Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: NCSqk6C76oO+D8iG6WYqEHRrRgyPe7w5Rlcj8SEHK2M=
Subject key identifier: 2A:49:CF:8A:80:8A:32:AC:0E:FA:9A:27:11:13:BB:5D:F4:91:9F:89
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019EB656FADF7B1C5D5C3A1CC44F7F531FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1964
Signing time: Thu 11 Jun 2026 11:00:14 +0000
Manifest this update: Thu 11 Jun 2026 11:00:14 +0000
Manifest next update: Fri 12 Jun 2026 11:00:14 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: Lc7jreYMpXJra3po4Hy7FGZ3efXM7cGPnZnRjyxyn5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:56:fa:df:7b:1c:5d:5c:3a:1c:c4:4f:7f:53:1f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jun 11 11:00:14 2026 GMT
Not After : Jun 12 11:00:14 2026 GMT
Subject: CN=2a49cf8a808a32ac0efa9a271113bb5df4919f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:d8:23:c7:7d:6a:36:2a:b5:94:d9:38:4b:
e7:e9:de:4b:3b:0b:79:37:4c:1f:ad:08:6d:54:bb:
7d:c3:ab:fc:d6:8e:77:42:2f:49:b3:d4:7b:03:ea:
37:89:81:bd:69:7e:b8:9d:f0:37:0c:70:45:4d:f7:
f2:75:82:d6:29:09:15:65:6e:e6:91:fe:a2:3d:58:
0d:aa:f8:0f:97:5c:35:61:af:a6:5e:85:d9:8c:7f:
c3:25:60:b4:5b:a3:f0:a6:10:c9:86:b9:d7:6d:76:
85:ea:ff:81:34:39:db:f7:2a:01:5b:cc:8d:19:82:
70:f4:6f:ec:4a:7b:4d:69:69:58:0a:94:6c:87:ec:
82:56:0f:14:f3:c5:ed:76:2f:81:a6:c6:e6:f4:cf:
28:f6:62:26:65:42:db:45:29:70:58:d1:fd:bd:8f:
b1:72:6d:fa:c4:42:a9:3d:5d:c1:fb:9a:72:a7:b5:
d7:fd:8b:9a:66:0d:51:14:49:93:f1:aa:58:68:a9:
1b:da:b2:7a:04:70:bc:27:70:57:75:89:16:11:80:
83:b9:66:d9:ec:5e:4b:d9:63:df:c9:6c:74:b0:fa:
0a:af:d0:d4:4a:ac:ae:e0:26:e7:34:da:23:bc:86:
40:89:0b:f9:46:e6:34:c3:cf:3d:f8:43:d3:ad:af:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:CF:8A:80:8A:32:AC:0E:FA:9A:27:11:13:BB:5D:F4:91:9F:89
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7c:ba:e9:4e:59:42:53:f1:5e:eb:ab:fc:e4:bb:66:b6:94:
46:f6:83:2e:cc:5b:69:a5:47:54:b7:7b:1f:51:b1:a0:86:d3:
c2:33:76:4b:88:5e:3b:cb:8c:e9:48:89:ea:31:28:db:b3:8b:
8d:01:e6:72:43:5c:37:71:fd:a6:36:55:50:48:55:f2:21:eb:
20:d5:fd:35:59:89:7d:31:4b:41:69:65:b6:0b:fa:16:8a:e8:
fc:1b:78:71:59:36:54:22:22:af:98:d7:56:49:7e:e8:1b:a9:
06:30:b0:89:ef:4a:1f:96:c0:1d:c5:fa:de:c8:95:da:f4:3f:
63:fb:c4:f0:02:dc:3f:2f:04:b1:27:e7:fe:46:dc:ee:77:48:
e7:da:12:af:9e:40:30:cd:fd:28:43:b1:79:b9:63:de:8c:d6:
a8:b3:5c:bd:2d:90:ad:14:e9:b4:d8:ab:ed:e3:b7:5d:c6:f9:
17:de:4e:2c:87:7d:33:df:74:74:4b:1c:3a:3b:56:3d:14:7f:
d9:e8:0c:d7:c6:fc:de:4f:20:01:1e:e7:f0:c1:ab:5c:d9:7c:
57:a1:cd:c3:8e:34:f9:4d:aa:02:f3:00:a3:85:ea:21:a5:4f:
98:84:85:b5:da:fa:ae:58:fa:a5:65:36:90:8c:c0:c0:d3:58:
53:7e:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:28 2026 by rpki-client