Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: 3MqgxDRCuQCG0P1kmSk5/OfeMNWXMaCmXO+vx4Hn7II=
Subject key identifier: EA:14:C9:9A:77:A9:4B:AC:60:3D:AE:06:A1:6B:47:5B:27:72:6E:F5
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019D9D07E9273094FE7C460277B983F15FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 20:00:34 +0000
Manifest this update: Fri 17 Apr 2026 20:00:34 +0000
Manifest next update: Sat 18 Apr 2026 20:00:34 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: faBNoFGn5TYBj/o559JGixCgT4RKJ2kTfGAoPwhTaK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:e9:27:30:94:fe:7c:46:02:77:b9:83:f1:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Apr 17 20:00:34 2026 GMT
Not After : Apr 18 20:00:34 2026 GMT
Subject: CN=ea14c99a77a94bac603dae06a16b475b27726ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:4b:6d:c3:51:6a:a2:10:c5:69:da:81:08:
ad:b2:62:28:a9:2b:a0:a0:4a:da:8c:cb:e1:7c:83:
73:ee:1f:51:4d:19:31:9a:2c:95:fa:fc:df:e7:34:
1a:c6:82:4e:bf:68:8a:45:24:ff:ed:16:0b:57:45:
dc:18:09:81:35:13:82:5d:20:d9:6e:ff:e4:e3:b8:
04:6c:4d:b8:00:64:ef:2d:ef:5a:2b:7a:10:c0:e1:
69:d3:6d:e7:0e:db:c4:80:6e:8b:76:b4:7e:e6:a1:
0f:b5:25:78:64:9b:23:54:4e:f5:73:ea:f1:6f:17:
71:e3:0b:48:c1:d6:d3:eb:fc:42:1b:66:70:af:35:
2c:b2:6c:2c:91:a3:92:c5:a0:50:b1:4d:cb:c1:83:
ed:6f:a2:e4:e7:12:b6:ee:d9:00:cb:db:54:fe:b5:
42:8e:d9:be:6c:40:ff:8a:1d:de:a9:79:a3:bf:84:
f8:6e:f7:e5:98:bd:68:5e:bd:3a:ab:67:6d:37:c8:
c5:62:96:18:54:bc:e0:3a:d5:9c:9f:2a:d2:ce:37:
2b:2a:4d:62:ed:a3:a4:61:bb:dd:05:72:3c:bd:1a:
20:35:8c:09:ff:27:ef:ae:91:72:9b:71:e3:77:e2:
9c:f9:2a:d0:2a:8b:59:75:2f:cf:cf:9b:13:de:63:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:14:C9:9A:77:A9:4B:AC:60:3D:AE:06:A1:6B:47:5B:27:72:6E:F5
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:66:03:df:d6:43:91:16:e0:d5:8d:2f:70:88:17:b7:55:28:
df:6e:cd:0d:d7:1d:75:43:9b:97:86:f8:af:9b:79:34:8c:a9:
53:59:2b:60:1a:9e:c0:d3:e3:ed:fa:c7:ac:2c:f6:f0:7f:29:
d9:e9:75:25:ad:94:c2:ca:0e:f9:df:a7:ba:f5:e3:dd:b1:81:
91:e6:af:9c:ce:df:21:63:bc:b5:01:84:14:d2:b5:eb:ae:f1:
2b:81:b2:49:b3:f0:00:f7:cd:36:03:96:f0:da:93:4a:dd:bb:
b9:3f:59:b1:c0:08:75:52:84:6d:ff:a9:61:de:17:d0:65:aa:
4d:f9:98:b2:b0:32:54:bc:f8:27:fb:8e:05:05:d7:9c:f7:59:
1b:5a:f8:5d:00:24:30:e7:d9:1b:de:7b:98:e4:a5:bd:0b:71:
d9:c9:5a:af:a8:cb:80:4d:d2:13:4a:3d:28:a8:81:fd:5f:23:
c6:6d:ff:aa:1e:26:b9:9a:31:68:dc:64:db:b3:6a:19:d9:f0:
ed:50:68:29:32:7e:ee:b3:d8:fe:ba:4f:de:3d:41:85:66:e0:
da:2e:c6:d6:5e:e8:96:33:3c:48:f3:ce:1c:94:bf:0e:46:a5:
73:b5:68:df:7d:bb:f0:17:ae:da:1c:1c:f3:25:d7:d3:44:5d:
2c:21:dc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:40 2026 by rpki-client