Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: Ij/AFPEyXBsUmKa9xgf0NB0498N4m8Q5Cn5GDXmtblI=
Subject key identifier: 73:CD:05:15:6C:A9:97:D3:83:71:C3:09:41:79:4D:C3:1E:AC:80:FA
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019DC9AA735E62502179EA449CC2267595AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 183D
Signing time: Sun 26 Apr 2026 12:01:24 +0000
Manifest this update: Sun 26 Apr 2026 12:01:24 +0000
Manifest next update: Mon 27 Apr 2026 12:01:24 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: BfDjCxQZpVIvWuHPpUF1014sxPo.roa (hash: xAMeCUjUJk50I2+3B3yRzk6L+sK+RxuSoLFdPe8pfMM=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: cBI39k7bwnF9UF9zrKa8iyloBYKX4ldGAdJoeG77FiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c9:aa:73:5e:62:50:21:79:ea:44:9c:c2:26:75:95:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Apr 26 12:01:24 2026 GMT
Not After : Apr 27 12:01:24 2026 GMT
Subject: CN=73cd05156ca997d38371c30941794dc31eac80fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:b2:b6:43:30:59:c4:b1:25:e7:0f:8a:3c:
5b:93:11:80:4a:9e:5f:a4:3e:90:43:51:a0:7c:53:
36:b3:49:98:d4:70:86:49:ac:e9:ea:5d:23:f3:13:
79:89:bd:e9:c4:bf:c2:6d:e8:81:67:c2:a7:a0:64:
43:d4:01:38:b5:cb:00:9f:87:85:66:fb:a2:6d:79:
e7:38:32:5f:a6:12:fb:7a:4d:9c:a2:5d:07:16:d5:
4b:60:3b:38:61:77:fd:c9:dd:05:53:ba:2a:35:85:
98:b9:1b:ab:5e:6e:66:65:b9:94:9b:30:9f:e6:4e:
72:28:08:40:ef:bb:e7:2d:b5:5d:48:30:76:e3:23:
dc:c1:6d:fe:0b:38:66:fe:67:28:77:c8:c5:db:19:
56:67:fb:80:73:e7:74:cb:e0:b9:ee:d1:ee:7a:91:
fc:9f:1f:0a:51:9f:fd:85:26:c7:74:37:f9:7a:8c:
9c:75:f4:8d:9a:3f:94:7d:b3:4a:12:a5:46:eb:de:
a0:eb:e2:46:e8:8b:9d:61:50:2b:ef:8c:b6:9e:5d:
bf:46:5b:74:cb:dd:86:21:49:cf:0e:8b:b1:49:5d:
bd:38:13:45:dc:9d:f0:a4:ca:c1:e6:e1:f3:2f:6e:
e5:47:d3:d3:a5:9b:33:9e:b6:2f:15:ec:f0:15:7e:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:05:15:6C:A9:97:D3:83:71:C3:09:41:79:4D:C3:1E:AC:80:FA
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:21:30:34:80:0f:9f:36:d1:ae:e7:96:66:bd:0d:9f:77:c5:
66:9a:4e:8c:f6:11:68:8a:d1:4f:f1:ed:83:1e:50:f9:bc:fb:
53:a6:85:6f:46:95:77:9a:4a:6d:51:ff:3a:f6:e4:dd:74:35:
01:d4:c2:6b:2d:95:e2:3f:1d:44:43:bb:d0:d2:6e:25:55:eb:
bc:d9:dd:b0:d8:76:b4:61:77:ae:85:33:ea:3f:f0:20:79:fa:
98:df:6e:62:dc:22:0c:fe:4a:5c:b0:79:4e:ec:33:ae:b3:96:
29:b5:b6:ef:e6:86:ac:03:8e:5d:19:78:26:0d:8f:1c:e6:e4:
de:ed:bc:f3:ab:71:95:93:10:83:37:5c:d3:a4:8a:c2:c0:39:
20:d1:f5:9c:27:1e:d1:90:75:82:ce:bb:0f:69:07:80:d3:22:
e2:10:a7:a8:62:3a:9c:52:a5:98:87:30:58:42:7a:7b:8a:1f:
5b:c3:e6:e5:35:be:0e:12:4a:bd:52:48:07:52:82:b4:74:d5:
6c:19:5d:f8:5f:2c:bf:28:30:20:a0:b2:82:cd:e7:66:b5:fd:
fd:32:1e:2e:f1:df:9c:aa:b7:00:4f:83:0d:65:93:95:97:e0:
58:c5:d9:0e:36:9f:e1:a7:31:c9:16:2c:9b:fe:b9:77:22:5e:
6e:0c:5b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3JqnNeYlAheepEnMImdZWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw
ZDVkZDkwHhcNMjYwNDI2MTIwMTI0WhcNMjYwNDI3MTIwMTI0WjAzMTEwLwYDVQQD
Eyg3M2NkMDUxNTZjYTk5N2QzODM3MWMzMDk0MTc5NGRjMzFlYWM4MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN+ytkMwWcSxJecPijxbkxGASp5f
pD6QQ1GgfFM2s0mY1HCGSazp6l0j8xN5ib3pxL/CbeiBZ8KnoGRD1AE4tcsAn4eF
ZvuibXnnODJfphL7ek2col0HFtVLYDs4YXf9yd0FU7oqNYWYuRurXm5mZbmUmzCf
5k5yKAhA77vnLbVdSDB24yPcwW3+Czhm/mcod8jF2xlWZ/uAc+d0y+C57tHuepH8
nx8KUZ/9hSbHdDf5eoycdfSNmj+UfbNKEqVG696g6+JG6IudYVAr74y2nl2/Rlt0
y92GIUnPDouxSV29OBNF3J3wpMrB5uHzL27lR9PTpZsznrYvFezwFX6HMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPNBRVsqZfTg3HDCUF5TcMerID6MB8GA1UdIwQY
MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt
OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl
LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyEwNIAP
nzbRrueWZr0Nn3fFZppOjPYRaIrRT/Htgx5Q+bz7U6aFb0aVd5pKbVH/Ovbk3XQ1
AdTCay2V4j8dREO70NJuJVXrvNndsNh2tGF3roUz6j/wIHn6mN9uYtwiDP5KXLB5
TuwzrrOWKbW27+aGrAOOXRl4Jg2PHObk3u2886txlZMQgzdc06SKwsA5INH1nCce
0ZB1gs67D2kHgNMi4hCnqGI6nFKlmIcwWEJ6e4ofW8Pm5TW+DhJKvVJIB1KCtHTV
bBld+F8svygwIKCygs3nZrX9/TIeLvHfnKq3AE+DDWWTlZfgWMXZDjaf4acxyRYs
m/65dyJebgxbTw==
-----END CERTIFICATE-----
Generated at Sun Apr 26 22:51:49 2026 by rpki-client