Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: iIAOJVUsAM7tAYQvpj4iafUdR6MZdQNH9zAyatXCxis=
Subject key identifier: 51:1A:DD:F0:5F:EA:23:32:9E:C6:1F:1A:4F:27:FC:7E:3A:6D:C8:FB
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 01A08C44297FB3A94C105B4EB580CF628C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 17:01:12 +0000
Manifest this update: Thu 10 Sep 2026 17:01:12 +0000
Manifest next update: Fri 11 Sep 2026 17:01:12 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: NqripIeicr6ntJ5ElcTn0g9L3Y18YLxWzUvLaS3prgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:29:7f:b3:a9:4c:10:5b:4e:b5:80:cf:62:8c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Sep 10 17:01:12 2026 GMT
Not After : Sep 11 17:01:12 2026 GMT
Subject: CN=511addf05fea23329ec61f1a4f27fc7e3a6dc8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:9b:1c:b5:2f:f0:99:44:32:f9:b3:ec:c5:
b7:ae:77:2d:b7:6f:91:30:07:70:dc:51:6c:e0:9d:
68:25:19:16:ea:d6:de:5c:a5:d0:fa:e5:a4:35:d6:
ef:c4:02:60:90:5a:12:a1:51:8c:08:be:8f:4b:ec:
7e:33:40:9a:fa:fc:25:2d:90:38:80:86:17:3a:2d:
6a:4e:d7:17:03:0a:71:fc:8f:4b:28:0d:6a:68:dd:
e5:89:1b:1c:fb:8b:b0:91:33:5a:39:76:de:1f:97:
d2:bc:f7:d4:d8:fd:e4:2e:67:b7:6a:8b:ec:ea:d6:
56:74:93:66:2f:29:9d:03:cc:80:ac:e6:cf:8e:6b:
ce:84:44:84:d9:ee:d3:55:67:51:18:17:a0:1f:87:
58:1a:b0:4e:1e:69:26:a1:33:e7:e2:e0:d2:f9:82:
69:db:e2:00:a5:72:d7:df:0c:fc:3e:1e:9e:2b:8b:
29:20:fd:c0:87:73:d6:6e:bf:7d:19:4f:9e:a1:56:
5d:e8:5a:43:d6:85:c2:58:82:e2:14:fd:b8:59:19:
34:3e:ad:09:72:46:b9:7d:22:85:08:90:88:3f:98:
b6:a5:4d:5d:32:42:e2:6d:a3:47:24:f5:02:81:e1:
da:63:2d:bb:57:ac:15:10:f0:94:d8:41:16:3d:0f:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1A:DD:F0:5F:EA:23:32:9E:C6:1F:1A:4F:27:FC:7E:3A:6D:C8:FB
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a4:18:7a:d9:5c:14:db:af:9a:1a:91:45:05:58:f4:e3:77:
0f:f5:e7:09:c8:f4:26:a5:8d:af:85:88:e2:75:e1:c8:28:d1:
96:1a:24:8e:d9:c0:bb:41:e0:24:a9:d3:53:6a:3d:5d:48:24:
a7:2f:d1:1f:a9:c3:3f:5c:ff:3f:ff:99:92:f8:bf:2e:47:47:
7d:8a:0d:c4:4b:b1:e0:4d:30:fc:e1:71:bc:43:3f:2c:8b:6e:
a5:2b:70:be:10:0b:94:27:11:77:2b:1d:b9:f9:88:5a:7e:d2:
da:19:42:84:e6:f4:b2:c6:30:fe:be:80:e7:18:6a:ab:55:80:
dc:d3:cf:2e:46:a2:c7:1f:59:1f:b4:aa:9b:c8:62:ec:b8:96:
5d:b1:45:fc:1b:09:15:e8:bd:f5:e1:d7:10:32:18:d0:29:af:
bb:df:aa:c5:9d:88:89:08:86:42:e4:76:ed:8e:2d:47:f2:ec:
29:27:63:34:e8:1a:6a:04:a3:89:96:e1:1c:3a:10:3b:59:af:
8b:b9:26:33:3e:b8:50:f6:9c:5e:6f:8e:e1:12:09:42:5b:81:
e7:7d:21:80:8b:5f:2b:ac:e1:33:aa:b8:97:35:c2:5a:d4:5f:
40:fc:d5:39:24:a3:4f:82:4d:74:a0:ce:38:94:aa:ec:ef:45:
88:06:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:16:11 2026 by rpki-client