Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: q2Dy0PNdcQmdkEEBzuAn8qXXdCf0jTu869W8qqy+ZJU=
Subject key identifier: 6C:D4:4B:AC:96:72:EA:44:C0:77:C2:47:97:3C:D0:31:55:31:88:4A
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019D9B198C182678271A4644BA56C264DAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 11:00:35 +0000
Manifest this update: Fri 17 Apr 2026 11:00:35 +0000
Manifest next update: Sat 18 Apr 2026 11:00:35 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: G2wRzApE6RmSfo0oq/Z16jO1LrLJIL+ICxpvMF61dWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:8c:18:26:78:27:1a:46:44:ba:56:c2:64:da:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Apr 17 11:00:35 2026 GMT
Not After : Apr 18 11:00:35 2026 GMT
Subject: CN=6cd44bac9672ea44c077c247973cd0315531884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:40:c2:d4:fb:b9:52:43:88:e7:c0:f4:45:cd:
1a:64:88:72:72:cb:f1:68:df:5d:ab:5c:81:a0:d8:
47:a4:64:e9:04:24:4c:c6:cf:fb:f8:bd:9f:d6:45:
2e:a6:7d:a4:1b:96:f3:1b:6b:b1:2b:47:0c:82:19:
0c:99:de:8c:d4:02:0f:27:2a:e9:d1:89:e9:0a:71:
08:27:59:87:db:1c:58:ad:92:2e:4a:e8:61:57:29:
d2:70:9b:e2:78:5b:92:fc:55:13:a0:82:d6:51:b9:
40:6f:26:3b:e1:6e:83:19:6b:ab:c4:7a:3b:d5:05:
6b:11:63:b9:68:c5:3a:21:5d:60:f3:88:1b:0b:a8:
97:c4:25:8a:b1:fd:88:28:5b:0c:81:f9:8d:e6:2a:
96:25:5c:a3:5a:24:d1:ad:b3:a0:fc:8a:a9:28:10:
27:71:c7:7c:52:cc:a7:ad:fe:70:64:e1:40:86:d9:
ab:68:e3:f1:0e:58:bd:06:d9:70:bc:98:45:45:29:
9b:54:87:bc:81:b1:7a:c9:2d:82:72:30:01:df:2d:
dc:7e:24:50:26:55:42:ea:a1:47:a5:50:11:65:d3:
a2:84:9a:0e:8f:30:fc:d0:f3:a3:a0:2e:73:c4:b3:
c9:b8:f4:5c:1a:31:e4:35:3b:b2:10:f5:f4:e5:27:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:4B:AC:96:72:EA:44:C0:77:C2:47:97:3C:D0:31:55:31:88:4A
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:54:66:20:ea:93:93:32:90:f3:cc:90:49:97:43:21:47:
c9:6e:39:6c:0c:1f:c3:83:eb:c4:1e:50:d7:f7:04:8a:1d:2f:
8b:5c:ba:ae:74:25:20:97:3f:df:74:94:05:96:c0:ae:f2:a5:
fa:19:32:6d:e7:a1:bc:62:1c:0e:c8:9d:b2:49:56:fb:fe:44:
2d:7f:4b:6b:8e:f8:66:6f:bf:fe:83:c3:a4:66:9f:9d:ac:c2:
e8:7e:8a:ee:89:4f:e3:2f:8c:3c:7a:ed:77:1d:41:47:d0:94:
4b:c6:d1:0e:13:50:95:8f:82:af:2d:df:3c:39:5d:3f:f7:ad:
62:98:52:43:30:e9:11:93:51:25:60:18:02:94:39:da:f4:1a:
ae:d2:a2:7f:ed:0e:0a:57:ac:b5:0d:ea:cb:7b:16:ed:0b:69:
69:c2:de:a7:8b:50:fc:ef:9a:4f:52:f7:c4:f4:6d:97:4a:e0:
34:4a:d5:f6:ad:8e:a8:17:35:f7:59:b8:a1:10:5e:3c:90:90:
91:4a:61:c2:47:e8:de:2e:99:f5:c9:d5:d8:83:a7:4b:17:8f:
53:e9:32:7d:79:0e:d8:8a:f8:2f:94:73:3f:8b:ce:60:07:12:
1f:c4:18:52:88:a9:ae:98:e9:0f:c7:83:49:47:d1:8c:4f:96:
e1:f3:29:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGYwYJngnGkZEulbCZNq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2
Zjg4MzIwHhcNMjYwNDE3MTEwMDM1WhcNMjYwNDE4MTEwMDM1WjAzMTEwLwYDVQQD
Eyg2Y2Q0NGJhYzk2NzJlYTQ0YzA3N2MyNDc5NzNjZDAzMTU1MzE4ODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EDC1Pu5UkOI58D0Rc0aZIhycsvx
aN9dq1yBoNhHpGTpBCRMxs/7+L2f1kUupn2kG5bzG2uxK0cMghkMmd6M1AIPJyrp
0YnpCnEIJ1mH2xxYrZIuSuhhVynScJvieFuS/FUToILWUblAbyY74W6DGWurxHo7
1QVrEWO5aMU6IV1g84gbC6iXxCWKsf2IKFsMgfmN5iqWJVyjWiTRrbOg/IqpKBAn
ccd8Usynrf5wZOFAhtmraOPxDli9BtlwvJhFRSmbVIe8gbF6yS2CcjAB3y3cfiRQ
JlVC6qFHpVARZdOihJoOjzD80POjoC5zxLPJuPRcGjHkNTuyEPX05Sei1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzUS6yWcupEwHfCR5c80DFVMYhKMB8GA1UdIwQY
MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt
Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj
LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpJUZiDq
k5MykPPMkEmXQyFHyW45bAwfw4PrxB5Q1/cEih0vi1y6rnQlIJc/33SUBZbArvKl
+hkybeehvGIcDsidsklW+/5ELX9La474Zm+//oPDpGafnazC6H6K7olP4y+MPHrt
dx1BR9CUS8bRDhNQlY+Cry3fPDldP/etYphSQzDpEZNRJWAYApQ52vQartKif+0O
ClestQ3qy3sW7QtpacLep4tQ/O+aT1L3xPRtl0rgNErV9q2OqBc191m4oRBePJCQ
kUphwkfo3i6Z9cnV2IOnSxePU+kyfXkO2Ir4L5RzP4vOYAcSH8QYUoiprpjpD8eD
SUfRjE+W4fMp0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:32 2026 by rpki-client