Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: BO22g4vZVqhJ53rrJbcssg68PSV/EnahqRNJ+GhMrlI=
Subject key identifier: 32:79:86:87:16:14:F0:1F:0C:3B:40:B9:14:FB:92:A1:12:77:EC:A9
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019EB5E96D0EABCA73AD1D23DE7A32FA06AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 18BA
Signing time: Thu 11 Jun 2026 09:00:34 +0000
Manifest this update: Thu 11 Jun 2026 09:00:34 +0000
Manifest next update: Fri 12 Jun 2026 09:00:34 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: 73ifgy99OQkGzTEcq9zepTONKxQ.roa (hash: 4zhTzbj3V3yrAZvwEac5lyxz6RMKFD+ijUfTKZuFWOA=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: Anl8vzBjYPTd1AY0PZb3G6WA6eZ6FJPp1IN5matceCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:6d:0e:ab:ca:73:ad:1d:23:de:7a:32:fa:06:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jun 11 09:00:34 2026 GMT
Not After : Jun 12 09:00:34 2026 GMT
Subject: CN=327986871614f01f0c3b40b914fb92a11277eca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:b3:6e:6f:10:fd:ea:7a:9d:98:ee:24:09:
19:34:82:a9:4d:0e:03:59:a2:88:e2:c4:de:5f:b7:
54:d0:63:8d:df:63:78:06:8c:1e:75:8c:4a:30:dd:
0b:5f:81:38:b9:23:4f:42:0b:19:96:51:d9:cd:f7:
a2:8d:d3:ed:08:df:c8:f8:25:db:48:eb:4f:62:e1:
9e:c9:05:84:e7:c7:b4:bf:2f:7e:c8:f5:39:43:80:
48:0e:1e:e5:0a:7b:48:75:38:96:c2:ec:c7:0f:71:
ac:e5:9c:50:a5:c2:38:71:e5:b3:7c:ed:d0:6f:e4:
88:83:77:59:44:4a:0c:06:25:56:e0:14:c9:fc:96:
bd:60:98:9b:7a:d5:6b:04:0a:30:8d:7f:79:a3:7b:
27:97:6c:d5:ab:bc:bf:15:04:b5:11:e0:6f:ba:16:
cd:36:16:40:20:7f:47:81:36:63:14:49:3e:0c:11:
7e:85:94:53:20:e4:ac:d0:30:32:3b:1a:af:df:4a:
10:d0:7f:66:00:3a:96:08:ba:7a:1c:96:51:78:df:
3a:02:a7:ab:bf:09:cb:98:e0:43:a1:fb:4c:0b:0f:
91:6a:df:eb:17:1b:86:37:d8:55:30:4a:7e:74:e0:
65:68:18:3b:f0:50:2e:61:16:e4:eb:96:67:1b:2e:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:86:87:16:14:F0:1F:0C:3B:40:B9:14:FB:92:A1:12:77:EC:A9
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:87:37:6a:3a:c6:8f:a5:97:03:38:b2:07:18:78:65:d3:9a:
c4:2d:f9:49:6a:ea:79:20:76:cc:8d:af:48:ef:d8:7d:42:88:
5b:22:5c:a4:28:6d:1f:47:f0:5d:69:87:92:99:28:ee:a6:31:
63:ac:80:54:36:e0:a9:14:c9:f8:1a:46:91:72:aa:1c:2a:a6:
7d:e3:25:fa:8c:be:80:62:fb:7c:de:86:dc:1a:06:4b:25:e4:
64:09:1a:2b:56:de:fd:0e:f9:fa:b6:96:48:fc:4a:32:f6:be:
ba:a9:a0:f8:f2:82:6d:64:f3:b2:19:33:c3:df:bf:f3:a5:b3:
40:63:8c:76:4a:19:fb:65:5f:27:57:a0:58:c1:6e:c8:b7:c5:
54:b9:e9:4d:00:e0:21:84:c4:bc:89:15:b9:27:90:fc:67:14:
ec:f2:ee:6e:f6:46:a5:d7:40:53:77:fe:cd:b7:a7:32:16:2a:
ce:00:7d:74:39:18:d2:c6:93:fe:16:6a:5b:2c:47:3d:35:51:
95:3c:6e:b7:29:53:00:09:ea:a8:32:6e:2b:8c:35:9f:52:f0:
3c:97:14:85:cb:ec:f7:be:a3:1b:a2:72:64:d3:0a:ad:d2:7d:
c1:06:73:32:d9:dc:21:3c:ba:e3:1b:6f:d7:fd:c0:63:8f:af:
58:53:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:10:30 2026 by rpki-client