Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: 0RRrS2b3yPyy2CKeFmsnaVgwNhYgLY8rQEZE8Q0FRYg=
Subject key identifier: 82:41:A1:C3:02:3D:B1:40:7D:E9:31:B7:78:93:52:2D:F3:82:0C:1A
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019D992B11A025EE3A7675BB918DB3997B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:29 +0000
Manifest this update: Fri 17 Apr 2026 02:00:29 +0000
Manifest next update: Sat 18 Apr 2026 02:00:29 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: JgIcYc4awb6+86mBOLz6G2/UbM63TGMpm7WoBg+PdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:11:a0:25:ee:3a:76:75:bb:91:8d:b3:99:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Apr 17 02:00:29 2026 GMT
Not After : Apr 18 02:00:29 2026 GMT
Subject: CN=8241a1c3023db1407de931b77893522df3820c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:af:48:5f:05:f9:ae:3a:aa:2d:df:d7:b7:
2c:96:8b:b7:8b:c4:a1:c3:2f:95:b2:22:46:2c:26:
f3:75:f7:88:15:c0:de:29:30:f0:c2:69:0f:15:4a:
d0:f8:46:5e:2e:32:83:87:e6:b3:1c:d4:d3:df:83:
69:c9:e9:89:14:5c:6a:b3:bd:50:58:4e:94:ed:cf:
6a:d6:c2:e6:59:90:d7:fc:e2:c9:27:a7:0f:f3:f2:
21:a3:fe:3c:0c:c1:93:cf:84:57:87:2e:d3:7c:f8:
8e:bc:62:60:5c:f7:35:80:5c:dc:4f:ae:8c:ce:23:
cd:18:55:61:c9:e3:59:fc:1f:27:c3:b6:54:cc:a0:
42:9b:4d:48:bf:b6:07:35:b2:70:9d:04:73:0d:d4:
dd:16:bc:bd:60:e8:e6:43:53:a9:4f:d1:12:d9:1f:
4d:53:34:59:1c:4a:7e:a6:34:d5:ff:a0:07:e2:af:
76:c8:75:5c:dc:19:54:3e:8c:13:e6:8a:30:52:55:
86:f4:da:54:c4:bf:04:95:91:dc:ae:d4:8d:03:9a:
9b:77:a4:36:d4:af:ca:3d:e4:fc:d2:2a:6b:09:2a:
01:f7:7f:ca:6f:8e:17:4d:24:b8:1a:38:10:d4:fb:
78:18:61:bc:12:8b:65:aa:54:fd:4d:6c:aa:9f:6d:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:A1:C3:02:3D:B1:40:7D:E9:31:B7:78:93:52:2D:F3:82:0C:1A
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:33:28:a8:33:6d:db:87:b5:9c:30:a2:60:53:b1:5e:b4:
f4:f4:d1:51:b9:37:dc:67:e1:d7:e4:74:6b:b7:44:84:19:28:
7c:6a:27:2d:f2:69:54:8e:01:a2:00:27:34:65:47:f2:b1:59:
17:a8:1a:bc:2b:fb:02:7e:b1:b7:58:fd:a4:1e:90:36:d2:39:
09:09:67:23:f5:29:15:8d:13:f3:87:28:29:e2:37:c3:75:d3:
21:bd:0b:67:64:2d:b9:e4:bc:f1:3d:5f:6a:fd:b9:22:6a:0d:
88:fc:f5:79:05:fe:05:71:82:30:03:78:f9:ac:0a:b3:81:53:
a0:c7:99:c1:95:a3:ea:4d:e2:47:9b:b1:6d:83:ad:17:6f:7d:
ad:56:ea:aa:cb:95:71:9b:19:c8:d4:62:f0:66:72:1f:b6:56:
82:97:14:d7:90:41:38:97:d3:8e:ed:40:e7:eb:60:4f:b1:3f:
a6:40:11:0b:32:42:ae:3f:11:09:e0:7a:79:a3:ae:0c:59:25:
e4:42:69:1e:ba:1e:1a:48:d5:1d:19:95:81:f6:60:bf:90:3f:
70:58:54:d6:c8:ca:0b:f6:83:03:e6:d5:7d:f5:48:fe:d6:9c:
f8:40:ca:2b:be:83:29:03:19:00:42:01:fb:32:0c:bc:e6:b4:
e3:29:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:15:04 2026 by rpki-client