
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier: aXgwnSiaFDA8eQM1TCGFgEJgLKvqi2saGhA3Sm75HDo=
Subject key identifier: 97:B3:AE:D1:CE:2F:42:A4:C8:64:FD:79:D9:F0:22:1D:59:21:74:8C
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 019D9998F38ED536E0F56096F66122E0AEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number: 0ECC
Signing time: Fri 17 Apr 2026 04:00:30 +0000
Manifest this update: Fri 17 Apr 2026 04:00:30 +0000
Manifest next update: Sat 18 Apr 2026 04:00:30 +0000
Files and hashes: 1: 28OK2J3AhlsvkP5KX5FGL4PLk4k.roa (hash: sLJmlSxlUCogmrsIa1DupMYliLkoDK/6nUhbL0KQoh8=)
2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: CFKEnCIPX05VhDbb+KY3VD7cFa301AlCxDyObP2p5iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f3:8e:d5:36:e0:f5:60:96:f6:61:22:e0:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Apr 17 04:00:30 2026 GMT
Not After : Apr 18 04:00:30 2026 GMT
Subject: CN=97b3aed1ce2f42a4c864fd79d9f0221d5921748c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:d1:fa:49:32:a9:80:f8:3c:4f:83:56:59:
f5:52:d5:1c:df:fa:63:d7:dc:f3:90:1b:ad:7c:1d:
29:9e:47:66:45:a2:16:08:d6:db:1a:2c:6c:63:58:
70:10:b9:a4:e8:5b:eb:25:30:58:57:9d:27:ef:8e:
ee:68:4c:8a:70:5a:a2:c6:74:13:f4:43:f7:99:6f:
b3:33:6d:01:bf:de:08:f1:1e:6f:c6:bb:8a:60:b8:
4d:e7:3c:63:96:32:81:94:51:f7:1e:a8:56:e9:73:
fe:bf:98:cc:ef:ee:d7:01:29:1f:7a:db:9c:d6:30:
81:8c:83:9e:f0:44:84:7b:83:e4:93:97:99:60:1c:
f2:fb:d6:08:3c:e6:cf:ce:c9:1a:76:d6:12:e9:c8:
31:9a:80:d6:db:ab:bf:03:7e:1b:30:8f:dc:58:cf:
5b:20:0e:cb:b4:6c:2c:65:3b:4a:f8:26:bc:16:bc:
d9:73:40:96:b9:ec:f2:12:5a:53:8f:53:f5:4c:82:
ce:00:06:e5:7e:19:22:60:31:3a:da:c3:10:4f:8c:
8a:f3:d8:ba:66:64:de:50:9a:25:ae:1d:ab:da:14:
d7:ed:42:eb:a9:06:cb:c8:3f:eb:74:de:81:0b:c6:
f2:ba:f0:9f:b1:8d:cf:a7:c0:d8:ee:16:a5:c3:f3:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B3:AE:D1:CE:2F:42:A4:C8:64:FD:79:D9:F0:22:1D:59:21:74:8C
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:59:f8:ec:31:83:35:3e:b8:d6:c4:91:30:cd:71:58:32:48:
25:ad:ec:5c:0f:bd:8f:2e:c3:ec:59:82:6f:b3:8d:66:01:28:
4f:42:5f:fd:5e:71:f0:cb:2c:b6:e3:9b:bc:5f:8d:4a:e2:14:
3f:9e:0f:da:18:bb:10:71:54:27:e7:92:74:e2:e2:13:1c:50:
4f:2b:d5:50:d3:2f:84:3a:f4:bd:ad:ae:17:ed:f8:c5:cf:48:
d7:48:30:b3:05:7d:48:77:1f:9e:9b:25:73:25:ab:8f:21:39:
6b:62:5a:dd:c2:fc:37:c1:48:d4:dd:ff:8d:a9:b1:96:d5:20:
dd:11:e4:6d:b2:96:d6:79:51:d4:cf:d6:01:e2:a9:c5:58:dd:
2d:3c:46:c6:42:38:d8:c8:f1:47:12:cc:9a:93:cd:72:2b:0f:
d8:c7:16:05:dc:40:a0:2a:cd:be:e8:71:7b:5c:66:6a:04:60:
a1:bf:a7:6f:f5:17:b8:af:74:73:d6:4c:6c:5e:50:ff:11:4a:
16:20:78:0d:ea:b7:fa:1f:c3:12:e4:a3:2e:cf:29:a4:ca:96:
50:3a:1f:a5:4f:c1:85:e7:be:0a:57:92:81:ce:00:45:ae:46:
d0:a0:0a:f4:a9:1e:6f:8b:24:74:33:63:4f:87:3d:e3:95:38:
d4:11:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:26 2026 by rpki-client