Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: YxlnkJbxn8bYqffB81YTIPqiqoXwNu88J9PjktdogeA=
Subject key identifier: 16:02:91:16:0F:5E:23:2F:62:DD:91:11:55:13:6B:BA:7A:40:8D:E5
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 019DA30A72398A7ABEA412B9C6BD1E2EEFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 0A32
Signing time: Sun 19 Apr 2026 00:01:03 +0000
Manifest this update: Sun 19 Apr 2026 00:01:03 +0000
Manifest next update: Mon 20 Apr 2026 00:01:03 +0000
Files and hashes: 1: 1K1Um4B_fpW1GkCf_gBrii6dk-U.roa (hash: /YNif+CPSNTVk1hV3V7FBKNaBXD9ZU/xIRYCuPXwkd4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: /z3RWd4KIsrTJtnaB58u9CvKsm5PaCBT7TtIQS8yag0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:72:39:8a:7a:be:a4:12:b9:c6:bd:1e:2e:ef:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Apr 19 00:01:03 2026 GMT
Not After : Apr 20 00:01:03 2026 GMT
Subject: CN=160291160f5e232f62dd911155136bba7a408de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:ed:95:b5:b1:2d:60:aa:3c:28:2b:b3:b9:
a9:81:d1:43:70:37:ef:ba:66:67:19:ea:79:5f:1e:
f6:29:76:4e:d7:92:d3:fd:34:80:f6:6b:5a:af:45:
c5:dd:93:18:15:51:09:79:dd:ff:87:cd:10:d3:4d:
ff:dd:74:53:ec:d6:32:c5:f7:53:0a:72:de:88:89:
24:ea:4b:34:bb:c7:88:99:bb:99:51:55:4b:74:2d:
15:a4:13:cd:00:f4:f0:ad:e5:0a:43:10:30:5a:b3:
c2:39:5d:a5:6e:c0:12:a4:63:d1:50:d7:42:3d:ea:
39:1a:4c:26:85:d2:97:c3:83:66:8b:af:ec:44:e9:
00:b4:f9:78:e4:38:73:67:99:4f:d6:3c:f2:19:cd:
ff:3a:11:23:ed:b8:8a:31:cf:e3:09:5d:0e:28:01:
8b:00:3f:04:ee:15:a8:78:ff:6b:db:15:65:11:ee:
ed:10:da:1e:39:03:39:8f:da:23:61:78:3e:fa:63:
af:f7:27:9f:8b:ec:6d:44:de:86:93:5b:6e:51:d8:
78:e0:43:59:5e:27:42:bc:0b:5f:f8:f9:2e:4d:e7:
e7:ee:4a:63:4e:9a:c8:16:af:0c:d8:98:c6:94:c1:
ff:d5:13:49:70:fc:49:04:08:87:3a:01:f4:f3:e2:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:91:16:0F:5E:23:2F:62:DD:91:11:55:13:6B:BA:7A:40:8D:E5
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b2:56:59:2f:79:6b:ee:c3:2b:e2:14:78:3f:e5:2a:23:f2:
f8:d0:19:12:86:8c:3e:1c:0d:b1:34:56:c1:b5:0b:de:33:34:
85:b9:6a:fe:e6:2b:6e:4a:d8:78:28:b3:81:c9:cc:c5:95:10:
da:d7:1c:ae:67:74:ad:c2:f2:6a:d9:aa:53:81:a3:fa:d2:e2:
ac:ef:e2:e0:0e:90:af:1c:c9:3b:dc:a0:b2:e2:0f:95:3b:d3:
97:fa:70:86:48:48:d8:a8:27:7c:1d:e3:dd:ce:3d:80:f1:d4:
54:37:0e:f1:11:a0:a3:57:bc:d6:ff:33:b5:d3:a7:ae:52:14:
3e:8b:52:f8:fb:24:fa:03:66:9a:c3:dc:02:a1:55:6b:d2:f8:
a9:3a:f0:2a:6e:01:42:37:93:48:3c:e5:d1:d4:45:d3:28:34:
05:0b:ed:8f:b5:62:23:e7:cf:f5:6b:40:17:d9:33:af:19:86:
a6:29:f7:e3:2d:8e:00:1d:03:9a:03:f8:1a:73:60:bf:83:74:
64:86:e2:24:a3:d2:be:e1:ac:32:b9:ea:ec:21:bc:03:93:79:
ff:46:fb:5b:13:46:eb:ca:f7:3f:c2:c8:32:e6:6f:8c:e0:51:
fc:55:a1:b0:ee:52:f4:47:0d:3b:75:46:27:dd:1a:34:cd:e3:
51:f4:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:59:42 2026 by rpki-client