Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: 98wmxImkJ/RKTJQnWjV7s7jWowQ0BE8MhMEHIbihoiw=
Subject key identifier: 2A:6D:EB:7E:04:ED:6F:E7:BC:BE:A8:AF:E1:97:D4:76:F7:3C:22:01
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019D9D3F88D1478BD0A1F8A449A7AD4A118E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 1826
Signing time: Fri 17 Apr 2026 21:01:19 +0000
Manifest this update: Fri 17 Apr 2026 21:01:19 +0000
Manifest next update: Sat 18 Apr 2026 21:01:19 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: BfDjCxQZpVIvWuHPpUF1014sxPo.roa (hash: xAMeCUjUJk50I2+3B3yRzk6L+sK+RxuSoLFdPe8pfMM=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: bGNn+kG+ds1j29VDDUxKF7x9f/uEnBDfy9lZ5UsMf0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:88:d1:47:8b:d0:a1:f8:a4:49:a7:ad:4a:11:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Apr 17 21:01:19 2026 GMT
Not After : Apr 18 21:01:19 2026 GMT
Subject: CN=2a6deb7e04ed6fe7bcbea8afe197d476f73c2201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:dc:de:45:8d:72:a8:6f:07:78:84:b9:da:
6f:45:98:08:a9:29:09:8d:10:ad:ab:6a:1e:45:58:
7a:d8:3a:43:f5:4e:bc:22:40:1a:89:c5:20:98:2a:
b9:28:d6:dd:4f:76:87:31:03:26:71:5c:d7:1a:de:
73:96:20:43:54:87:6d:1a:bb:e3:ef:98:a4:66:cb:
e7:61:00:99:6c:4d:e3:89:ec:58:41:f9:19:a6:c4:
3b:ab:10:22:65:f4:2f:13:cc:7e:a5:78:42:78:c4:
58:19:ee:75:0f:5a:55:5f:e4:e8:f0:e0:44:18:f1:
36:7c:ba:bf:55:28:54:80:c0:55:8f:ea:6b:1d:16:
c2:40:93:c1:ea:a3:f8:13:a4:79:b8:8c:02:9d:18:
37:06:3f:1b:63:c4:be:a5:2f:55:16:83:f1:6a:e6:
e5:bf:70:45:22:3a:b3:52:43:aa:4c:f9:ae:fb:18:
68:08:0b:dd:6a:42:3e:ae:75:2e:9e:aa:81:34:e9:
71:00:84:d6:73:c4:89:f4:ef:d8:77:00:a2:c1:bd:
2c:39:44:2f:bb:2f:7b:27:55:39:86:ef:09:75:47:
48:e7:d1:a7:28:59:d5:ac:5d:6c:57:7e:85:f5:6e:
ce:ea:ae:86:03:24:6f:dd:9e:e9:34:32:c8:2c:8c:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:EB:7E:04:ED:6F:E7:BC:BE:A8:AF:E1:97:D4:76:F7:3C:22:01
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:df:f4:cd:71:34:11:61:18:db:c2:e2:1b:25:8d:f9:c9:0d:
da:06:8d:84:ae:a1:3f:f2:cb:a0:ae:c3:35:e2:3c:a8:c0:d6:
64:3d:1b:9e:44:9b:f3:ed:00:bb:f2:6b:69:63:53:e0:06:bd:
09:24:41:4c:41:1f:d0:e2:eb:56:65:22:64:ab:f3:a8:3a:73:
20:1d:d7:ae:68:da:36:2a:36:c4:61:5d:69:7d:db:aa:fe:55:
35:13:cf:69:d4:c3:0c:8c:f3:ca:a3:54:dc:22:ce:a8:70:fb:
b9:98:fa:cd:73:71:9e:e4:8c:c7:9e:7a:86:bd:3f:c8:54:20:
5a:d1:24:8c:a8:17:61:0e:83:ad:ea:76:3b:7e:6d:34:95:d0:
7b:50:e4:e0:86:d1:00:9c:9b:d2:35:99:d1:1f:0e:9c:e1:53:
f7:b5:f0:35:06:05:c5:2f:28:20:24:63:34:9e:03:bd:72:e8:
f7:c0:50:6f:44:11:94:d6:7d:58:4c:2f:2a:68:3b:cf:5b:ce:
fe:d8:bd:85:37:5d:d9:52:f1:53:7f:06:55:c5:5a:a0:f4:7c:
f3:31:11:cf:23:0f:f7:29:0e:1b:96:02:32:b6:ca:0d:ff:35:
5a:f8:5d:19:a1:81:21:3f:46:3a:e8:47:ee:32:89:55:ce:eb:
18:57:4b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:46:00 2026 by rpki-client