Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: 67LTgGVtyCVwzd02j5TeRKG0xf+m1TLZOZkPfYygqvQ=
Subject key identifier: BF:99:B6:25:BB:54:07:9B:46:9F:C3:84:50:A6:35:01:E1:9D:45:38
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019EC0A4547D97C6C334DCD6E29AE7F18814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 11:00:55 +0000
Manifest this update: Sat 13 Jun 2026 11:00:55 +0000
Manifest next update: Sun 14 Jun 2026 11:00:55 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: BhKPJQYBANogWiO0FEriZa6JrOVN/ERLV5qS1ZjTn2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:54:7d:97:c6:c3:34:dc:d6:e2:9a:e7:f1:88:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jun 13 11:00:55 2026 GMT
Not After : Jun 14 11:00:55 2026 GMT
Subject: CN=bf99b625bb54079b469fc38450a63501e19d4538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:7d:dc:ef:fc:b8:16:25:0a:c0:7f:d4:3d:
5d:22:96:1c:bb:cc:a0:5a:3a:a1:0f:6d:30:40:9f:
b2:6a:0e:33:27:c7:19:10:ea:a2:96:ae:72:e0:1c:
91:19:58:e3:e1:b2:ae:65:55:8b:76:df:d0:bf:07:
2a:d1:c0:23:e3:32:5e:65:07:cf:01:67:15:f9:16:
e6:2a:c4:5c:ee:26:8b:c9:89:63:71:f4:1d:94:98:
b9:70:a0:fe:0b:aa:4f:d8:28:b0:bc:6f:4f:7d:c2:
60:bc:4a:6f:dc:ae:7a:04:fd:19:0a:b4:37:c0:7c:
c0:38:63:d2:45:ac:60:61:ba:07:d3:23:0f:de:fb:
8c:3c:7e:d3:dd:9f:09:1f:97:89:64:9e:e5:ec:30:
25:bc:70:02:15:53:94:2b:38:93:8d:41:2c:d6:76:
c1:e7:cd:07:dc:99:93:51:72:43:27:ad:20:16:c0:
b8:02:e6:e2:6a:92:03:3a:a1:5c:39:c1:a9:2c:fc:
8a:b7:ca:49:d1:a7:67:4a:da:74:81:4d:d7:d9:e1:
46:b9:89:4e:0b:9f:30:5e:a5:9d:00:48:76:41:d3:
8e:a6:e1:2a:22:3f:df:08:f5:dc:c0:07:57:6c:7c:
3f:3a:28:76:9c:df:37:8d:51:f7:0d:27:5b:70:9a:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:99:B6:25:BB:54:07:9B:46:9F:C3:84:50:A6:35:01:E1:9D:45:38
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a3:16:be:32:50:69:47:5d:b0:c3:c1:20:96:bc:47:a1:40:
d0:a3:b7:09:df:40:b2:b0:67:54:d8:ba:71:2c:5f:0a:5a:12:
a0:97:9a:22:c1:12:e1:5b:ef:98:93:6d:3e:28:29:f9:35:df:
80:e1:fd:4d:ad:9f:57:3c:f9:6e:b3:ff:2f:f2:f4:9e:eb:e7:
c8:f4:4d:fe:f9:81:a0:8d:13:25:d2:5b:47:b4:98:7d:10:e9:
0b:1a:57:0e:5f:5f:f5:24:42:f2:0b:ae:de:7c:4b:b5:50:ba:
e0:df:df:4f:b3:bc:6a:cc:99:31:76:1a:1d:df:82:a5:6f:d5:
be:33:34:50:2e:2e:82:3c:97:82:49:6d:bb:95:65:2c:89:50:
59:46:88:be:0f:26:c6:99:1f:8f:82:6e:68:eb:32:19:b5:43:
45:31:65:54:76:86:61:a7:b0:b0:79:15:b1:77:72:c2:fe:e6:
55:5e:0c:24:51:c6:b4:7b:37:d9:f6:73:27:71:e7:33:05:a6:
f6:59:e6:48:46:81:cb:00:38:1c:0f:14:60:f9:5c:67:a8:e1:
d4:bf:ef:af:31:38:68:2b:f5:fb:54:a0:f8:89:39:c0:84:af:
bf:ce:6b:9e:78:32:95:a2:ae:e3:e3:4f:d9:5c:c7:ca:40:b3:
c1:6f:f0:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApFR9l8bDNNzW4prn8YgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2
Zjg4MzIwHhcNMjYwNjEzMTEwMDU1WhcNMjYwNjE0MTEwMDU1WjAzMTEwLwYDVQQD
EyhiZjk5YjYyNWJiNTQwNzliNDY5ZmMzODQ1MGE2MzUwMWUxOWQ0NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5t93O/8uBYlCsB/1D1dIpYcu8yg
WjqhD20wQJ+yag4zJ8cZEOqilq5y4ByRGVjj4bKuZVWLdt/Qvwcq0cAj4zJeZQfP
AWcV+RbmKsRc7iaLyYljcfQdlJi5cKD+C6pP2CiwvG9PfcJgvEpv3K56BP0ZCrQ3
wHzAOGPSRaxgYboH0yMP3vuMPH7T3Z8JH5eJZJ7l7DAlvHACFVOUKziTjUEs1nbB
580H3JmTUXJDJ60gFsC4AubiapIDOqFcOcGpLPyKt8pJ0adnStp0gU3X2eFGuYlO
C58wXqWdAEh2QdOOpuEqIj/fCPXcwAdXbHw/Oih2nN83jVH3DSdbcJroHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+ZtiW7VAebRp/DhFCmNQHhnUU4MB8GA1UdIwQY
MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt
Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj
LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6MWvjJQ
aUddsMPBIJa8R6FA0KO3Cd9AsrBnVNi6cSxfCloSoJeaIsES4VvvmJNtPigp+TXf
gOH9Ta2fVzz5brP/L/L0nuvnyPRN/vmBoI0TJdJbR7SYfRDpCxpXDl9f9SRC8guu
3nxLtVC64N/fT7O8asyZMXYaHd+CpW/VvjM0UC4ugjyXgkltu5VlLIlQWUaIvg8m
xpkfj4JuaOsyGbVDRTFlVHaGYaewsHkVsXdywv7mVV4MJFHGtHs32fZzJ3HnMwWm
9lnmSEaBywA4HA8UYPlcZ6jh1L/vrzE4aCv1+1Sg+Ik5wISvv85rnngylaKu4+NP
2VzHykCzwW/wVw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:16:44 2026 by rpki-client