Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: LjEVRHeYBNTvJV+j4WJgOG5pFrI7SkMy/5Qerrtm5nY=
Subject key identifier: 5C:5B:EC:F8:5A:B2:42:C4:36:43:D8:97:BE:E8:61:97:45:45:41:BA
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019D984FB87A237C499BDD133748616D9DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 080E
Signing time: Thu 16 Apr 2026 22:00:54 +0000
Manifest this update: Thu 16 Apr 2026 22:00:54 +0000
Manifest next update: Fri 17 Apr 2026 22:00:54 +0000
Files and hashes: 1: kOwA2VMp0-d5NZ8ZjSEsa9A6-fM.roa (hash: ZSmsV9FGmLqKWen++kiAr3q47+GvBQzYyI0Yg4ZwozI=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: f3/y56YUnnKgbpRpXLDjDwzlAom9tEEC56DUCn55JFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b8:7a:23:7c:49:9b:dd:13:37:48:61:6d:9d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Apr 16 22:00:54 2026 GMT
Not After : Apr 17 22:00:54 2026 GMT
Subject: CN=5c5becf85ab242c43643d897bee86197454541ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:ac:95:86:40:49:0f:32:d8:24:34:cd:9e:
cd:92:dc:36:79:4a:03:53:a9:da:ac:7d:4a:cf:01:
19:2e:27:94:ff:30:7e:02:d8:51:90:7e:c2:68:cb:
bc:b5:a4:63:e8:64:d6:e7:7a:52:c2:6d:3e:cb:75:
39:a6:a1:51:b9:74:75:f8:70:6f:81:e0:c3:d2:ec:
82:c9:15:34:d5:f7:5b:12:2c:f1:fd:09:8c:48:11:
f8:a5:0e:0d:5e:8a:64:30:3a:2f:82:7c:35:ae:02:
30:40:d4:0c:6a:c7:e6:c2:21:d4:3f:09:49:0a:2c:
d5:0b:91:33:c3:b2:0a:86:d4:f1:aa:5c:88:8c:fd:
97:75:35:30:46:02:6e:99:46:ca:0a:d9:03:5f:32:
99:cd:a9:2c:3a:a6:c9:84:70:79:65:74:9e:d1:ce:
b9:a2:ba:3b:1b:51:f4:45:13:ab:60:69:70:e9:b3:
6e:e2:26:87:b5:92:8c:c6:82:e6:c4:97:b5:c1:05:
b7:b9:8f:90:c7:a9:18:f5:ee:8d:db:b4:68:d9:67:
25:53:3d:57:98:49:db:e2:7a:99:b5:41:8f:07:36:
79:5c:2e:54:e5:bf:af:80:62:49:59:ef:73:e3:ee:
d3:8d:74:cd:6d:0c:2d:18:f3:00:c6:41:29:4d:a9:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:EC:F8:5A:B2:42:C4:36:43:D8:97:BE:E8:61:97:45:45:41:BA
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:40:2f:76:24:e1:21:3b:f1:9b:9d:0d:d7:7a:21:59:7f:c9:
3f:f9:b7:d1:dc:aa:84:7c:dc:5b:04:59:a6:f6:3c:42:65:c9:
1a:2f:ec:3a:d3:8a:3b:b1:f4:82:54:b4:1a:8a:e1:c5:d5:d2:
1a:25:17:f7:cd:65:ae:de:17:c3:7e:2d:df:0e:37:9e:21:ee:
3a:25:4d:83:96:78:14:d7:3e:04:ee:7f:cf:00:32:3b:e8:08:
1f:3e:1b:c4:eb:d4:e5:a7:08:62:b8:f1:36:96:22:f3:98:95:
47:e5:c5:18:27:72:13:99:4a:fa:0e:df:43:92:73:73:be:0f:
c0:7d:e8:7d:9a:2c:63:05:4a:29:ff:95:de:bb:5c:8d:f6:80:
02:f1:b5:da:5c:0a:18:24:86:38:35:9f:9b:11:35:b9:1e:60:
a8:0a:1e:f6:52:b4:04:8b:aa:e9:e8:41:b6:f8:cc:c7:23:5c:
44:90:6d:6d:02:2c:3c:a7:57:83:57:cc:84:7f:a5:26:7c:6a:
38:be:c0:ca:0a:88:00:1b:16:ec:74:b2:d3:1f:f2:6a:c1:08:
3d:04:d1:79:dd:0d:90:e8:22:aa:be:00:6e:37:a9:da:c0:5a:
fb:60:8d:7d:9a:e7:a5:85:cb:d2:a7:63:0f:85:c3:84:96:77:
b7:4b:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:05 2026 by rpki-client