Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: MHxexw0OEf5dEMzRgTmE9Ak9m1F/EuHuT3bQvgcmgDU=
Subject key identifier: F8:56:B5:97:9B:95:F6:C3:73:81:6F:79:95:27:FD:26:AB:D2:81:7D
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01A1250BC760A1DC7BD84B0EF9ECC616586C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 19FF
Signing time: Sat 10 Oct 2026 09:01:31 +0000
Manifest this update: Sat 10 Oct 2026 09:01:31 +0000
Manifest next update: Sun 11 Oct 2026 09:01:31 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: HuBqJxrPz8cJIEhWPQ734TMtT-k.roa (hash: tQAxKG9Tf5jOtAxlSBHO2a2s2np2ioSUpEcr2kqOTv4=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: inKxHuAwYoDqF66c5x1vcugoz0l4pEjsTHubgXrz1Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:c7:60:a1:dc:7b:d8:4b:0e:f9:ec:c6:16:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Oct 10 09:01:31 2026 GMT
Not After : Oct 11 09:01:31 2026 GMT
Subject: CN=f856b5979b95f6c373816f799527fd26abd2817d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:6f:c2:b2:ec:4b:d8:08:2f:62:0f:13:28:
60:cb:dc:d3:3f:a0:4e:6a:61:b3:1f:77:0a:e8:d0:
dc:90:27:11:4e:11:58:02:d5:05:ae:39:ef:1d:fa:
10:ff:4b:78:27:9e:91:71:15:6e:38:2c:10:9f:f8:
03:85:2d:e1:e0:6b:11:b8:83:a4:a0:71:63:87:80:
1e:c6:78:7d:f8:0f:c7:cd:db:19:19:0a:e9:8e:ed:
0d:77:8c:fe:ed:bf:fc:80:cb:0f:02:3a:34:a5:b1:
a5:e9:d4:29:11:c5:75:b7:6b:f1:3d:da:13:5e:05:
9e:04:6c:bd:45:44:77:4a:a0:ae:4d:0b:79:4a:dc:
8f:c5:b9:21:1c:8f:45:e7:76:b3:c9:db:a7:9b:92:
e6:47:51:13:f9:3a:8d:0b:d3:b8:8f:4f:b8:fe:3e:
35:ab:87:e7:b1:ff:2f:d0:c7:d7:03:36:74:de:de:
83:31:dd:b1:ec:3f:16:d0:ac:8e:f6:cb:5d:8e:9a:
9c:e0:22:70:c9:04:21:ca:de:b4:4b:65:88:9a:7d:
5c:d7:6b:63:e7:0a:15:49:8f:3c:6a:89:0c:a9:1d:
d4:f2:03:cd:4a:7a:88:ea:ff:52:c5:0f:10:a6:09:
3e:32:79:3c:3d:b0:f3:aa:4f:25:44:bc:00:47:85:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:56:B5:97:9B:95:F6:C3:73:81:6F:79:95:27:FD:26:AB:D2:81:7D
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ea:04:50:b6:66:19:6a:32:bd:4c:96:13:da:96:f2:6c:df:
cd:24:34:71:b3:1f:a2:9c:05:4d:54:c4:80:fe:e3:bb:63:56:
df:3b:06:52:78:b2:d3:2e:3a:1a:4d:e1:23:ae:88:49:73:99:
86:16:b9:85:2f:b3:a6:31:f5:fd:96:fd:a3:c8:ed:ec:41:a8:
f9:db:f4:8a:ec:0d:60:55:11:69:30:84:bc:fd:94:2a:0e:21:
d0:de:17:f6:b6:c6:15:60:16:10:d1:4c:b6:3a:30:41:02:15:
d4:21:c0:d0:be:b0:6a:71:38:30:b1:0a:cd:e5:a4:77:10:55:
07:c1:b4:4d:f8:b8:65:a9:fd:e1:d7:d7:91:ab:2e:c4:c8:86:
38:bc:fa:f9:d3:3f:29:be:88:55:a9:70:39:a9:a3:bb:f3:35:
03:9d:cc:00:cb:ad:f2:c3:6e:d4:31:b4:ba:52:38:b4:b2:b1:
d8:d7:28:f1:ce:fa:91:6b:83:b7:a4:a9:f9:5c:11:84:52:1b:
f8:4b:e7:b2:40:16:0c:f7:0d:17:fa:3e:80:7a:7e:08:da:7a:
f9:0c:6b:2d:76:bf:c0:a2:3a:ab:85:40:b3:34:c8:cc:af:fb:
fa:8f:3b:fe:29:ae:9e:bc:fd:7d:33:52:af:7d:46:f8:00:e4:
ed:b2:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:39:00 2026 by rpki-client