Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: m1Kgg28u6LidL0rYsKtHpfhj7vfrO5bMecLGTuRl0Nk=
Subject key identifier: 1C:E2:2D:AD:8F:16:3A:C5:BA:4E:D8:CE:47:00:0D:6C:35:73:72:20
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 019D996275A17622C4A2B88988C7FAF00EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0EDA
Signing time: Fri 17 Apr 2026 03:00:59 +0000
Manifest this update: Fri 17 Apr 2026 03:00:59 +0000
Manifest next update: Sat 18 Apr 2026 03:00:59 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: I33wwyg2uO5RGmQ4poZRtf55oFn2DawsB+TBWu+rXoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:75:a1:76:22:c4:a2:b8:89:88:c7:fa:f0:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Apr 17 03:00:59 2026 GMT
Not After : Apr 18 03:00:59 2026 GMT
Subject: CN=1ce22dad8f163ac5ba4ed8ce47000d6c35737220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:37:91:d5:8d:6d:86:d5:b1:a7:2e:f5:ac:
f7:11:fd:9a:15:8e:61:ef:9b:f9:74:f8:56:f5:74:
7c:4d:4d:89:1b:ea:a3:e3:fe:53:67:49:e0:b3:9a:
46:bc:f8:bb:ef:7b:cb:ed:90:4f:f7:16:9c:d5:13:
67:bc:b9:5f:45:1a:b1:c7:df:bf:d6:e4:a2:af:dd:
9c:e9:ea:a7:d7:b4:55:04:ef:d1:9e:d2:78:53:4c:
85:72:27:58:e5:5e:ed:c9:76:01:24:13:af:80:00:
53:84:07:46:c6:61:2c:5c:a8:d9:ac:39:12:13:ba:
a9:1c:b7:5f:a9:8b:c1:5f:89:d5:f2:6e:8b:a1:38:
77:b0:21:aa:0d:5d:81:b6:fb:4e:08:ff:94:21:be:
00:e9:f7:cd:f9:1d:34:43:d6:c0:38:fa:a1:fc:ec:
2e:53:2f:78:48:16:51:e1:bd:56:14:09:86:54:fa:
0a:61:76:32:cd:16:0a:55:ac:f0:23:c3:1d:39:33:
f5:a4:72:55:c1:0b:dc:ff:a3:90:93:ba:0e:68:b6:
71:ef:3a:96:33:ba:4a:64:1c:b4:2f:dd:f8:31:84:
0e:23:86:2b:8a:90:00:85:f5:55:3f:56:cb:3e:a3:
e2:52:03:01:f1:a1:17:67:c4:42:9c:c6:79:86:c3:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:2D:AD:8F:16:3A:C5:BA:4E:D8:CE:47:00:0D:6C:35:73:72:20
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:88:1f:aa:66:6d:7b:cf:bf:0d:30:03:10:a7:fd:7e:7c:
a3:50:17:39:f4:07:77:aa:5b:14:2e:f6:72:0d:85:35:5e:6b:
15:98:7e:ef:8b:84:05:c4:37:1c:ce:41:33:ea:af:9f:39:e6:
90:25:91:8f:f6:46:07:24:c1:0d:15:08:8e:91:33:ba:4a:a2:
73:b7:c6:af:f5:f7:a4:95:1a:1e:95:06:d2:2f:75:86:4e:65:
1c:99:63:13:00:d5:9b:9a:e0:7c:4d:5d:9b:92:a3:8f:ab:72:
f2:12:27:eb:e5:20:70:08:71:c6:2a:86:e3:45:7e:ab:d0:92:
63:12:85:4b:60:60:e1:f2:28:97:72:26:3e:9b:c0:1f:c5:fb:
7d:8c:a3:b7:66:6c:7a:97:6a:c2:2a:76:c4:ed:34:b2:b0:53:
e4:92:6d:4d:c7:3a:35:fd:cf:ea:10:2e:95:8a:37:2d:2c:d8:
cf:32:50:3a:49:2e:b3:7f:bc:e7:ac:88:ca:17:7c:4d:ca:4d:
83:c0:d8:f6:e0:3c:99:5c:d4:c4:29:02:69:5d:88:69:55:d8:
55:5c:45:22:98:a1:63:75:ad:ab:0d:4f:79:35:ed:dd:a2:72:
21:5a:23:3a:c2:27:b0:76:8a:a2:c9:8a:a5:4f:5c:2f:fd:17:
22:6f:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:31 2026 by rpki-client