Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: bSsA8mywXsvNJT7I42nNz+onDR/Rp2hDQFR9H2NQOFg=
Subject key identifier: 97:00:9C:9B:95:8C:3C:24:71:1D:63:93:9E:41:18:2E:9A:1B:6C:3F
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019DA3E6271F6E0FB622893A7220BB9FFECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 04:01:02 +0000
Manifest this update: Sun 19 Apr 2026 04:01:02 +0000
Manifest next update: Mon 20 Apr 2026 04:01:02 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: SIEBF8a/i2u6UYrjo+tHdMyGdi9aKkwqJVT+quns33A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:27:1f:6e:0f:b6:22:89:3a:72:20:bb:9f:fe:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Apr 19 04:01:02 2026 GMT
Not After : Apr 20 04:01:02 2026 GMT
Subject: CN=97009c9b958c3c24711d63939e41182e9a1b6c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:f8:e8:b0:01:4b:9a:a4:f1:88:c3:0c:32:
46:97:04:06:53:cf:b0:b9:46:e6:92:2c:11:4f:83:
9a:e4:74:5a:99:07:e4:43:af:86:48:3f:e3:3d:bc:
39:0f:83:b8:a2:6d:f6:61:a4:52:93:96:9a:47:bc:
77:ac:3d:ef:50:e7:3c:df:e0:5f:df:e2:53:ba:6a:
d9:4f:24:9d:46:9d:42:cb:5c:11:cf:27:16:a3:b3:
a2:cb:79:d0:0f:3b:e8:1a:5f:27:cd:f9:ce:51:b6:
29:8f:f9:b5:52:ad:e1:1d:c2:6e:35:d3:2b:7a:b9:
48:5a:6a:11:80:cc:b0:3c:bd:c9:1a:f9:6d:a1:f1:
7f:3f:25:35:2f:9f:9f:4b:e3:bf:d8:86:11:1a:c1:
bb:27:67:49:7d:69:ff:dd:88:ff:05:b5:66:fb:df:
47:a7:ce:fe:33:3b:78:49:62:b9:76:de:bd:c7:51:
b1:66:65:e8:13:16:ea:ab:33:da:77:11:91:ef:f1:
f9:55:04:b8:02:6b:ee:de:f7:89:5d:73:5e:8a:f8:
55:27:14:11:b0:5d:a7:5d:0b:ce:61:78:33:e8:8e:
8d:d6:0f:94:93:95:7c:52:69:b3:e0:3d:7c:da:dd:
a5:0d:5e:01:64:67:61:d5:8b:16:d5:a3:57:7c:4a:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:9C:9B:95:8C:3C:24:71:1D:63:93:9E:41:18:2E:9A:1B:6C:3F
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d8:e2:c2:65:87:c5:26:d2:ea:42:3b:a5:a7:e5:ed:bb:96:
90:c0:40:54:5e:1a:2c:8c:e8:26:1f:99:39:74:74:fa:03:1e:
9b:2e:a2:75:db:d2:3d:ae:bc:dd:36:c4:ca:fa:ef:c8:46:1c:
3c:6d:5d:6e:15:f1:00:74:a4:4b:b7:28:e0:c0:e4:3d:e3:25:
24:4d:25:e0:24:4e:a4:c4:d2:e2:32:07:16:69:89:71:01:a3:
57:2a:08:5f:db:c4:f7:fa:8f:2e:b4:4f:ff:7b:ca:c4:37:a7:
fe:7f:0e:1f:70:9e:b6:b0:7d:9c:14:d8:c8:31:c1:b2:d1:c1:
f6:e6:c4:30:97:d9:46:18:9b:47:de:03:f6:6a:b3:28:91:c1:
2b:ac:93:94:88:1c:77:fd:d5:14:f4:ee:cb:f8:db:76:4f:0e:
43:b0:ae:73:45:dc:cc:33:6b:20:d5:5e:0b:4b:0f:df:3f:05:
52:b9:ba:e1:4f:d3:d8:3c:aa:0c:32:77:5c:71:e7:18:65:63:
4e:ee:8e:7a:b5:1f:3a:c1:8a:1c:01:bc:18:29:fa:31:11:6d:
c8:45:91:da:c2:1e:16:3a:72:bc:70:a4:b7:5d:c5:d4:c3:aa:
97:23:03:40:a2:f5:1f:d5:02:b9:49:84:4f:a7:6d:f8:28:12:
11:94:24:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5icfbg+2Iok6ciC7n/7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl
MDgxOTUwHhcNMjYwNDE5MDQwMTAyWhcNMjYwNDIwMDQwMTAyWjAzMTEwLwYDVQQD
Eyg5NzAwOWM5Yjk1OGMzYzI0NzExZDYzOTM5ZTQxMTgyZTlhMWI2YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquv46LABS5qk8YjDDDJGlwQGU8+w
uUbmkiwRT4Oa5HRamQfkQ6+GSD/jPbw5D4O4om32YaRSk5aaR7x3rD3vUOc83+Bf
3+JTumrZTySdRp1Cy1wRzycWo7Oiy3nQDzvoGl8nzfnOUbYpj/m1Uq3hHcJuNdMr
erlIWmoRgMywPL3JGvltofF/PyU1L5+fS+O/2IYRGsG7J2dJfWn/3Yj/BbVm+99H
p87+Mzt4SWK5dt69x1GxZmXoExbqqzPadxGR7/H5VQS4Amvu3veJXXNeivhVJxQR
sF2nXQvOYXgz6I6N1g+Uk5V8Ummz4D182t2lDV4BZGdh1YsW1aNXfErrJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcAnJuVjDwkcR1jk55BGC6aG2w/MB8GA1UdIwQY
MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt
ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl
LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNjiwmWH
xSbS6kI7pafl7buWkMBAVF4aLIzoJh+ZOXR0+gMemy6iddvSPa683TbEyvrvyEYc
PG1dbhXxAHSkS7co4MDkPeMlJE0l4CROpMTS4jIHFmmJcQGjVyoIX9vE9/qPLrRP
/3vKxDen/n8OH3CetrB9nBTYyDHBstHB9ubEMJfZRhibR94D9mqzKJHBK6yTlIgc
d/3VFPTuy/jbdk8OQ7Cuc0XczDNrINVeC0sP3z8FUrm64U/T2DyqDDJ3XHHnGGVj
Tu6OerUfOsGKHAG8GCn6MRFtyEWR2sIeFjpyvHCkt13F1MOqlyMDQKL1H9UCuUmE
T6dt+CgSEZQkaQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:15:43 2026 by rpki-client