Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: HE4PO3iTpRnJ4oftCgM+chWeQ5kBSE5PmibnJ2nLveA=
Subject key identifier: 7E:95:49:5E:86:8E:48:00:14:F9:3E:5C:C7:95:3D:15:EF:85:A4:6B
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019D98508588E504F7D1CFF59E1878F2B54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 18C7
Signing time: Thu 16 Apr 2026 22:01:46 +0000
Manifest this update: Thu 16 Apr 2026 22:01:46 +0000
Manifest next update: Fri 17 Apr 2026 22:01:46 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: WXxEp2kHwa6AotJYbD9/tgwjsPX2coRefeUcu2H+jrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:85:88:e5:04:f7:d1:cf:f5:9e:18:78:f2:b5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Apr 16 22:01:46 2026 GMT
Not After : Apr 17 22:01:46 2026 GMT
Subject: CN=7e95495e868e480014f93e5cc7953d15ef85a46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:54:76:d8:35:7c:c1:b5:e5:8a:ec:a6:8b:
ae:8c:4f:a5:6c:03:e3:d4:60:80:49:c4:df:24:4b:
87:01:5d:93:7b:6b:7f:79:20:dc:17:90:b2:e1:8a:
6a:3a:56:e3:94:04:53:2f:06:c9:4e:db:15:79:6d:
b4:3b:0f:3b:1b:18:c6:d0:b3:08:d2:2f:b2:5f:0c:
0d:55:d8:d0:13:6c:37:1a:76:9e:12:d2:9c:89:16:
96:b4:19:44:f6:f3:e0:65:a5:d4:30:e4:b9:7e:68:
90:8f:55:43:78:55:d4:ac:a5:0f:64:35:a6:74:26:
44:16:86:34:c7:8d:0a:19:ab:96:32:fb:84:0b:69:
34:cf:62:9b:f5:01:67:59:48:6f:aa:25:79:65:bc:
40:4a:10:df:d0:a0:1e:ac:a0:0b:da:f4:ea:e6:26:
4e:e5:39:4d:8e:c0:e8:74:94:bc:39:36:7f:7f:29:
b5:0b:1a:b1:e0:2b:10:17:aa:38:82:9d:df:15:e0:
86:d9:02:d2:45:e8:92:86:d3:9b:4e:8d:20:7f:6f:
19:11:12:1c:7c:43:22:bf:2f:0a:7b:5e:c0:1b:84:
2c:96:22:e0:94:6b:31:86:7a:76:09:e2:0f:08:07:
80:c8:d3:ad:c4:ba:71:91:14:67:b0:5b:b7:3c:26:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:49:5E:86:8E:48:00:14:F9:3E:5C:C7:95:3D:15:EF:85:A4:6B
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6e:9c:88:a9:cf:65:4f:cc:d0:28:73:31:ad:f3:6e:6d:65:
1d:86:93:26:8c:36:0b:ad:9c:63:71:f7:d7:eb:57:50:89:c3:
e3:12:f9:cc:b5:42:e0:6d:8b:15:94:ec:a2:f5:39:e9:b4:38:
37:30:25:05:fd:0f:b2:c9:af:f7:6f:f2:9a:54:01:cf:77:20:
dd:63:c7:76:7c:b8:cb:10:dd:4b:42:45:38:cf:fe:65:f4:b1:
50:c6:b1:83:05:d0:e0:ed:88:c1:7c:3d:93:f6:81:03:5b:87:
98:e3:b0:9b:e2:ed:bb:93:21:16:ab:81:52:1c:97:45:fb:2a:
96:2c:f2:70:b1:c0:ad:4e:e1:77:2f:3e:6b:4d:f3:14:37:db:
b4:84:68:35:6d:9b:af:16:e5:15:90:15:aa:76:c9:16:10:39:
49:04:fc:1d:2a:02:cd:db:f3:19:0e:75:6a:13:af:e8:9c:5b:
91:35:22:bc:96:35:4a:f6:8d:bc:bb:79:00:2f:17:a6:fc:25:
c2:46:8d:7f:6a:a2:ab:0a:b9:20:33:77:da:c5:1f:0e:79:31:
1f:4b:7f:35:d6:ab:e2:8e:39:be:60:10:fa:c0:48:3f:bd:18:
36:7a:22:46:b9:3d:fe:9b:53:03:e4:d7:db:48:fe:b9:02:4f:
dd:82:ff:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUIWI5QT30c/1nhh48rVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWRkNmY1M2JjYjQ5ZTRiOWIwNzA2ZGZkMDc0MjU5Yzli
OGE0MDgwHhcNMjYwNDE2MjIwMTQ2WhcNMjYwNDE3MjIwMTQ2WjAzMTEwLwYDVQQD
Eyg3ZTk1NDk1ZTg2OGU0ODAwMTRmOTNlNWNjNzk1M2QxNWVmODVhNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkhUdtg1fMG15YrspouujE+lbAPj
1GCAScTfJEuHAV2Te2t/eSDcF5Cy4YpqOlbjlARTLwbJTtsVeW20Ow87GxjG0LMI
0i+yXwwNVdjQE2w3GnaeEtKciRaWtBlE9vPgZaXUMOS5fmiQj1VDeFXUrKUPZDWm
dCZEFoY0x40KGauWMvuEC2k0z2Kb9QFnWUhvqiV5ZbxAShDf0KAerKAL2vTq5iZO
5TlNjsDodJS8OTZ/fym1Cxqx4CsQF6o4gp3fFeCG2QLSReiShtObTo0gf28ZERIc
fEMivy8Ke17AG4QsliLglGsxhnp2CeIPCAeAyNOtxLpxkRRnsFu3PCb+EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6VSV6GjkgAFPk+XMeVPRXvhaRrMB8GA1UdIwQY
MBaAFF7t1vU7y0nkubBwbf0HQlnJuKQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODIt
MjE1ZGJjODljMmI5LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODItMjE1ZGJjODljMmI5
LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW26ciKnP
ZU/M0ChzMa3zbm1lHYaTJow2C62cY3H31+tXUInD4xL5zLVC4G2LFZTsovU56bQ4
NzAlBf0Pssmv92/ymlQBz3cg3WPHdny4yxDdS0JFOM/+ZfSxUMaxgwXQ4O2IwXw9
k/aBA1uHmOOwm+Ltu5MhFquBUhyXRfsqlizycLHArU7hdy8+a03zFDfbtIRoNW2b
rxblFZAVqnbJFhA5SQT8HSoCzdvzGQ51ahOv6JxbkTUivJY1SvaNvLt5AC8Xpvwl
wkaNf2qiqwq5IDN32sUfDnkxH0t/Ndar4o45vmAQ+sBIP70YNnoiRrk9/ptTA+TX
20j+uQJP3YL/yg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:51 2026 by rpki-client