Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: vJq8pLX6T/hpvonALqps5zY4XJpPTlRfgGz4c4UTne8=
Subject key identifier: DE:B7:0B:E1:13:58:63:B8:BC:7B:67:DB:86:AE:86:61:FD:61:DA:9C
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 01A08A55BB6D259D65DA2E3028C14A144A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 19D9
Signing time: Thu 10 Sep 2026 08:01:09 +0000
Manifest this update: Thu 10 Sep 2026 08:01:09 +0000
Manifest next update: Fri 11 Sep 2026 08:01:09 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: 828D9nXF9AVJe8T2RVB7RN8PEKieHgFKuihAwVyF9QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:bb:6d:25:9d:65:da:2e:30:28:c1:4a:14:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Sep 10 08:01:09 2026 GMT
Not After : Sep 11 08:01:09 2026 GMT
Subject: CN=deb70be1135863b8bc7b67db86ae8661fd61da9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:4b:0e:bd:c1:8a:bf:9f:4e:9b:fc:5a:6a:
80:be:d2:89:4b:66:9a:fa:0d:59:ce:13:48:f8:c6:
3f:39:94:54:82:29:55:e5:ad:94:75:c3:bd:1a:9d:
65:62:ac:a3:d2:d5:31:91:7a:d6:b9:ba:3f:7e:17:
52:22:5f:94:c9:c7:0d:5e:3a:9a:7f:db:38:2c:07:
51:08:a7:ed:74:00:be:a8:e3:bd:b0:5b:5b:81:cb:
c3:50:39:0f:5e:16:d6:0b:16:ae:1a:e5:7f:f6:ca:
31:10:22:9e:f9:ce:cf:be:15:ee:8b:64:10:fa:74:
0b:19:b6:01:fc:7e:c1:69:0c:75:d7:bf:d1:29:2c:
3b:36:55:ba:3d:60:51:51:cb:f3:77:97:be:38:10:
ff:9f:7d:36:d0:5a:ac:e8:f0:67:54:80:45:31:2e:
54:71:6c:f5:45:1a:3d:67:88:dc:45:06:96:07:4f:
75:48:75:d1:5a:1a:22:09:af:19:a5:e0:49:33:4d:
4f:9e:25:c2:36:03:90:fa:49:4e:da:ce:0b:73:1e:
01:c2:24:d0:11:c5:ed:34:1d:21:71:d5:c9:04:f2:
6b:db:05:c9:f6:99:02:a1:ea:bf:4e:4c:6f:73:d1:
1e:d0:bf:b2:4f:fe:0e:22:f7:5c:ae:20:26:dd:9f:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:0B:E1:13:58:63:B8:BC:7B:67:DB:86:AE:86:61:FD:61:DA:9C
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4b:dc:76:33:b6:24:ed:7f:2f:2b:e1:16:e1:5b:79:80:56:
a6:b1:b7:67:1b:a7:28:5c:a8:e2:c2:d2:12:6b:13:dd:11:22:
80:c4:8a:79:b2:91:6e:e6:f0:17:c5:56:a7:08:4b:79:cd:40:
14:2a:c8:5d:52:c8:3a:65:a1:85:9f:6e:f6:2e:75:4c:1b:bb:
e4:88:84:35:e3:13:48:02:be:42:36:93:78:d9:23:8a:f6:31:
8a:77:23:0f:99:77:84:f0:cf:3d:6c:13:de:5c:5e:1a:d2:ff:
6a:cb:3b:c2:7d:55:24:16:f4:3b:f9:5e:a4:77:bc:23:ad:5e:
2d:f1:84:38:aa:93:73:6a:16:86:49:76:b2:ac:26:c5:aa:e0:
83:5e:5b:46:45:58:c6:a4:72:12:91:27:15:4b:48:a5:b0:0e:
79:0a:99:dd:9e:e0:54:de:56:0d:89:5e:88:60:74:31:7f:3b:
7d:6d:dc:24:e1:5b:53:24:c5:42:cf:3f:42:fd:1e:3c:14:b5:
fe:30:36:96:bd:9f:3c:a7:3c:df:21:c4:b6:e3:b0:37:35:1a:
1e:8b:b1:5e:44:7d:40:18:a8:c7:da:a1:aa:eb:a6:56:8d:90:
28:22:22:05:c2:16:37:33:18:2a:f2:b7:d3:de:31:90:94:ae:
bf:c2:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:02 2026 by rpki-client