Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: uLNfxcftEJWBeuNwl2UUdit94DlPc41pTTbHPh+PQhE=
Subject key identifier: F6:F6:74:A7:25:4C:62:2D:00:BC:26:A2:00:94:D7:8E:17:F1:45:B7
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01A086AF8035F4AB3AD845ABD4565C4954A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 19AD
Signing time: Wed 09 Sep 2026 15:00:43 +0000
Manifest this update: Wed 09 Sep 2026 15:00:43 +0000
Manifest next update: Thu 10 Sep 2026 15:00:43 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: HuBqJxrPz8cJIEhWPQ734TMtT-k.roa (hash: tQAxKG9Tf5jOtAxlSBHO2a2s2np2ioSUpEcr2kqOTv4=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: zb8Cd3EIFW6NcyAYGoAx8W9/c6oplCnICR1JfQid8j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:af:80:35:f4:ab:3a:d8:45:ab:d4:56:5c:49:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Sep 9 15:00:43 2026 GMT
Not After : Sep 10 15:00:43 2026 GMT
Subject: CN=f6f674a7254c622d00bc26a20094d78e17f145b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:44:00:7e:14:16:87:67:42:18:77:ca:e1:
10:de:ec:34:ab:0f:85:03:b8:73:bd:c8:d3:67:cd:
3a:d1:04:1e:ab:ed:c8:9d:17:89:61:11:47:09:c0:
31:43:df:3a:94:73:2d:6a:19:a6:32:9d:e5:69:f0:
9a:59:c1:3f:1c:e2:c2:a7:92:b0:75:53:1a:83:95:
67:82:a2:e7:df:47:ce:2f:cf:62:fa:82:de:cc:35:
22:77:d0:8b:44:86:a9:54:56:cd:18:4e:32:76:2f:
ec:28:71:64:24:ed:09:f9:f5:7c:6a:ba:c9:bf:22:
9a:13:53:89:cd:68:fb:92:6d:d4:34:0f:46:0a:cf:
b6:91:0d:f9:5b:b1:f3:f9:1f:36:63:3a:45:7a:f5:
63:87:00:78:f1:34:f3:d7:eb:0a:ab:7a:72:e9:a1:
6e:98:24:78:9f:9f:00:cd:3b:d8:6e:2d:97:fb:ad:
55:a0:a2:72:c4:d0:56:43:5a:21:e4:00:58:93:da:
28:c4:d8:e7:5a:7d:05:d8:69:39:c4:2b:3e:1b:c2:
c6:8b:ee:83:f9:bb:25:ea:ee:fc:00:f7:83:0f:50:
e1:b3:83:0b:8c:f2:4e:7e:a1:64:4a:ff:7d:67:1a:
66:27:d8:fc:b7:e6:8d:d7:79:40:ab:d4:73:f6:76:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F6:74:A7:25:4C:62:2D:00:BC:26:A2:00:94:D7:8E:17:F1:45:B7
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:69:82:ef:30:7a:61:97:e2:f6:b3:73:09:10:6f:4f:4e:a5:
b9:7c:64:fd:95:a4:06:31:1a:06:67:fd:a8:27:67:74:f7:61:
ab:34:b1:41:c0:5b:39:30:d1:aa:01:48:14:16:b4:b0:3a:95:
4f:5f:9b:8b:e1:39:2b:df:59:53:77:46:fb:c5:5c:33:1b:09:
41:72:c3:f9:ae:e6:54:c4:13:28:42:40:4a:fb:f5:17:aa:68:
b6:bc:c9:16:0c:1c:f1:4b:30:72:93:48:fb:23:78:c3:12:f1:
12:60:50:fe:24:12:f3:7c:b1:1c:11:0f:36:0b:00:73:ce:6c:
6a:4a:c0:44:b8:11:0f:44:14:83:96:47:af:64:e4:54:d0:bf:
48:15:38:66:7b:86:81:b1:3f:43:ae:0e:47:e2:4f:5b:54:b0:
2f:80:9f:f6:d5:dc:fc:2c:b7:de:8d:2c:4f:a9:ef:36:76:08:
64:a6:3c:cc:1b:2d:75:8c:ea:6a:bf:34:56:64:fa:e3:e8:fb:
90:de:86:9e:31:31:67:7a:ca:35:40:ef:ab:60:1f:3a:a8:98:
bb:6f:29:63:25:3c:bd:cb:7e:1f:27:db:f6:23:14:82:74:b5:
0e:5e:5e:43:29:1e:79:0a:de:51:be:36:50:51:3e:6d:9c:0b:
ec:1f:6a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:25:22 2026 by rpki-client