Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier: vEexf8z+/Db4LT162KfwpfL40xZmmaphLaYBOgW3sG8=
Subject key identifier: B6:CC:BB:9A:BE:F2:3F:58:12:9D:95:0A:70:0B:33:2A:26:D0:EB:32
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019DA52F80B2F41DF222005D74DC03A8D290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number: 013D
Signing time: Sun 19 Apr 2026 10:00:46 +0000
Manifest this update: Sun 19 Apr 2026 10:00:46 +0000
Manifest next update: Mon 20 Apr 2026 10:00:46 +0000
Files and hashes: 1: 7kloanVHOYaHRlhEsLAGIVGi_rY.asa (hash: 8NXppGEeLQlW5S79hnELA4YUQ5d6IwXskVcbthg2tt4=)
2: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (hash: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=)
3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: gRM0D/noWVNBoL/naxyLTlMWXN48MkXfkyFE8SyZ8uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:80:b2:f4:1d:f2:22:00:5d:74:dc:03:a8:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: Apr 19 10:00:46 2026 GMT
Not After : Apr 20 10:00:46 2026 GMT
Subject: CN=b6ccbb9abef23f58129d950a700b332a26d0eb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:98:67:21:b5:ea:0e:96:13:05:2e:7c:17:
54:8a:06:9d:5d:b7:90:81:60:42:9a:ae:0b:d8:1f:
c6:76:50:39:75:ab:4d:04:ab:2b:7d:62:62:b9:a5:
8b:75:40:19:d5:ef:7c:29:26:85:4c:60:25:0b:e5:
d8:9d:48:d3:72:c1:8a:f1:c0:e2:7c:e8:0f:04:d8:
80:8d:5f:78:4c:c8:3c:0e:33:ba:36:2d:de:6f:35:
66:3d:d0:37:c1:8a:87:13:a3:98:78:83:71:d8:e8:
3b:18:4c:34:70:0f:d8:01:db:16:01:8e:29:69:a1:
a1:cf:63:11:95:2f:9f:d8:cd:98:eb:1c:26:17:3c:
c5:b8:84:19:f0:54:52:23:67:9d:71:cf:af:6e:de:
e6:0c:3c:d2:f7:e8:bf:a6:a9:46:a6:b2:32:24:cc:
09:c3:d6:1b:e0:ac:1e:21:7a:cc:2a:3a:5e:0d:07:
58:ba:df:c9:48:f0:c1:70:5f:c7:d8:cf:a5:c1:e4:
c1:c6:02:34:9f:19:2b:d0:56:5b:38:24:f6:4f:0d:
b8:8e:a1:23:8a:54:74:96:57:6e:4e:9b:12:e0:7d:
27:48:8b:3b:a6:36:48:da:3a:ba:d8:c5:53:af:28:
ed:57:34:29:51:83:be:4f:0f:0e:1b:c8:7d:2d:59:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CC:BB:9A:BE:F2:3F:58:12:9D:95:0A:70:0B:33:2A:26:D0:EB:32
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:64:19:ae:07:2d:c7:8f:0c:75:b0:7e:69:00:10:20:9b:79:
b9:58:a8:74:9d:e8:52:98:81:19:97:6e:c0:6b:68:fc:ca:57:
ed:e0:99:59:42:23:41:67:77:5c:db:e4:da:63:98:7d:4e:64:
92:ba:01:8a:41:41:eb:76:dc:77:1f:2e:0e:dd:8a:f3:43:43:
ba:98:0d:bb:70:a5:96:ce:b7:7b:d7:7a:f9:c9:49:b6:fa:aa:
a9:63:6c:f0:01:0a:97:c3:98:c7:8c:e3:4b:01:c5:b2:6a:1b:
f4:5f:3f:47:0b:e8:cd:02:92:d3:f5:1b:bf:2e:75:88:3b:0d:
02:59:fa:43:7b:0a:ae:47:13:14:ab:f1:da:fb:7a:e9:e5:1e:
81:8b:52:d8:6a:3a:3c:1f:6c:a0:85:a7:f6:fa:a2:83:35:b6:
1b:72:97:88:82:06:0d:ac:69:db:8d:3c:43:4c:d8:d7:1d:b7:
ff:0d:a1:95:62:a1:46:62:30:3b:39:ac:de:98:98:22:85:42:
c1:74:fb:88:98:b2:76:21:d1:b7:d2:14:70:5b:fe:73:dc:3e:
92:4a:7f:10:49:5a:33:24:a7:08:ba:c5:40:da:3b:50:b2:98:
73:53:1c:65:90:68:03:6a:fe:33:4e:ae:09:33:68:a1:c8:cd:
a2:69:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:46:25 2026 by rpki-client