Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: FuRAhsVqZabqQ12tlxEyKq0XETdbkj8xqgU0u9+DaQU=
Subject key identifier: E8:F0:E0:A6:D6:48:DC:65:67:27:4B:EF:15:40:7B:53:43:42:C0:FC
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019EC3DC4B2FB9EB3B17F08792324AC6B812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 196B
Signing time: Sun 14 Jun 2026 02:00:54 +0000
Manifest this update: Sun 14 Jun 2026 02:00:54 +0000
Manifest next update: Mon 15 Jun 2026 02:00:54 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: +ITC/USYZqVBh1cudMXFpuiaYnSKAlY9sIfmsaUWYcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:4b:2f:b9:eb:3b:17:f0:87:92:32:4a:c6:b8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jun 14 02:00:54 2026 GMT
Not After : Jun 15 02:00:54 2026 GMT
Subject: CN=e8f0e0a6d648dc6567274bef15407b534342c0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:3b:bb:ad:ce:ab:47:7f:5b:97:87:0d:0c:
88:c4:a0:0f:1a:38:b9:04:04:77:3c:7c:b3:20:6d:
b6:bd:78:12:09:73:0f:a9:95:41:39:d2:ce:69:f1:
a3:1c:d1:51:89:fe:6c:22:54:74:71:9a:df:53:ed:
8f:94:7c:1f:bf:d1:57:4a:24:1b:78:92:70:36:5f:
69:ff:07:b2:3a:14:1a:c3:93:3b:30:4a:0d:ee:d2:
de:16:b5:4c:9f:17:0f:2d:4d:23:b8:30:2c:3f:93:
34:c1:66:01:3a:d3:28:1f:09:f4:3f:d8:28:9a:9f:
82:e0:37:c8:6e:dc:1b:e0:b4:07:2a:1b:2a:47:f8:
bc:63:d7:c0:81:a7:50:56:dc:8d:79:f1:54:7b:6c:
bd:a7:ca:7a:6f:62:71:98:98:e0:af:dc:3f:cc:4d:
cf:95:71:e2:ac:0d:0b:01:72:3f:f2:6a:a6:0f:5f:
77:50:3a:cc:a4:cd:f9:8e:d7:fb:74:03:56:71:a7:
2b:4a:03:c0:d2:a2:d7:86:e5:6d:41:5d:04:76:c1:
89:54:8b:1e:ea:d7:9a:a2:b3:4d:d6:c7:8b:ae:a1:
ef:f5:17:02:2e:24:9a:3b:5b:e0:5a:50:0a:a7:21:
03:01:0c:eb:6c:01:f0:cc:62:26:6c:b9:f9:0c:d7:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:E0:A6:D6:48:DC:65:67:27:4B:EF:15:40:7B:53:43:42:C0:FC
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d2:03:e5:a7:aa:4d:e7:55:fd:8b:4d:00:35:0e:54:37:d2:
60:1e:86:77:9c:a2:2d:b9:ed:8d:f4:14:48:15:98:77:3e:88:
4b:5a:39:6d:cb:1d:20:f9:ef:4c:ac:c8:f4:10:b0:84:f8:78:
52:37:b9:ca:c9:f2:15:8e:9f:f1:75:3b:ee:c8:6a:e9:12:9b:
75:11:0c:d2:0f:9f:63:37:c1:20:c8:25:9e:37:d6:31:28:0e:
b0:94:90:a7:80:54:bd:de:12:6b:5a:cf:18:23:3d:2c:bc:be:
0e:88:86:6a:10:db:de:cd:18:7a:9c:f4:3e:2a:46:93:c4:64:
88:e1:21:ec:31:7c:b5:a5:d1:7f:5a:48:1d:9a:1a:88:65:01:
80:a0:cf:02:c2:26:26:89:dc:5d:3e:6c:d1:fb:b3:19:ea:2f:
03:a5:e7:d1:c7:5d:ce:ac:77:27:1c:7c:2d:bf:9f:33:c2:1b:
ff:ed:ad:7a:48:be:fd:00:46:73:b0:57:d7:58:71:6d:ff:de:
0c:46:1b:0a:98:30:15:7c:a7:c8:8f:44:01:55:eb:41:43:35:
6a:c0:94:4d:30:42:59:ac:16:46:49:8f:04:9b:e4:7c:cc:4e:
87:56:0b:18:3c:9f:24:30:1a:e5:df:68:3e:2c:d3:4b:f4:5d:
98:c0:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:24:25 2026 by rpki-client