Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: ryoOy5+A8ilsHDDReVjAm0TFY2ChstuYQRCAxwbbQBQ=
Subject key identifier: 6E:94:75:D8:86:B0:05:C0:EC:CC:6B:3B:BF:52:35:5C:C5:76:93:6E
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 01A1818744CB4C7EF34EDD06D2F1B147C372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1A59
Signing time: Wed 28 Oct 2026 08:01:28 +0000
Manifest this update: Wed 28 Oct 2026 08:01:28 +0000
Manifest next update: Thu 29 Oct 2026 08:01:28 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: pPy7s1SM5C6vrXXFqC5LQXV4+/sUxJcUyboALoosWRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:44:cb:4c:7e:f3:4e:dd:06:d2:f1:b1:47:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Oct 28 08:01:28 2026 GMT
Not After : Oct 29 08:01:28 2026 GMT
Subject: CN=6e9475d886b005c0eccc6b3bbf52355cc576936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:a7:a8:dd:aa:7d:41:1c:b8:7a:2b:98:40:
88:0a:b2:66:9a:dd:3f:13:96:bc:bd:0f:42:b7:e9:
74:50:1a:60:81:bd:ef:09:40:1a:cc:7f:1a:71:b3:
a3:8a:e4:a3:61:b8:61:fb:65:9b:f1:e3:56:f2:c7:
ac:42:5f:b6:f5:19:78:2f:46:fb:59:96:0d:11:4b:
82:b6:58:a2:4b:ff:8f:f8:ca:db:a7:8b:91:e6:e7:
86:dc:b4:b8:e7:bf:a7:fa:7b:09:1d:ad:63:8b:08:
48:2e:03:c3:75:29:82:64:a3:c8:f2:9c:20:72:18:
24:de:56:e4:5a:d1:99:f5:00:8d:ea:e0:16:85:87:
71:cf:42:5e:eb:cf:a2:3a:56:0e:c3:25:de:5f:20:
03:84:31:84:47:f2:ea:d5:a0:ed:41:ba:e7:83:df:
b9:ea:16:34:4b:5f:21:d8:ae:21:d3:79:15:1c:d6:
df:44:f3:b3:f1:51:df:39:6f:32:44:25:f2:23:f2:
61:07:32:d1:20:45:2e:b7:ad:cc:c8:e6:e0:35:65:
4d:c0:f2:c2:17:92:13:96:ef:70:6c:1e:4d:2a:cc:
04:68:e6:86:f4:24:10:8e:d8:14:bc:71:34:ce:36:
a3:9c:d1:cb:5d:0d:51:67:1b:15:ed:1d:3a:4e:ab:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:94:75:D8:86:B0:05:C0:EC:CC:6B:3B:BF:52:35:5C:C5:76:93:6E
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5e:ee:5a:dc:d2:23:c4:1e:70:60:d4:57:60:0a:25:fd:89:
fa:cd:7f:04:75:c2:1a:60:4d:a5:aa:86:99:29:90:74:35:f5:
47:7a:13:54:10:46:7c:00:ee:d5:8e:73:49:88:9c:35:8d:04:
64:ca:f5:d0:f9:c4:02:38:2e:f8:5e:43:04:55:db:b6:a1:45:
ee:64:cc:b9:34:fb:2e:f0:93:0d:4f:16:73:8a:da:8a:54:99:
85:17:ac:6d:ba:c1:f2:bd:b0:84:cb:32:b1:86:09:f2:b3:b5:
af:2a:c6:66:1b:14:cd:8c:61:de:b6:4a:49:15:7f:6c:f3:dd:
79:10:d9:d9:ec:1c:62:ef:6a:f5:ef:ae:90:83:97:b8:28:03:
94:82:91:2d:87:75:af:4f:71:b3:b6:99:05:48:f8:ab:56:71:
54:c4:ec:62:d3:7f:10:29:12:9a:e9:f8:72:3c:93:21:e0:6d:
32:c7:46:50:95:92:ce:b2:69:27:f3:c0:17:ac:95:ee:8f:ca:
78:38:81:cb:5e:ff:25:4e:26:33:ba:11:f0:5f:48:7c:1b:c8:
12:58:81:ee:0d:6a:fd:11:ae:1f:fb:a6:a0:fa:38:75:78:9b:
e9:2c:51:12:f3:ce:af:9a:62:f7:fd:e6:91:7c:ed:dc:41:61:
fe:87:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:36:37 2026 by rpki-client