Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: neUEd4ByzCsewY0+hY9qK8m+Tykx3ytDzkz45vvKOKA=
Subject key identifier: 4B:A2:BF:7A:51:85:B1:1F:53:60:F2:EC:0F:51:72:5C:53:39:5F:E2
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 019D98F4C56B5BACA452A00BCB8FAF27BF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:11 +0000
Manifest this update: Fri 17 Apr 2026 01:01:11 +0000
Manifest next update: Sat 18 Apr 2026 01:01:11 +0000
Files and hashes: 1: RM6TUZSUSaasZ-dBQ85053ksR-0.roa (hash: v5GrLhG4mT6P4v3eZCOBY4Q0WYXL2CD9LeoqtKdCqz0=)
2: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: hjzj8Ixyo4ynkqjcpi8P4wkOQh83AXcTHisiWlU8VdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c5:6b:5b:ac:a4:52:a0:0b:cb:8f:af:27:bf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Apr 17 01:01:11 2026 GMT
Not After : Apr 18 01:01:11 2026 GMT
Subject: CN=4ba2bf7a5185b11f5360f2ec0f51725c53395fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:ad:4f:09:2c:05:51:05:71:3b:cb:ad:d7:
0a:b2:75:c8:8a:c6:dd:04:63:1a:ec:65:df:3a:53:
fb:92:2b:f5:ee:a5:54:cb:63:c8:f1:07:14:5e:00:
58:44:4a:04:1c:fa:43:41:25:d4:ac:b4:f8:f5:40:
d9:2b:81:f1:a7:f5:79:3f:73:d2:2a:e6:e9:d2:5b:
b1:4a:4f:e3:b9:cd:88:95:6b:ee:df:c6:a1:94:97:
24:a9:fd:cd:65:de:99:97:e8:6e:2f:a6:48:5e:03:
c9:3a:6c:3d:fc:fa:cb:2a:6d:9f:ad:d6:81:75:76:
41:26:a1:24:47:8d:5a:4b:7f:60:4c:97:20:51:7d:
e6:b8:91:85:df:78:68:f8:95:43:a4:68:42:e5:e4:
c5:d5:1c:9e:f6:ad:dd:6d:dc:4f:4b:62:e3:89:c6:
33:45:85:81:33:75:6a:64:23:b9:b2:c9:a1:95:a5:
b2:72:42:92:27:eb:ea:ae:74:aa:79:41:a8:ae:38:
2a:bf:d4:91:9d:af:bc:8b:c6:f1:d6:01:ad:73:3a:
c0:70:8f:a7:9d:4c:3c:88:f8:68:4f:04:d2:6f:be:
0b:6f:03:bf:0b:ba:eb:48:09:41:4d:52:ee:bd:c5:
39:36:b4:d0:8c:06:ae:e4:3e:76:7e:86:6a:7a:dd:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A2:BF:7A:51:85:B1:1F:53:60:F2:EC:0F:51:72:5C:53:39:5F:E2
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b5:cc:f2:ca:55:77:ad:33:b4:e5:6b:45:8c:fa:51:df:5a:
e2:2d:19:66:e6:c8:51:bf:21:db:3a:ea:30:56:77:2d:d5:47:
47:30:7b:92:be:f6:5e:67:75:29:1a:0f:b4:e7:f1:33:e6:9f:
c1:d1:bb:bb:72:32:03:81:30:80:7c:6a:2f:e0:fc:b2:d8:9a:
d5:a5:67:db:d8:1e:84:dc:b4:85:a4:37:3e:b9:07:5f:b4:f3:
44:56:fc:19:9b:10:5e:ce:c5:34:d8:ea:8b:e3:07:68:94:bf:
f1:a2:27:4a:32:b6:af:4b:a9:3f:10:7f:0a:4f:bf:56:aa:2b:
f6:c6:a9:66:f4:6e:2d:dc:d7:13:dd:e0:b7:21:8c:c8:ae:3d:
e9:1a:a6:bf:ad:de:1a:45:63:e1:94:2b:e6:33:11:0d:29:0b:
45:83:bb:fb:2c:5e:c6:bc:b7:1a:d6:99:a4:e1:dc:5e:e5:da:
fb:ae:d3:2c:d6:84:8d:d3:d0:11:bc:ba:6a:21:f6:b6:c4:1a:
58:77:dc:a1:dc:6e:a9:33:bc:9a:81:ef:c6:f5:8e:bb:74:34:
f3:20:13:83:08:89:07:02:42:08:c3:f4:28:30:39:3d:78:0d:
d0:86:12:24:59:61:6e:57:07:12:25:ec:84:dc:4a:a8:cb:0f:
46:02:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:04 2026 by rpki-client