Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: iMQuxEwxoFIHTEbDCVYGIv7IOppH5qg1B7wq7YYnY7A=
Subject key identifier: B2:04:5E:B6:DD:C5:EE:90:42:A7:A1:5E:EC:56:A3:E8:8A:1C:D8:F7
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019DA453E4DDF2B6AD7E295988F8266F8E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 06:00:54 +0000
Manifest this update: Sun 19 Apr 2026 06:00:54 +0000
Manifest next update: Mon 20 Apr 2026 06:00:54 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: WzQcFey2+/8wlWrzosxt9bTRyvrSIgipiJ7q89mEoNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e4:dd:f2:b6:ad:7e:29:59:88:f8:26:6f:8e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Apr 19 06:00:54 2026 GMT
Not After : Apr 20 06:00:54 2026 GMT
Subject: CN=b2045eb6ddc5ee9042a7a15eec56a3e88a1cd8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:4e:c8:46:0c:e0:eb:40:56:9d:58:ec:6a:
51:e7:a9:e3:58:ce:24:04:e2:32:7d:ac:5e:aa:f4:
70:3c:72:b1:6c:3a:7a:a6:8d:d5:24:1a:ff:0a:aa:
fc:bb:5f:08:6f:f6:89:5b:2d:46:5d:87:fe:d5:c0:
b2:0f:0a:63:73:94:04:e2:70:40:dc:93:d8:09:ba:
c6:4f:14:50:5c:5c:c3:0b:e6:0c:7a:4b:8b:a8:90:
02:87:68:f2:ef:18:89:72:40:11:0e:a8:a2:46:59:
cd:2e:d0:be:ed:e6:1b:53:85:40:b1:b0:56:a2:7c:
27:2a:93:78:e5:3e:eb:cf:3d:49:69:45:81:2a:d7:
63:24:d6:66:85:9c:26:2c:29:2a:36:07:b4:41:33:
d1:1a:a7:8a:df:a0:ca:ca:c7:6c:05:10:76:0f:3d:
fe:b3:2c:f2:35:68:44:c1:3a:da:c4:6d:55:f1:3a:
6f:c8:cc:f5:95:c2:c0:b1:f7:1e:2b:97:1a:4e:63:
64:85:6a:c7:02:7b:83:72:97:0e:16:d3:49:fd:d8:
a8:b4:8c:00:e4:b8:0c:dc:0f:51:0d:74:3d:25:0f:
6d:4a:18:3d:6f:48:48:d8:92:7a:42:50:36:06:a7:
ce:e8:c6:51:bc:80:e3:d9:da:f2:07:10:6a:bf:4a:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:04:5E:B6:DD:C5:EE:90:42:A7:A1:5E:EC:56:A3:E8:8A:1C:D8:F7
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1a:f4:88:cd:10:d4:fe:3e:3d:a1:51:2c:d5:0d:75:d9:91:
df:7d:73:a6:58:41:b5:9b:43:2a:ac:b4:9c:5f:d1:7a:ff:82:
6f:c6:5c:20:6b:9e:6d:dc:cd:22:fa:c2:99:b1:42:3c:3b:8b:
9c:d8:92:d5:30:2c:1d:36:9d:9c:5e:68:93:a6:d5:10:49:45:
89:b9:f5:5f:09:1f:e8:35:fb:3f:e9:5a:7d:eb:1c:5c:40:02:
1b:c3:7c:6e:e8:e9:fe:3c:11:f2:2e:cc:f9:ba:f4:e0:b3:6b:
73:d3:e5:6e:11:3a:6a:af:6c:87:28:bb:22:7f:18:7d:13:e5:
1b:14:e1:51:c6:15:5a:25:06:57:ce:90:31:8c:a3:0e:c9:43:
28:53:66:92:38:9c:1f:c5:6c:76:b0:05:fa:e7:8f:4e:e8:bf:
dc:58:76:f0:9e:d2:56:04:7c:c8:01:58:91:bf:c8:72:a9:2d:
7f:fc:b3:82:77:99:29:2a:42:54:4d:82:2c:a7:00:e0:fb:03:
51:9e:1d:2e:11:23:c0:5d:cd:36:e2:f4:1a:e8:93:90:fb:b1:
5c:4e:1d:e6:13:83:d4:f8:8d:b4:2e:d3:51:20:e5:f5:0f:a5:
63:c5:e8:41:67:a9:a6:cc:a1:22:d2:58:5e:2b:64:2f:78:64:
72:f6:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:17:56 2026 by rpki-client