Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: 9k7j4By44N8I2I8AD3aQCkKaRhG/GcdWsLf+JBbDuzo=
Subject key identifier: 28:70:85:D3:BD:58:AF:C2:DA:BD:2C:DC:09:FC:E7:AE:1F:61:A4:C7
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 019D9850322B361647B653B40F8F529786A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 17FD
Signing time: Thu 16 Apr 2026 22:01:25 +0000
Manifest this update: Thu 16 Apr 2026 22:01:25 +0000
Manifest next update: Fri 17 Apr 2026 22:01:25 +0000
Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: kSdOX9PFIIxW78MKNdbM9TKTmGMuZkqHe3p6ejztP14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:32:2b:36:16:47:b6:53:b4:0f:8f:52:97:86:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Apr 16 22:01:25 2026 GMT
Not After : Apr 17 22:01:25 2026 GMT
Subject: CN=287085d3bd58afc2dabd2cdc09fce7ae1f61a4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:4d:10:7a:07:a3:b2:65:81:2e:bd:14:1c:
1c:94:bc:dc:94:e1:cd:a2:33:33:5b:e0:a6:cb:82:
90:3a:2a:0c:14:04:d7:86:10:24:b0:a4:51:b6:66:
9b:07:84:2a:e0:c3:ae:5f:17:9e:a8:35:9e:08:c9:
97:34:50:9a:4a:ca:17:54:24:45:48:8c:9d:be:95:
63:04:c2:fa:41:05:ae:1a:73:46:07:ab:4b:44:2e:
b7:32:74:ab:d4:3b:29:18:1d:f8:ed:9c:fa:00:c2:
56:14:92:09:de:e9:c9:78:35:ae:fa:4e:22:99:c8:
99:1f:ac:4e:9d:3f:19:ee:e4:25:67:bd:05:82:4b:
b4:6d:45:3d:aa:53:f3:d7:d1:d6:71:55:36:5f:d5:
0f:f9:f9:84:63:06:3e:23:be:f1:68:96:1d:fc:7f:
8b:c1:85:74:b4:97:ca:0c:51:6e:93:d9:f8:e4:be:
76:96:ae:94:47:f9:58:ff:01:46:97:0b:c8:79:d5:
20:51:39:90:3f:e5:c2:82:f5:1d:73:15:03:5a:fe:
87:2a:61:7c:28:d6:a7:ac:44:67:83:4c:1b:c4:c0:
b4:97:ea:d9:19:82:0d:e3:1e:7e:15:da:14:a4:82:
fd:9d:11:0d:2b:ea:e8:13:b7:db:c5:f0:68:66:23:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:85:D3:BD:58:AF:C2:DA:BD:2C:DC:09:FC:E7:AE:1F:61:A4:C7
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:11:6e:12:d8:64:0b:74:cd:ee:ec:cb:41:8f:27:7e:e3:c1:
b2:9b:72:90:f4:5a:e8:6f:53:b0:63:8d:aa:ae:ee:94:15:2b:
71:e2:4d:93:fa:38:63:6a:24:a9:4f:f8:3d:52:22:22:13:08:
b0:67:3a:c2:39:47:6f:91:59:8c:94:c8:97:40:c0:66:b0:8a:
88:f9:03:86:a0:de:a8:5b:01:99:e7:73:8a:01:75:de:88:8d:
e3:0b:f7:c9:9a:64:e1:d2:c0:92:bb:28:4c:ad:d9:6a:0a:53:
66:00:30:0d:fc:81:21:a5:05:53:42:37:76:d0:e0:ff:af:19:
78:fe:c9:79:db:b0:c4:65:78:86:c6:fc:62:03:a1:67:cf:b6:
36:36:29:2e:1d:9c:c3:cb:93:7d:ef:c3:8d:5a:a5:06:90:3e:
cf:9a:1c:69:90:6a:49:a2:77:e7:bd:da:03:0c:b5:10:b9:5e:
4b:b3:e7:d7:ff:65:6e:e5:34:29:92:86:3c:09:de:3e:41:8b:
40:f2:d8:dc:d7:88:4e:54:2f:d6:f1:75:f6:1b:be:98:6f:14:
57:35:f1:b2:30:fc:d7:52:0b:a8:38:63:17:a2:fd:d5:41:c6:
3d:f2:41:cc:44:2f:82:80:8c:3a:97:a0:a0:d3:a7:85:f9:04:
cf:a7:7f:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUDIrNhZHtlO0D49Sl4amMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4
MDVlZjEwHhcNMjYwNDE2MjIwMTI1WhcNMjYwNDE3MjIwMTI1WjAzMTEwLwYDVQQD
EygyODcwODVkM2JkNThhZmMyZGFiZDJjZGMwOWZjZTdhZTFmNjFhNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGJNEHoHo7JlgS69FBwclLzclOHN
ojMzW+Cmy4KQOioMFATXhhAksKRRtmabB4Qq4MOuXxeeqDWeCMmXNFCaSsoXVCRF
SIydvpVjBML6QQWuGnNGB6tLRC63MnSr1DspGB347Zz6AMJWFJIJ3unJeDWu+k4i
mciZH6xOnT8Z7uQlZ70Fgku0bUU9qlPz19HWcVU2X9UP+fmEYwY+I77xaJYd/H+L
wYV0tJfKDFFuk9n45L52lq6UR/lY/wFGlwvIedUgUTmQP+XCgvUdcxUDWv6HKmF8
KNanrERng0wbxMC0l+rZGYIN4x5+FdoUpIL9nRENK+roE7fbxfBoZiOmJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChwhdO9WK/C2r0s3An8564fYaTHMB8GA1UdIwQY
MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt
NzdjM2UxYzhmNmRlLzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl
LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxFuEthk
C3TN7uzLQY8nfuPBsptykPRa6G9TsGONqq7ulBUrceJNk/o4Y2okqU/4PVIiIhMI
sGc6wjlHb5FZjJTIl0DAZrCKiPkDhqDeqFsBmedzigF13oiN4wv3yZpk4dLAkrso
TK3ZagpTZgAwDfyBIaUFU0I3dtDg/68ZeP7JeduwxGV4hsb8YgOhZ8+2NjYpLh2c
w8uTfe/DjVqlBpA+z5ocaZBqSaJ3573aAwy1ELleS7Pn1/9lbuU0KZKGPAnePkGL
QPLY3NeITlQv1vF19hu+mG8UVzXxsjD811ILqDhjF6L91UHGPfJBzEQvgoCMOpeg
oNOnhfkEz6d/fQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:57 2026 by rpki-client