Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: E7iTiieUnLLeU2fMijfNG5oPpCWUv6YTB9pbsPoKoZI=
Subject key identifier: 13:F3:73:86:65:CB:99:91:F1:B9:0B:A7:EC:09:79:0C:A7:DF:EF:FF
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019D98F502C300214208D133311DB0B0C788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:26 +0000
Manifest this update: Fri 17 Apr 2026 01:01:26 +0000
Manifest next update: Sat 18 Apr 2026 01:01:26 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: wSqtUxeHYHMgdijatenmTuRgyDhRRm8B0+y7ZZAmiVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:02:c3:00:21:42:08:d1:33:31:1d:b0:b0:c7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Apr 17 01:01:26 2026 GMT
Not After : Apr 18 01:01:26 2026 GMT
Subject: CN=13f3738665cb9991f1b90ba7ec09790ca7dfefff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:d9:bf:e0:8e:68:cf:51:73:df:81:b9:0f:
56:3e:fe:40:a6:b8:0a:44:5b:25:44:a2:61:55:d3:
e5:87:48:4c:d1:19:63:30:a0:bc:37:2a:56:a1:5f:
16:73:81:ef:41:e4:8a:38:1b:f8:64:bc:08:ca:c5:
95:80:bd:bb:95:16:0b:30:ba:e5:f7:15:16:13:03:
65:ad:0b:a3:62:af:40:1c:19:9e:8e:b0:56:28:53:
1d:10:8b:cd:86:a3:dd:b4:29:89:0a:68:9d:18:37:
6f:82:d5:55:26:da:38:fc:64:c9:fd:25:72:b0:18:
18:67:84:8b:e4:56:c0:f7:3f:6b:fc:bc:46:22:fe:
ea:5b:3c:a2:7f:b8:34:45:b3:2c:53:e7:1d:91:1a:
36:17:25:1a:b9:70:fb:30:f9:8b:fb:b1:d9:d4:ac:
a4:1c:1b:7e:28:76:91:a6:7c:a5:bf:bd:d5:9e:92:
66:a3:49:f4:5f:84:5d:3a:4e:76:2c:39:70:a4:c1:
59:b2:08:9f:6a:f5:27:dd:cc:e8:09:63:a9:9d:ee:
50:b4:37:08:60:22:08:87:28:1c:ce:3e:f7:5e:3e:
31:95:d6:78:c4:76:3b:ca:28:d3:f0:7d:07:e0:f5:
4a:1d:50:6e:48:67:a7:28:88:23:d3:ad:80:33:7b:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:73:86:65:CB:99:91:F1:B9:0B:A7:EC:09:79:0C:A7:DF:EF:FF
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ef:0f:7a:e5:92:ff:ed:80:5b:30:c2:d5:dc:55:0a:03:11:
fa:2c:1f:9a:17:5c:c6:82:68:b3:a8:8c:9c:f2:99:ab:b0:14:
1c:84:14:10:f0:ed:da:68:c3:5b:17:72:35:e1:9b:49:26:68:
47:58:93:de:9a:84:31:46:d7:9f:04:1d:32:69:65:d4:22:48:
24:b0:7d:79:63:1a:b6:56:89:96:00:75:d4:09:27:9d:71:44:
41:73:b6:68:2c:e6:13:b8:37:3c:83:8d:98:1a:48:42:d4:ea:
09:67:17:64:bc:69:03:e2:6c:0c:33:34:82:bb:8a:07:a2:d2:
a1:ae:24:3d:80:ea:91:1c:8f:50:ed:c5:0b:14:cb:09:4d:76:
80:38:b1:39:50:ae:eb:e8:ab:04:a7:e7:c6:a9:25:5f:db:c0:
ef:34:14:a7:fe:ba:62:2d:5d:e2:7e:94:8e:7b:0b:97:c0:1c:
4c:bc:3a:d2:9b:bd:0a:7f:91:83:3f:38:1d:b2:a3:e5:7d:97:
06:41:80:63:68:21:ff:eb:7e:c7:c2:ad:2d:b0:32:37:f3:0e:
27:10:c4:61:91:29:42:53:2a:f8:d3:4f:42:8f:5c:af:d3:9d:
c1:cf:1a:e2:54:65:c2:c4:63:fe:01:7a:f0:a6:a3:fb:07:e4:
ec:04:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:17 2026 by rpki-client