Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: YyagSRC0p2zeJNXN2XHm7JgJAo7x6Q4VfSKIF8Krqwc=
Subject key identifier: 70:F0:6E:6F:AD:98:41:C1:2F:69:01:82:91:08:20:33:DA:A9:C6:2D
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 019D99990EEDF2085B3B6178D571D76BA759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0FAE
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: mLbMcmnO4JRmubQP1AmCwO0ZZgA.roa (hash: vJDJ7XvSOkplRv6UMGVogwJjO5lohuWAIXAROmc7RJg=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: u3svqVZacCYa4tic4O4C3hOtIcRfPBB/VUaIkTJJTCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0e:ed:f2:08:5b:3b:61:78:d5:71:d7:6b:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=70f06e6fad9841c12f69018291082033daa9c62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:94:dc:ff:2f:6b:69:85:33:20:bd:88:41:
d0:05:53:89:ff:9e:55:6f:95:4e:ee:8b:b2:57:41:
4e:d8:c8:18:f7:03:e4:c3:4a:55:69:29:25:91:2f:
62:dd:f5:df:1a:67:b2:2c:3b:3e:b4:a6:10:83:be:
ad:e8:d6:15:da:b5:2f:3e:b4:73:21:45:0a:37:72:
49:c3:77:ae:40:81:d7:13:eb:e1:43:ff:9f:81:cd:
2e:dd:f3:65:80:8e:e6:77:8f:72:43:be:e8:8d:5a:
71:71:16:f7:17:0a:b2:7b:8b:6e:ee:9e:d8:19:bd:
07:c5:33:3a:76:a1:6a:b0:eb:a1:83:e1:90:96:8c:
89:4f:3b:9b:b9:88:61:8c:d6:d0:e5:9c:cf:e0:33:
25:74:53:32:ab:49:fe:79:23:50:6e:31:2c:bb:b2:
41:76:f1:c5:4e:90:73:21:b4:1e:0f:d4:6e:5a:26:
00:68:fd:13:6d:34:5b:2f:fb:7c:d6:45:a4:0e:5b:
e5:27:a8:19:ce:90:50:ba:9b:3c:83:b0:8b:63:db:
a5:f3:ae:c1:2a:4d:64:06:f6:3c:41:12:31:c2:6f:
64:d1:f2:77:ac:d1:d8:96:d9:1b:5d:76:81:08:9f:
1e:8f:9b:8a:b8:49:fd:3f:bc:45:fe:95:4b:cf:56:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F0:6E:6F:AD:98:41:C1:2F:69:01:82:91:08:20:33:DA:A9:C6:2D
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a7:3a:9f:58:6a:d7:ca:37:07:7f:fa:8a:a6:a5:b8:20:00:
cc:92:48:8d:b3:5a:0b:11:e0:d8:ea:0f:a4:2a:4d:c7:ec:26:
42:7d:cf:f0:55:97:44:c3:75:8c:97:55:23:98:ea:97:21:eb:
48:ca:7b:ed:c0:ab:29:c3:06:e3:3a:be:a1:dc:93:a3:87:89:
1f:e3:cd:fe:c1:0a:28:20:16:61:12:e6:32:c1:95:84:35:57:
10:c2:3a:58:18:cd:ca:ce:f3:5b:07:97:a7:f5:8f:c7:ba:f9:
f9:fd:7f:1e:13:cd:9c:07:1d:7c:0c:1a:f2:70:cf:3d:ca:f7:
ce:38:7b:ec:de:c0:cf:58:0b:97:3d:1d:1c:00:7f:e0:0b:2b:
0b:a6:77:92:6a:fc:15:91:a7:c7:e6:d9:3e:b3:62:0e:e7:5d:
cf:87:83:8a:46:fc:e3:90:97:7a:7e:bb:bd:fd:ad:48:67:ae:
81:76:f7:53:52:d0:70:4c:30:c2:aa:0a:35:d4:e1:60:25:b7:
53:0b:e7:94:ca:c9:2b:ca:19:55:82:86:81:03:b2:13:9e:6a:
19:98:69:28:51:20:c8:10:d4:71:58:c3:7e:f9:64:1b:2e:d9:
b0:7b:7e:fb:c6:91:dd:d6:aa:9d:0a:1c:49:58:5d:91:03:45:
bc:7b:36:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQ7t8ghbO2F41XHXa6dZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjJhZDQzNDcxYjYwNmJjYzg1M2JiYTExYjhlZDY2M2Mx
NTE4ODIwHhcNMjYwNDE3MDQwMDM3WhcNMjYwNDE4MDQwMDM3WjAzMTEwLwYDVQQD
Eyg3MGYwNmU2ZmFkOTg0MWMxMmY2OTAxODI5MTA4MjAzM2RhYTljNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyqU3P8va2mFMyC9iEHQBVOJ/55V
b5VO7ouyV0FO2MgY9wPkw0pVaSklkS9i3fXfGmeyLDs+tKYQg76t6NYV2rUvPrRz
IUUKN3JJw3euQIHXE+vhQ/+fgc0u3fNlgI7md49yQ77ojVpxcRb3Fwqye4tu7p7Y
Gb0HxTM6dqFqsOuhg+GQloyJTzubuYhhjNbQ5ZzP4DMldFMyq0n+eSNQbjEsu7JB
dvHFTpBzIbQeD9RuWiYAaP0TbTRbL/t81kWkDlvlJ6gZzpBQups8g7CLY9ul867B
Kk1kBvY8QRIxwm9k0fJ3rNHYltkbXXaBCJ8ej5uKuEn9P7xF/pVLz1YAcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDwbm+tmEHBL2kBgpEIIDPaqcYtMB8GA1UdIwQY
MBaAFMcirUNHG2BrzIU7uhG47WY8FRiCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQt
MDY2ZmZlZmQwY2FiLzEveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQtMDY2ZmZlZmQwY2Fi
LzEveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKc6n1hq
18o3B3/6iqaluCAAzJJIjbNaCxHg2OoPpCpNx+wmQn3P8FWXRMN1jJdVI5jqlyHr
SMp77cCrKcMG4zq+odyTo4eJH+PN/sEKKCAWYRLmMsGVhDVXEMI6WBjNys7zWweX
p/WPx7r5+f1/HhPNnAcdfAwa8nDPPcr3zjh77N7Az1gLlz0dHAB/4AsrC6Z3kmr8
FZGnx+bZPrNiDuddz4eDikb845CXen67vf2tSGeugXb3U1LQcEwwwqoKNdThYCW3
UwvnlMrJK8oZVYKGgQOyE55qGZhpKFEgyBDUcVjDfvlkGy7ZsHt++8aR3daqnQoc
SVhdkQNFvHs2pA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:01 2026 by rpki-client