Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: aC11pJl5xWjcrBVn9ylNTI914ZjlbjFLXaYt60/llxw=
Subject key identifier: A7:D2:9F:D6:BA:7D:65:32:5F:84:37:28:70:97:07:63:39:F9:AA:D2
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019FA29779B930456F7BD64E19C54AFBA731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 08:01:03 +0000
Manifest this update: Mon 27 Jul 2026 08:01:03 +0000
Manifest next update: Tue 28 Jul 2026 08:01:03 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: /mESgPANmayeN6SihvICjvZ0lkfjqAylAqCt/myCZMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:79:b9:30:45:6f:7b:d6:4e:19:c5:4a:fb:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jul 27 08:01:03 2026 GMT
Not After : Jul 28 08:01:03 2026 GMT
Subject: CN=a7d29fd6ba7d65325f8437287097076339f9aad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:bf:ee:52:08:af:28:7a:42:ce:ca:c5:e9:
f4:c4:84:9d:7b:33:45:00:a7:c2:3c:28:c6:8d:44:
80:e2:84:e3:cd:2d:76:38:20:8e:9a:9a:5d:f3:af:
1d:fb:dc:44:d5:dd:8d:64:f7:51:25:e2:1b:30:3c:
f8:ae:a8:b1:c5:f7:35:f5:b9:e1:5e:c4:70:3e:03:
f5:b1:d0:c0:0a:77:50:76:6e:c9:a3:89:72:73:69:
61:a4:54:1b:b5:5a:43:33:0c:d4:b4:87:6b:62:64:
12:a1:b6:f6:52:ac:82:58:be:e6:c6:15:1a:7e:9a:
c1:a5:0a:a7:0e:d8:b8:dd:21:5b:4c:77:43:50:20:
8d:4d:a7:a9:69:7e:c5:f5:a7:0d:a9:4b:61:d6:47:
f0:3c:34:3e:66:ce:dd:d2:f6:4d:91:b6:e7:78:8f:
f0:a5:83:fc:29:72:34:8a:6c:c5:ab:48:0d:74:ac:
c0:e9:cb:b2:fb:0a:f5:25:bf:ce:16:43:c1:08:92:
2a:8a:fa:41:58:90:1b:5d:30:b1:eb:d8:3c:ab:7d:
e5:23:4f:f5:58:43:5f:4d:f3:08:d0:92:b8:4e:7a:
fd:63:61:d7:5a:21:f9:25:43:1e:9c:41:3c:06:4d:
a2:3f:c1:d5:8a:2f:86:24:b2:04:8f:0a:24:96:09:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D2:9F:D6:BA:7D:65:32:5F:84:37:28:70:97:07:63:39:F9:AA:D2
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:31:4e:72:4b:ee:e4:af:4b:7f:22:f0:75:cd:d3:7e:69:75:
7a:c1:9f:38:8c:8f:50:e8:97:e8:4b:69:d0:a2:eb:5d:2d:6e:
cd:f0:c3:b0:19:d8:d8:a3:1c:25:0c:cb:5a:a0:dd:15:f6:41:
c5:9b:e2:61:8c:e8:ef:64:5b:2a:a8:a2:45:91:44:8e:04:db:
cc:52:46:7e:dd:39:93:5a:23:44:f7:fb:44:a2:68:8a:48:ba:
7d:7c:0b:28:60:33:d3:fd:46:7d:6e:02:bc:92:27:3c:ae:10:
8e:0f:8a:33:93:f8:c8:21:c6:ee:5a:de:7a:a9:4e:53:ce:93:
8b:f0:41:0f:3a:17:61:d2:c1:12:5d:36:9d:44:44:ef:4c:c3:
69:9b:55:26:34:33:0c:28:b3:d7:91:fa:ea:ed:ce:9c:0a:3a:
0f:d3:1a:33:e6:b9:26:6b:48:04:87:99:73:09:a5:92:a4:de:
f4:c1:af:a1:aa:1d:92:69:c9:e6:6f:95:91:05:13:73:4a:1e:
5e:d5:a1:4a:f6:d6:4f:32:d1:56:e9:f4:c2:89:02:a3:3f:3a:
fa:ce:25:d6:a9:d1:31:0b:cc:ee:86:f5:d1:37:98:2f:7d:c1:
cf:5d:86:dd:c5:5c:a2:5b:e0:16:84:a7:40:23:13:45:27:f2:
e8:96:60:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+il3m5MEVve9ZOGcVK+6cxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2
Zjg4MzIwHhcNMjYwNzI3MDgwMTAzWhcNMjYwNzI4MDgwMTAzWjAzMTEwLwYDVQQD
EyhhN2QyOWZkNmJhN2Q2NTMyNWY4NDM3Mjg3MDk3MDc2MzM5ZjlhYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVS/7lIIryh6Qs7Kxen0xISdezNF
AKfCPCjGjUSA4oTjzS12OCCOmppd868d+9xE1d2NZPdRJeIbMDz4rqixxfc19bnh
XsRwPgP1sdDACndQdm7Jo4lyc2lhpFQbtVpDMwzUtIdrYmQSobb2UqyCWL7mxhUa
fprBpQqnDti43SFbTHdDUCCNTaepaX7F9acNqUth1kfwPDQ+Zs7d0vZNkbbneI/w
pYP8KXI0imzFq0gNdKzA6cuy+wr1Jb/OFkPBCJIqivpBWJAbXTCx69g8q33lI0/1
WENfTfMI0JK4Tnr9Y2HXWiH5JUMenEE8Bk2iP8HVii+GJLIEjwoklgleYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfSn9a6fWUyX4Q3KHCXB2M5+arSMB8GA1UdIwQY
MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt
Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj
LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjFOckvu
5K9LfyLwdc3Tfml1esGfOIyPUOiX6Etp0KLrXS1uzfDDsBnY2KMcJQzLWqDdFfZB
xZviYYzo72RbKqiiRZFEjgTbzFJGft05k1ojRPf7RKJoiki6fXwLKGAz0/1GfW4C
vJInPK4Qjg+KM5P4yCHG7lreeqlOU86Ti/BBDzoXYdLBEl02nURE70zDaZtVJjQz
DCiz15H66u3OnAo6D9MaM+a5JmtIBIeZcwmlkqTe9MGvoaodkmnJ5m+VkQUTc0oe
XtWhSvbWTzLRVun0wokCoz86+s4l1qnRMQvM7ob10TeYL33Bz12G3cVcolvgFoSn
QCMTRSfy6JZgBA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:53:22 2026 by rpki-client