Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: OYsMLNbsqgB5mONPEi0NEGY7pVkypYQ4fiBqx3mOusI=
Subject key identifier: 21:4F:26:CF:F5:55:60:6A:45:23:6C:CE:25:22:37:40:E9:75:06:BD
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019EC1802810B3E989F5E3C039E1F7FCCC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 18C0
Signing time: Sat 13 Jun 2026 15:01:02 +0000
Manifest this update: Sat 13 Jun 2026 15:01:02 +0000
Manifest next update: Sun 14 Jun 2026 15:01:02 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: 73ifgy99OQkGzTEcq9zepTONKxQ.roa (hash: 4zhTzbj3V3yrAZvwEac5lyxz6RMKFD+ijUfTKZuFWOA=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: pMDeMuuy+dyUaE4KivqneAoMrmqv56CVeLrzS4CSijU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:28:10:b3:e9:89:f5:e3:c0:39:e1:f7:fc:cc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jun 13 15:01:02 2026 GMT
Not After : Jun 14 15:01:02 2026 GMT
Subject: CN=214f26cff555606a45236cce25223740e97506bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:86:d1:34:5b:86:0f:ae:ac:a8:4c:24:fe:f6:
74:d5:b1:a8:d1:f9:7b:71:f1:23:e2:48:68:f3:e2:
3f:9c:47:89:54:ed:8b:e7:89:99:d3:60:d8:d6:36:
72:26:cd:25:6e:09:3a:03:56:25:da:f4:90:4d:ec:
6b:dc:d7:82:47:65:da:5e:24:88:9b:ba:00:1b:a9:
7a:4c:b9:a1:d2:cd:66:75:f4:8e:de:4a:c9:aa:6b:
15:0a:ff:8e:2f:48:9b:3d:fa:d2:bd:a4:00:6f:11:
f7:0e:38:6b:cb:be:cf:63:ff:78:8f:1f:fc:70:5e:
c5:2d:7d:f6:7b:32:c4:c9:af:e3:1e:f7:6d:a2:3c:
cf:41:a6:ed:18:43:fb:ac:4b:17:dd:55:c4:3c:3a:
a1:b4:75:30:ec:88:1b:29:fa:ff:40:fc:96:94:ea:
df:0a:97:53:54:89:79:fd:2d:33:a0:5c:13:05:38:
5d:5d:7a:22:da:17:49:d7:69:db:ee:aa:5b:0f:52:
16:33:a5:9e:ec:a2:56:b8:b0:1f:93:b3:4f:f1:e4:
3c:d5:66:38:e4:4d:a6:dd:5c:6e:5f:58:57:25:24:
83:43:64:83:24:88:e4:11:c3:7b:3a:e3:54:ae:82:
7a:3e:09:a9:c1:10:56:9e:37:ab:56:65:9c:77:7b:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:26:CF:F5:55:60:6A:45:23:6C:CE:25:22:37:40:E9:75:06:BD
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ce:49:22:95:8b:bc:a6:5e:5e:1e:9c:ee:21:be:b6:db:68:
41:fc:7f:3a:fd:47:a8:45:82:49:d3:55:ed:e6:97:20:c1:75:
5e:b9:72:e8:14:64:d7:88:4d:ae:fc:4c:bf:9c:c2:ef:79:fd:
b4:4a:fd:76:39:f0:3b:24:02:94:65:82:c9:d5:7d:51:1a:fd:
94:c1:c3:ad:90:95:38:e6:7e:dc:5c:35:ca:cf:a5:fd:0e:c3:
91:3e:21:54:a4:60:01:de:93:05:6c:1e:cd:03:4e:81:ac:ec:
d3:70:7a:55:e9:c9:6f:59:28:0a:61:2e:7b:f2:37:82:78:30:
63:0e:e3:8f:90:16:50:69:1d:b6:35:74:d3:d9:9b:d8:9a:bd:
fc:d5:99:25:03:c0:68:61:aa:84:dd:3b:a3:51:af:98:2e:f3:
2c:9f:92:41:83:76:75:b2:d6:74:cd:34:0c:7b:a7:7b:20:b0:
5e:c9:6e:28:d0:35:f8:a0:70:2d:ec:ac:b5:a2:a4:27:02:20:
d5:e2:51:e4:3e:2f:02:c9:cb:d9:53:82:ac:ec:32:a7:01:b5:
5f:55:71:6d:9d:a9:41:5a:76:d7:22:ad:fe:aa:88:78:da:c7:
60:fc:72:1b:7c:06:9d:89:b2:bd:7a:5e:83:e7:0a:67:9e:82:
35:8e:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:34:24 2026 by rpki-client