Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
File: xHC41L-HFAS8pTx3gVME7y6k4co.mft (raw, json)
Hash identifier: XdYTFZNNbY6eAgydTOfCpih39CoqwnWuFRoDxFKGyJY=
Subject key identifier: 0F:CE:D7:26:B4:2A:47:2E:E3:45:FC:A5:FC:B1:34:87:A9:83:BA:0F
Authority key identifier: C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA
Certificate issuer: /CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca
Certificate serial: 019DA4F841EF5BD063D0100BCCE78B65998E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
Manifest number: 02AD
Signing time: Sun 19 Apr 2026 09:00:26 +0000
Manifest this update: Sun 19 Apr 2026 09:00:26 +0000
Manifest next update: Mon 20 Apr 2026 09:00:26 +0000
Files and hashes: 1: DnR3n06izuqiF0c6QLmB63bhByA.roa (hash: wXx/mCp3Tb5hj1tTLAH162/y2WEyBpkE4oI2Qluv1II=)
2: xHC41L-HFAS8pTx3gVME7y6k4co.crl (hash: zCwgAIOq0OnsliH/fV4SIePYVCXUY8zxHpTnjj0sCIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:41:ef:5b:d0:63:d0:10:0b:cc:e7:8b:65:99:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca
Validity
Not Before: Apr 19 09:00:26 2026 GMT
Not After : Apr 20 09:00:26 2026 GMT
Subject: CN=0fced726b42a472ee345fca5fcb13487a983ba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:c0:26:5c:67:5b:c4:88:6b:69:f2:e9:4e:
5c:ca:c0:96:91:27:6a:e1:10:b5:eb:24:64:84:dd:
89:b0:fd:d7:78:d7:ab:ed:4e:06:7b:1b:98:54:ae:
03:36:c9:14:6e:c1:ad:33:f9:d2:8f:8c:b1:ec:11:
60:47:e8:dd:2e:8a:1f:3b:ba:36:fb:5f:88:e2:63:
75:d7:8c:36:16:2c:8a:c6:22:e6:d7:6f:c6:96:08:
38:5b:fa:d6:f6:51:5a:99:e8:91:b2:6a:8a:40:52:
96:93:a5:02:e0:f8:fa:b2:48:50:28:af:3b:a4:a4:
95:8c:02:03:47:ec:5e:25:22:75:7c:8b:cd:cb:25:
cc:b2:98:92:19:9d:e9:22:a6:32:bf:f9:a5:a5:a4:
01:28:17:b6:60:cd:0a:47:94:a6:7a:dc:ad:a0:c8:
a5:32:45:b3:5e:ab:88:d5:b0:c5:63:c5:a8:f9:1d:
47:79:1e:36:d9:98:47:a6:14:a4:27:f8:06:ef:57:
10:78:2f:fd:84:0b:e8:72:68:8e:86:bb:86:fd:a2:
c8:77:09:29:1b:15:c6:92:ed:4e:7c:dd:a5:68:77:
a0:53:52:1d:67:52:89:af:22:8a:9f:dc:7e:5a:32:
71:9a:9f:6e:c9:2a:42:47:80:77:0e:5c:23:12:46:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CE:D7:26:B4:2A:47:2E:E3:45:FC:A5:FC:B1:34:87:A9:83:BA:0F
X509v3 Authority Key Identifier:
keyid:C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:82:4b:29:34:1c:f7:a6:a1:6e:67:3b:3e:2e:3d:d6:d0:8f:
9e:ad:f9:c0:75:0d:f2:0b:9e:2d:ae:11:1a:c2:47:2e:01:de:
