Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: JLedRmFgEnvCR0RJT8KttRmhCSCRz8NhYrQrHvOo+i8=
Subject key identifier: 91:8F:BB:73:5E:09:C2:9A:31:AB:23:EC:81:8C:91:0C:E6:96:E0:7E
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019FA003F55E99F524A695929A67844A8DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 19DD
Signing time: Sun 26 Jul 2026 20:00:41 +0000
Manifest this update: Sun 26 Jul 2026 20:00:41 +0000
Manifest next update: Mon 27 Jul 2026 20:00:41 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: MQ7gwrWkqGnH/MfF/sTAvoluVd1lVWOfJj/jrVQJ0DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:f5:5e:99:f5:24:a6:95:92:9a:67:84:4a:8d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jul 26 20:00:41 2026 GMT
Not After : Jul 27 20:00:41 2026 GMT
Subject: CN=918fbb735e09c29a31ab23ec818c910ce696e07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:bc:1f:87:19:7d:f3:4c:55:ac:fd:da:52:6b:
ee:d0:30:7e:06:e7:cf:db:0b:b3:fc:e4:c7:02:48:
72:46:be:23:9e:48:d8:6d:f8:9a:95:ff:ff:7c:d1:
ae:18:b4:da:d7:42:1f:5c:f2:0e:36:f0:3c:d7:01:
38:aa:d7:e1:8e:39:15:6f:37:c2:cb:9d:df:7d:8b:
de:87:d8:e3:4b:9c:43:34:c9:af:fd:27:2e:b1:3f:
10:5b:17:c0:5f:55:18:99:d9:ca:25:7e:e9:38:76:
8e:d2:d6:2b:9b:29:ea:d2:bb:93:b7:93:9f:a1:f4:
7b:74:c8:2f:00:fd:66:66:85:67:9a:46:19:83:15:
b5:a3:31:6b:33:b3:c4:5f:12:38:f9:17:83:7b:de:
53:61:b8:12:30:8e:55:1e:d0:78:b3:a4:05:9d:55:
40:bf:81:0e:86:50:08:9d:66:ca:31:dc:73:aa:da:
e0:cc:eb:e0:f9:d8:3c:1b:8b:e2:25:00:da:8d:38:
de:3e:0d:30:cb:92:a9:08:4d:1f:19:13:6d:b0:86:
9c:70:05:dc:ad:cc:9f:57:6c:4a:b7:20:ae:ad:f4:
b7:2c:8f:5b:84:f4:ad:07:65:7d:e2:26:9c:af:50:
12:8e:1b:e9:ea:73:d5:65:08:da:39:3a:68:71:1c:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:BB:73:5E:09:C2:9A:31:AB:23:EC:81:8C:91:0C:E6:96:E0:7E
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b6:32:e7:c3:ba:cc:0c:07:e2:bb:19:fc:c1:cc:57:a9:02:
30:15:4e:35:2a:11:a8:8f:d0:b9:ec:2a:5b:a2:c4:ec:3d:15:
8f:96:6b:b7:41:57:cb:0a:a0:e4:e1:0a:d6:80:7d:12:47:7f:
78:2b:2d:21:02:8a:fa:6f:d2:aa:61:2b:f3:97:c7:4e:ab:9a:
64:98:a3:6a:fe:96:01:eb:26:6b:0d:63:e6:79:ac:d6:da:a3:
ac:46:03:84:03:ec:1a:4d:6c:78:b9:21:e9:d3:77:f3:d5:60:
ab:21:5e:ce:92:99:a1:68:9a:b1:2c:25:f8:50:80:a6:b0:de:
8d:53:03:0a:61:41:3a:c9:20:16:05:37:ba:ed:9b:3c:00:5e:
80:0b:b6:27:d7:52:8b:ae:54:fb:03:a4:80:a3:c8:01:9e:34:
ca:61:be:b2:a8:35:5f:d3:6f:ce:3f:da:b0:35:76:65:aa:27:
6e:0b:60:11:18:5a:dc:fd:41:8f:26:5d:a1:12:22:af:a5:78:
68:8e:32:3a:a4:33:c6:0e:82:46:db:05:1c:24:55:90:99:e4:
9a:af:d0:e9:b0:96:1c:1e:ed:7e:66:fe:10:2b:76:58:b6:45:
aa:bc:54:a9:c9:ed:d6:3b:8e:dc:dd:ec:6a:33:71:89:48:b5:
a8:a7:7c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gA/VemfUkppWSmmeESo3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjYwNzI2MjAwMDQxWhcNMjYwNzI3MjAwMDQxWjAzMTEwLwYDVQQD
Eyg5MThmYmI3MzVlMDljMjlhMzFhYjIzZWM4MThjOTEwY2U2OTZlMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bwfhxl980xVrP3aUmvu0DB+BufP
2wuz/OTHAkhyRr4jnkjYbfialf//fNGuGLTa10IfXPIONvA81wE4qtfhjjkVbzfC
y53ffYveh9jjS5xDNMmv/ScusT8QWxfAX1UYmdnKJX7pOHaO0tYrmynq0ruTt5Of
ofR7dMgvAP1mZoVnmkYZgxW1ozFrM7PEXxI4+ReDe95TYbgSMI5VHtB4s6QFnVVA
v4EOhlAInWbKMdxzqtrgzOvg+dg8G4viJQDajTjePg0wy5KpCE0fGRNtsIaccAXc
rcyfV2xKtyCurfS3LI9bhPStB2V94iacr1ASjhvp6nPVZQjaOTpocRywvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGPu3NeCcKaMasj7IGMkQzmluB+MB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7Yy58O6
zAwH4rsZ/MHMV6kCMBVONSoRqI/QuewqW6LE7D0Vj5Zrt0FXywqg5OEK1oB9Ekd/
eCstIQKK+m/SqmEr85fHTquaZJijav6WAesmaw1j5nms1tqjrEYDhAPsGk1seLkh
6dN389VgqyFezpKZoWiasSwl+FCAprDejVMDCmFBOskgFgU3uu2bPABegAu2J9dS
i65U+wOkgKPIAZ40ymG+sqg1X9Nvzj/asDV2ZaonbgtgERha3P1BjyZdoRIir6V4
aI4yOqQzxg6CRtsFHCRVkJnkmq/Q6bCWHB7tfmb+ECt2WLZFqrxUqcnt1juO3N3s
ajNxiUi1qKd8Aw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 01:21:11 2026 by rpki-client