Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: t//6TcnUrVnEDdszY0t02CXESfFg+xEPbcvTIC23qEA=
Subject key identifier: 4A:85:AA:F2:8D:D3:36:2C:51:8E:9E:29:75:61:F1:B0:DB:54:9E:4A
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019F9EF187839C7CED3134E8E31AE3836227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 1935
Signing time: Sun 26 Jul 2026 15:00:56 +0000
Manifest this update: Sun 26 Jul 2026 15:00:56 +0000
Manifest next update: Mon 27 Jul 2026 15:00:56 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: HuBqJxrPz8cJIEhWPQ734TMtT-k.roa (hash: tQAxKG9Tf5jOtAxlSBHO2a2s2np2ioSUpEcr2kqOTv4=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: DXgXUyRtZfUTZr9BDvnFwR+I3mZSmaNa8kU1g2vjCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:87:83:9c:7c:ed:31:34:e8:e3:1a:e3:83:62:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jul 26 15:00:56 2026 GMT
Not After : Jul 27 15:00:56 2026 GMT
Subject: CN=4a85aaf28dd3362c518e9e297561f1b0db549e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:ef:e2:8d:7a:2b:2a:6f:d9:b7:76:2f:40:
66:93:17:3a:f3:34:ee:b0:d5:38:8f:bf:2d:70:eb:
5c:98:8d:12:89:13:ff:dd:6a:40:fb:24:b4:02:4a:
50:ff:a5:fd:ac:86:bc:61:48:a5:50:9f:cd:d2:73:
e8:cb:16:bc:a5:59:2a:cc:56:6f:95:1a:c5:c7:79:
51:0b:d9:be:d5:df:55:4c:68:35:8c:9c:59:ac:37:
b3:25:07:c8:89:fd:ac:c1:73:a0:d9:0b:4e:59:ca:
53:12:27:9b:dc:77:c2:49:c3:30:5c:5a:25:df:57:
fc:24:26:8b:2d:f1:25:38:2f:79:e0:bf:5c:a1:b5:
ca:af:3a:56:ec:bb:c7:5a:88:f0:0c:a8:ea:7a:a5:
d6:43:04:42:a1:55:8d:c7:e5:0f:72:96:53:9c:84:
90:5c:eb:4c:7b:d2:2c:ec:62:2d:ee:9c:5a:a2:17:
f4:6b:65:22:67:96:d7:cc:c7:26:d9:b3:d0:4a:aa:
24:e2:08:3a:37:79:f6:b4:fa:b2:5e:b5:83:41:03:
28:3c:81:0d:db:c5:ea:cd:c4:c2:56:67:5f:9c:78:
40:8d:f5:7f:d1:31:33:ba:48:06:ac:1e:f5:a2:38:
e2:2b:fa:b9:ae:6f:5b:c2:39:45:32:54:18:17:36:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:85:AA:F2:8D:D3:36:2C:51:8E:9E:29:75:61:F1:B0:DB:54:9E:4A
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a1:b8:22:90:19:67:b5:14:8c:0e:3b:10:ac:be:be:9a:59:
0e:62:b9:68:71:93:44:52:e2:8e:60:12:8d:d3:53:db:b1:be:
dd:5f:fa:64:74:0b:f9:bc:89:2a:aa:04:42:2f:00:68:d8:64:
6e:88:3c:1b:31:45:97:c1:e3:59:8b:63:98:e6:7b:33:35:a1:
15:54:88:c2:68:6a:f6:6e:d6:d6:01:f1:c2:0b:08:d7:a2:8b:
68:0d:23:99:f3:74:c7:82:21:67:e5:ed:04:f9:0e:18:83:db:
0d:35:2a:e3:ca:fa:86:23:76:0c:07:63:11:e6:fe:6e:0a:fd:
96:15:b7:89:0b:24:f3:03:24:cc:fa:25:f2:a6:78:aa:8c:ab:
47:3e:0a:6b:f3:5d:ef:59:6b:20:11:39:cc:44:d9:41:f2:1f:
88:31:5a:e8:ac:aa:d1:91:55:6d:13:6f:40:99:f5:c8:98:fc:
c0:44:4f:00:a0:be:d6:3b:70:7d:f1:ff:2e:44:7a:68:5f:fd:
cd:7e:e8:f2:a2:32:e3:a4:67:df:79:d7:5f:25:a9:99:9e:f8:
69:57:b1:63:2c:f1:5b:8c:bf:d2:df:67:ca:c0:be:24:53:88:
03:3c:e0:96:b1:f6:5f:2f:4e:6b:44:4b:d0:43:42:41:e2:f9:
7c:dc:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 19:06:24 2026 by rpki-client