94:f0:7a:d6:8b:5a:89:2d:0a:e4:ec:41:91:5f:80:2e:c4:6f:
b2:81:26:a3:df:a5:e1:3c:f7:cd:c9:53:61:2f:a5:4e:ff:c1:
c7:ef:9d:88:08:87:3b:b1:cf:4e:72:4d:07:cd:66:23:55:2a:
74:cf:56:3e:35:41:0f:be:fd:92:53:5d:0f:43:a8:cc:46:86:
9f:9e:6a:79:af:bd:ee:01:df:4f:f3:42:b6:cf:a5:d6:a6:bc:
0c:cc:5e:f2:84:92:31:71:ab:d2:52:af:3d:ec:11:d4:b8:92:
db:91:b9:df:cd:5a:96:f3:6d:d4:e0:37:8d:ac:bf:ec:11:bf:
f4:35:12:c9:65:b6:78:ca:1c:ce:55:8d:dc:86:a3:6f:0f:21:
5c:1f:96:96:8a:f6:53:1c:b7:40:92:14:3b:59:e3:b7:23:b9:
29:36:5b:41:a5:fa:34:05:fa:07:43:1a:a2:ca:94:8e:c2:30:
78:9e:ed:c6:c5:85:7f:71:94:fb:8d:db:bc:0c:f9:1d:f8:50:
52:98:e0:a2:cd:74:ec:92:91:5f:30:fe:b3:33:1e:56:82:95:
c1:c9:b4:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+EHvW9Bj0BALzOeLZZmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NzBiOGQ0YmY4NzE0MDRiY2E1M2M3NzgxNTMwNGVmMmVh
NGUxY2EwHhcNMjYwNDE5MDkwMDI2WhcNMjYwNDIwMDkwMDI2WjAzMTEwLwYDVQQD
EygwZmNlZDcyNmI0MmE0NzJlZTM0NWZjYTVmY2IxMzQ4N2E5ODNiYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplLAJlxnW8SIa2ny6U5cysCWkSdq
4RC16yRkhN2JsP3XeNer7U4GexuYVK4DNskUbsGtM/nSj4yx7BFgR+jdLoofO7o2
+1+I4mN114w2FiyKxiLm12/Glgg4W/rW9lFameiRsmqKQFKWk6UC4Pj6skhQKK87
pKSVjAIDR+xeJSJ1fIvNyyXMspiSGZ3pIqYyv/mlpaQBKBe2YM0KR5SmetytoMil
MkWzXquI1bDFY8Wo+R1HeR422ZhHphSkJ/gG71cQeC/9hAvocmiOhruG/aLIdwkp
GxXGku1OfN2laHegU1IdZ1KJryKKn9x+WjJxmp9uySpCR4B3DlwjEkYrUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/O1ya0Kkcu40X8pfyxNIepg7oPMB8GA1UdIwQY
MBaAFMRwuNS/hxQEvKU8d4FTBO8upOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEhDNDFMLUhGQVM4cFR4M2dWTUU3eTZrNGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNGJhOGYtNWU2MS00ZGNjLWJhMGIt
ZjYyNGVkNWY0NmZlLzEveEhDNDFMLUhGQVM4cFR4M2dWTUU3eTZrNGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hNGJhOGYtNWU2MS00ZGNjLWJhMGItZjYyNGVkNWY0NmZl
LzEveEhDNDFMLUhGQVM4cFR4M2dWTUU3eTZrNGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYJLKTQc
96ahbmc7Pi491tCPnq35wHUN8gueLa4RGsJHLgHelPB61otaiS0K5OxBkV+ALsRv
soEmo9+l4Tz3zclTYS+lTv/Bx++diAiHO7HPTnJNB81mI1UqdM9WPjVBD779klNd
D0OozEaGn55qea+97gHfT/NCts+l1qa8DMxe8oSSMXGr0lKvPewR1LiS25G5381a
lvNt1OA3jay/7BG/9DUSyWW2eMoczlWN3Iajbw8hXB+Wlor2Uxy3QJIUO1njtyO5
KTZbQaX6NAX6B0MaosqUjsIweJ7txsWFf3GU+43bvAz5HfhQUpjgos107JKRXzD+
szMeVoKVwcm0IA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 16:11:31 2026 by rpki-client