Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: tVxW8knzYuKp+XtHwe0pjxuZEVO+mOEzPyEWtll/MD8=
Subject key identifier: 1E:A6:E4:EE:0B:B4:1A:6E:ED:6F:91:42:8A:71:79:54:2A:C6:BA:76
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 019D9B8756047C9A93F0BEB2A8F5A74FCB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 04D6
Signing time: Fri 17 Apr 2026 13:00:30 +0000
Manifest this update: Fri 17 Apr 2026 13:00:30 +0000
Manifest next update: Sat 18 Apr 2026 13:00:30 +0000
Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=)
2: x33v7rF3QBlSIzExnIekzpn3DrI.roa (hash: g/UYMvAE3ypCM+rkZ1W9VYDV5Sdkmxjt7baXQZzeNL8=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: jVarDuL3rsvPIPwcSBow46L+1sQCoynt/cXIYArYy2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:56:04:7c:9a:93:f0:be:b2:a8:f5:a7:4f:cb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Apr 17 13:00:30 2026 GMT
Not After : Apr 18 13:00:30 2026 GMT
Subject: CN=1ea6e4ee0bb41a6eed6f91428a7179542ac6ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4c:f4:58:83:7a:ed:cb:3d:15:46:78:1a:96:
b7:99:12:b2:a9:cf:74:bf:17:c4:f9:44:39:70:88:
32:a6:d7:d3:86:26:e1:62:24:76:cc:5b:e0:a6:28:
8f:ac:5b:87:1d:c6:1d:32:09:25:f8:ac:56:6a:3a:
d2:d6:d7:b8:c9:54:cc:d9:6c:ef:cc:e2:4e:60:d8:
3b:c2:84:82:89:17:47:02:18:ad:4d:4c:2c:1f:22:
9a:24:30:8a:19:e0:87:24:37:54:7d:b4:fc:fa:48:
96:60:bd:e5:3c:0c:43:8f:33:fd:62:d4:3a:49:80:
f1:16:7d:9f:d0:40:e8:f7:c6:7e:95:1c:5c:e4:43:
76:1a:1e:2b:bc:3e:ef:db:cd:5e:a6:e8:3e:df:50:
7d:71:13:66:b3:d8:93:c6:89:64:2a:a9:0a:97:47:
8e:5e:60:26:16:c0:c3:8e:e6:4f:79:35:63:41:40:
80:34:f3:1f:e5:63:7b:94:5c:a0:b2:5c:af:c6:50:
25:87:a5:d4:18:cb:90:11:4c:c8:5b:26:78:ec:b5:
e3:9f:c4:8c:6c:cd:d6:75:ac:e2:2a:f4:12:54:c6:
c9:a5:2d:1c:a9:c8:c3:52:66:28:c2:ce:0b:c6:ce:
62:9c:22:a1:72:92:fb:ae:df:ed:2a:46:cf:ca:ce:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A6:E4:EE:0B:B4:1A:6E:ED:6F:91:42:8A:71:79:54:2A:C6:BA:76
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:db:87:d4:2b:17:13:04:1e:b4:88:f0:2f:61:7b:2f:73:4a:
8e:7e:d3:1d:d8:5e:77:47:1d:34:5a:79:5b:a0:94:31:bf:7b:
c2:46:60:4e:9e:2c:d7:57:60:7b:54:8e:7b:ee:2a:16:ce:04:
46:36:11:e8:ef:01:37:d3:aa:72:77:c2:8d:50:20:a7:0c:c4:
44:c0:0b:57:d1:19:8b:63:7e:13:df:46:df:5c:0a:6a:4f:fb:
a4:02:42:39:ca:44:e6:a4:bd:ac:d4:ec:4e:c5:c1:6b:74:46:
b4:4f:73:68:bd:c8:09:24:b2:1b:eb:1e:5f:96:96:93:f5:33:
24:57:17:24:8b:7c:9d:72:aa:36:09:71:1d:2d:c3:00:c5:5f:
eb:f7:9d:5b:d0:07:de:7a:c4:4b:9b:b8:3c:19:e5:4f:99:25:
f0:43:5e:d7:a9:82:f4:bf:3d:d5:28:93:5d:12:77:dc:05:77:
f3:6a:4c:05:6e:c5:e6:e8:a5:40:fd:75:a4:2f:00:cd:52:1d:
79:81:6b:29:8d:98:51:8c:43:92:e4:95:2c:4f:24:00:65:46:
99:fc:26:07:d8:a1:d9:9d:f1:70:ee:84:03:62:49:54:de:95:
2e:03:36:8c:1f:fd:71:98:6d:c0:4a:57:b2:22:b6:7a:8e:cc:
99:fc:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:29 2026 by rpki-client