Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: xwlZGa2BoLcuhU2rV26JHjhbvpTszua1C812+Pjgo7c=
Subject key identifier: 53:17:FB:B9:D5:C4:46:06:6D:6B:AE:BB:3D:CE:8C:BE:BB:E7:3E:E0
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 019DA37807A049F0A4C38B864B1BEF87454C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:00:45 +0000
Manifest this update: Sun 19 Apr 2026 02:00:45 +0000
Manifest next update: Mon 20 Apr 2026 02:00:45 +0000
Files and hashes: 1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: WmBATGYaqNevq75gSrlIalBJj++vvgsu4MlMOid4FB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:07:a0:49:f0:a4:c3:8b:86:4b:1b:ef:87:45:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Apr 19 02:00:45 2026 GMT
Not After : Apr 20 02:00:45 2026 GMT
Subject: CN=5317fbb9d5c446066d6baebb3dce8cbebbe73ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:fb:91:67:01:e6:3a:48:00:41:b4:06:c0:
af:bc:80:8c:d0:05:18:1a:cc:37:b7:ac:51:ed:2a:
7d:39:80:c8:55:ec:02:d0:07:8c:77:52:e9:49:95:
df:1f:b2:7b:85:f9:cf:07:b3:a5:67:73:d1:ee:0e:
ae:34:71:78:3b:fd:ce:61:7e:d8:12:a4:17:a9:8a:
5e:84:c9:9f:31:39:7c:01:06:2f:ff:5f:77:d5:d3:
c7:e2:37:33:fb:9c:77:5c:22:44:94:e7:f6:5e:93:
1b:69:04:4f:52:01:6e:00:b2:c6:97:7e:72:d1:3c:
7e:d3:48:28:91:00:18:d5:48:2d:ec:a2:63:6a:c4:
c2:24:8f:b9:60:fa:6d:c1:c3:03:45:67:aa:e5:2c:
59:46:af:2a:9f:58:14:ba:8c:7c:02:f9:76:b8:06:
6e:72:d8:27:26:fa:cc:07:9d:80:4e:59:51:6a:37:
d5:ca:64:28:b6:29:c4:d7:f4:d3:b8:91:09:e1:bb:
2b:48:34:bf:3f:04:7b:1a:b6:0b:8b:75:79:ea:dc:
21:d1:14:e4:9d:ae:df:c2:10:b5:85:60:ee:9e:fd:
48:c6:1c:e6:0d:e6:58:ff:5e:90:83:0e:21:6a:ae:
4b:0f:a1:d3:c6:32:d0:04:15:c5:29:8a:44:2a:ae:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:FB:B9:D5:C4:46:06:6D:6B:AE:BB:3D:CE:8C:BE:BB:E7:3E:E0
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:01:a2:82:0e:a6:19:29:d5:5a:51:dc:b0:ae:cd:e3:a5:e9:
32:7b:8f:66:bb:26:1f:5a:fc:fd:39:c1:03:0f:48:86:8a:4b:
fd:72:a8:90:d1:bd:f3:bc:5e:e3:cb:93:9f:b9:42:25:5e:51:
a3:9b:63:7e:15:c3:ec:de:27:4e:f5:f5:03:d4:fe:c9:da:3f:
a1:3f:4f:4c:f4:a4:f4:cd:2f:6b:f7:66:f9:60:3e:b7:d9:36:
c7:9d:8e:4f:48:46:92:cb:b0:37:59:93:46:fb:8a:ed:35:36:
02:3e:e9:f9:5f:a0:70:a7:99:e4:e9:76:b0:da:7d:63:82:8f:
79:f0:61:c7:96:04:5c:40:6d:cf:4a:1b:4e:f6:7a:ca:ce:95:
2c:70:49:e5:65:31:38:4c:bf:ab:61:11:2c:b4:c2:f4:03:92:
9c:1d:e2:41:40:9e:97:29:04:88:78:5d:ba:82:ca:d2:ba:e6:
29:b2:00:91:0a:30:19:51:03:90:fc:09:63:50:59:f1:8a:e0:
da:c6:d9:8a:56:e0:bb:23:07:e3:d8:25:b1:42:28:10:33:71:
80:af:17:d2:62:f0:c9:18:0a:b6:9f:8f:e2:cb:77:db:9a:25:
74:1e:41:da:26:20:ca:3f:b7:dd:94:8f:fb:c0:b1:4d:25:22:
8d:80:88:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:57:51 2026 by rpki-client