Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: OM0SWggQ+DswRsEmPkLyDQ4qnnbQZ37TmJa8TWG7kxM=
Subject key identifier: C7:FB:60:E4:D7:1B:21:3A:A1:A3:4F:03:34:8F:36:D5:CC:6B:5A:DA
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 019D9AAB7F7989FA799C0A6202FC1A68B3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 0515
Signing time: Fri 17 Apr 2026 09:00:23 +0000
Manifest this update: Fri 17 Apr 2026 09:00:23 +0000
Manifest next update: Sat 18 Apr 2026 09:00:23 +0000
Files and hashes: 1: aWkix5BEPhzF9HtAUh40Ya0hP5U.roa (hash: M4zeKlcKBskhzVuZ5EZH3G1hReQMWU2Dxp+IVnGHsic=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: MvyevaYu+7kwa7puqKMY/XWIDJrE9l2E9DYI40F629o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7f:79:89:fa:79:9c:0a:62:02:fc:1a:68:b3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Apr 17 09:00:23 2026 GMT
Not After : Apr 18 09:00:23 2026 GMT
Subject: CN=c7fb60e4d71b213aa1a34f03348f36d5cc6b5ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:d8:91:26:88:42:60:b9:23:7f:e1:3e:d6:
e5:56:67:93:0d:1d:a3:d6:60:af:ab:d4:11:63:73:
e1:50:8d:50:5f:f2:3d:22:e1:01:af:cf:f5:98:6f:
29:8d:76:c5:1d:be:57:5f:10:fb:47:01:f0:dc:97:
4d:c1:5a:5a:5a:b2:12:c6:a7:2a:88:32:47:2c:c3:
b2:ec:4b:e4:e5:6b:82:5e:2b:f7:b8:b4:c6:cb:6b:
a7:af:2c:d8:d7:a2:da:42:e6:08:91:7b:94:cf:79:
3c:61:89:e5:c1:cc:8d:27:49:18:7c:68:90:55:31:
62:61:d7:b6:4c:47:f1:2f:a4:7f:3e:ff:2d:0e:c8:
71:44:8c:94:a7:0f:15:f8:e9:50:a0:e4:14:b4:e8:
2a:ef:df:16:e1:f0:ff:e9:c7:89:3d:f4:29:d3:f0:
c0:ce:7d:18:dc:a3:9b:b5:b9:71:f4:81:9a:74:c0:
a5:67:e0:f8:18:44:a5:c4:0b:9f:b4:47:83:5c:75:
23:9c:dc:01:83:5f:1c:06:1b:da:a2:a3:59:3b:91:
64:8c:94:29:3d:c1:39:88:21:64:cf:f1:9c:f7:1b:
3b:db:a7:32:78:f2:87:01:64:e2:9a:a8:d6:aa:f0:
16:16:00:0f:82:31:b1:34:28:34:a3:07:e4:23:80:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:60:E4:D7:1B:21:3A:A1:A3:4F:03:34:8F:36:D5:CC:6B:5A:DA
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:17:b7:0d:5a:2a:93:40:ae:67:11:6e:f6:e2:50:73:31:82:
b7:47:d1:c0:e0:c0:19:62:19:82:b5:86:2b:64:ad:1c:c5:2f:
4d:19:f5:e0:04:a1:93:3a:22:fd:f6:b5:ee:8d:99:9a:ec:ba:
2e:62:a8:cc:27:f9:8c:02:e0:9e:f5:c3:4e:ce:10:5a:96:17:
53:85:9f:6d:20:bb:ee:2a:38:65:b1:64:83:fd:d1:ea:fb:71:
83:d5:26:46:69:2b:08:c1:1d:f0:d8:34:7d:0c:ce:32:57:bf:
90:fe:7f:e5:6e:33:dc:23:a2:42:a9:db:ce:e7:19:e0:25:c7:
46:78:e5:70:55:c6:d3:ba:39:11:4b:03:1b:e3:3e:40:87:53:
df:3e:d4:21:00:72:a5:1d:ca:71:a4:91:d8:40:22:bc:8e:4a:
3a:84:30:01:56:75:3d:75:f2:e3:ad:5a:90:51:83:15:58:c0:
37:65:a7:87:7e:07:42:e1:dd:83:34:4e:fb:f0:64:7c:c7:34:
0f:2b:39:05:01:de:dd:d4:50:c5:cd:67:cc:49:04:f7:48:3d:
4b:c4:c2:8c:e3:1a:2f:90:60:4c:6a:8a:c8:e4:5e:e9:4d:09:
72:3c:1d:46:6f:61:1a:9f:53:b0:4e:55:ce:0d:98:80:45:dc:
5e:e1:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:43 2026 by rpki-client