Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: vj7gn8vmuHtZU/celEVbDfZUkaFSOAzFumNYk2V9oCM=
Subject key identifier: BF:45:87:80:2B:A5:B9:2E:C4:E9:80:1E:74:4F:BC:BE:10:C3:63:A2
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 019D99620D1A8537F183DB0C3F2768AB731C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:33 +0000
Manifest this update: Fri 17 Apr 2026 03:00:33 +0000
Manifest next update: Sat 18 Apr 2026 03:00:33 +0000
Files and hashes: 1: SyWTiReTZTnBDg5JyysBSj2Ylo4.roa (hash: fZ2UZHiHpOuYHZzSoYWZDivGjx4cM7k5nd9px5ySpG0=)
2: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: wnbMGgKhu+Bh/TOV3qJHal28wx1OxfcBxqgiP/hSYTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0d:1a:85:37:f1:83:db:0c:3f:27:68:ab:73:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Apr 17 03:00:33 2026 GMT
Not After : Apr 18 03:00:33 2026 GMT
Subject: CN=bf4587802ba5b92ec4e9801e744fbcbe10c363a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:81:fa:4c:54:17:26:c6:13:fc:c7:1a:90:
0d:0f:18:63:d0:47:6e:7f:3d:f5:7b:29:8b:ec:7a:
df:0d:43:b5:f3:87:44:88:83:41:42:2b:1a:c5:5b:
31:c6:04:56:67:b5:9f:bd:ce:df:dc:9a:c3:c2:6d:
a0:f5:5b:fe:74:fa:51:1d:43:7f:ce:65:8b:9f:f4:
b7:ad:d4:72:31:db:17:84:fc:f7:d6:d4:7a:22:d9:
c5:5f:46:24:0a:c9:bb:2c:d0:1d:06:a2:c3:2d:69:
1e:06:bd:ea:99:c1:1a:6b:3b:58:91:8e:11:b2:77:
b6:c3:6a:37:d8:71:19:66:2f:50:13:cd:ec:ad:7c:
d4:71:8a:36:a9:c4:07:db:3c:28:c6:6a:73:d9:96:
68:ed:c8:2d:84:d2:39:eb:eb:29:8c:e5:68:a8:ce:
d2:15:5f:b9:b5:91:ba:80:c0:b1:e4:02:12:17:75:
f7:01:a1:ac:f4:f6:eb:6e:93:65:75:32:3a:f7:0b:
f6:50:fd:bf:6c:fc:a7:07:d8:ec:dd:38:bb:7c:39:
3b:f7:83:a8:36:be:0c:be:65:cd:f6:4d:f8:91:cf:
f0:f9:f3:b7:7a:66:75:41:9c:35:9b:7b:1e:0c:a8:
8f:b8:2c:f8:ef:b3:44:2c:7a:cb:12:92:e1:39:0e:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:45:87:80:2B:A5:B9:2E:C4:E9:80:1E:74:4F:BC:BE:10:C3:63:A2
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1b:79:59:c1:35:b2:5e:c2:16:db:b2:84:21:99:27:d7:e8:
03:9f:c1:4d:e0:de:df:69:c7:dc:da:e3:37:d0:e6:4a:13:b9:
4c:18:f0:58:29:92:52:75:fc:93:fb:05:74:ff:78:2f:c3:9f:
72:22:b0:34:97:a4:a9:65:6a:67:1a:d3:d7:90:64:fa:78:88:
41:c1:71:a0:3e:75:22:e8:80:84:c7:b1:8c:f1:07:6e:dd:ba:
80:ec:67:c3:f3:6d:cb:9c:c9:42:c5:f4:b2:15:65:c0:33:4f:
77:d9:e6:f4:cb:b1:34:77:7b:a1:be:ae:e9:f5:60:fe:68:00:
69:9b:0b:46:9e:01:41:21:f5:9b:62:f1:03:7c:c3:9e:25:ea:
55:ae:89:17:68:fb:d4:dc:f6:57:32:91:18:31:04:12:f6:66:
ce:c1:41:03:30:de:95:c4:45:7a:66:97:c2:24:48:b4:af:70:
b5:bb:a8:8d:43:a0:88:42:ce:de:43:3c:ee:7b:e3:6c:77:12:
ed:76:e0:1b:3d:28:3f:05:9d:66:79:67:6e:da:ca:30:dc:1d:
1f:d1:7b:55:56:cd:9b:6c:55:f3:4e:8a:b0:c1:c2:cb:7d:5a:
5c:c0:50:91:5a:a9:97:9e:4f:05:30:e5:99:26:8d:75:da:ab:
4b:21:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:26 2026 by rpki-client