Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: XWaSdtDUvU4oh1hks58q3Tr2wUgISp1ekbUlBGCwLVQ=
Subject key identifier: 7C:FD:CE:43:3A:58:42:66:61:80:10:E2:68:10:D3:0A:5C:8B:AD:9D
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019FAC3F5B3FD106CB0DC83AE5E7C112F46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1966
Signing time: Wed 29 Jul 2026 05:01:00 +0000
Manifest this update: Wed 29 Jul 2026 05:01:00 +0000
Manifest next update: Thu 30 Jul 2026 05:01:00 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: TUZSISZ4gwWIonNfkZQynD/t02utD90FoHbgaAlsR8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:5b:3f:d1:06:cb:0d:c8:3a:e5:e7:c1:12:f4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jul 29 05:01:00 2026 GMT
Not After : Jul 30 05:01:00 2026 GMT
Subject: CN=7cfdce433a584266618010e26810d30a5c8bad9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:a2:23:0e:76:4f:e5:93:ee:68:f4:f0:04:
43:b4:92:db:14:26:da:ab:84:56:4c:b5:0b:a0:12:
3b:f9:a0:fa:d2:c7:af:b6:26:54:4e:20:17:59:84:
e5:0e:9e:02:76:38:29:c7:64:39:06:0b:1a:ad:d9:
b7:d1:b2:83:cd:76:ee:6a:6f:a4:49:33:cf:6e:06:
e6:04:6b:22:7f:7e:0a:70:5e:29:98:40:48:45:45:
2f:05:cf:12:4f:6c:78:6f:80:a8:67:3b:c8:ac:85:
57:02:dd:90:a9:df:ea:e0:ac:9f:00:ac:7a:53:a9:
71:50:4c:0f:8a:a8:19:4c:0c:11:99:c3:20:9f:3f:
67:d3:3e:a4:0f:f6:80:83:88:6f:f5:cd:36:3b:66:
f0:22:88:9c:92:67:e1:e8:fe:c4:03:ff:65:72:9e:
5e:a4:57:19:97:56:a9:36:b5:f5:8a:b0:b4:09:2b:
2c:aa:83:bb:00:a8:2b:87:c0:63:8d:b4:c9:40:b1:
05:1f:d2:ba:6e:cd:75:8e:ca:e7:a1:97:6e:a7:25:
96:06:49:08:2e:0c:de:c7:05:57:13:5c:49:db:66:
11:d8:a3:50:3a:36:c3:9c:89:48:1e:dc:a4:9e:e4:
be:50:43:ce:e6:cf:43:26:03:59:91:89:2c:d5:6a:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:CE:43:3A:58:42:66:61:80:10:E2:68:10:D3:0A:5C:8B:AD:9D
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:30:25:d6:40:51:fb:9c:63:77:9b:2f:bb:7f:c6:38:0c:23:
0e:1b:9c:ff:db:c2:a9:05:60:1f:f1:2f:91:02:b3:3f:6a:e0:
92:25:44:01:44:cb:d0:68:4d:13:c0:46:fe:c6:b4:6b:c4:5b:
5e:bf:b1:1c:e9:79:0d:fe:81:a7:01:51:c2:36:1f:f8:46:13:
1d:d3:b0:c3:11:97:7e:19:bd:55:c9:d8:2e:9f:d0:34:33:85:
ae:6f:ab:86:fe:1b:6b:1f:a8:b6:fe:5f:94:d9:44:80:df:d4:
11:f6:84:1d:97:f3:64:12:d6:b3:6f:c3:3f:26:2d:31:f4:19:
d9:b0:1a:29:b0:d9:e4:d3:84:01:8c:ef:2d:41:20:13:50:62:
02:ab:d7:e6:c9:ab:d3:70:d6:ed:89:3c:91:37:d6:96:34:06:
ba:9e:9d:73:58:37:c9:e6:82:b8:93:fb:ed:01:ea:08:a2:2b:
38:71:37:65:b7:88:2a:6e:91:68:1f:c3:6c:a7:1c:21:82:cf:
96:16:4c:25:2d:e5:b8:e8:7f:c1:b6:b6:94:7f:a8:28:53:18:
09:b8:71:12:b4:a1:02:c1:70:3d:40:f5:87:85:a4:03:0b:36:
1f:0d:c9:f5:fc:33:59:75:39:e5:2e:a4:f8:62:ad:af:65:a7:
ac:76:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:59:27 2026 by rpki-client