:15:ec:6c:31:d8:70:e9:ee:74:43:c7:f3:55:
f9:e1:1e:7c:6b:5b:81:ad:82:ec:e6:f4:de:7d:e8:e2:c6:c5:
4d:ce:b5:54:a5:f3:4b:f5:11:fd:05:36:bf:1b:ba:43:61:2c:
4d:c2:d7:11:55:f0:c1:1a:d1:07:e6:d8:32:09:24:4a:64:d2:
45:98:37:11:7d:3b:87:38:bd:d3:8a:0e:45:89:67:3f:fc:e2:
9c:3c:74:1c:b2:d5:cc:91:7d:78:59:e7:2b:4f:3e:e3:bd:82:
c2:51:77:be:39:d6:4b:c6:ed:b3:fb:44:fe:51:88:1e:2c:31:
75:ba:44:3e:14:c5:dd:01:a8:a4:3d:6c:e2:78:8f:ba:a9:a1:
6e:48:e3:2e:fe:2b:5d:82:73:79:5a:7d:6f:6f:17:48:52:14:
f5:af:ef:e7:e8:e1:ba:b1:19:85:b5:21:c4:e0:d0:13:00:d8:
33:25:94:18:e2:8c:ad:23:e8:d9:4b:7d:42:f1:c3:fb:53:4c:
94:40:4d:87:eb:af:c2:e4:a1:0e:72:e7:fe:c2:6d:ef:30:67:
b6:15:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:47 2026 by rpki-client