Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: gzkUfJ3NAOvFtkdH4lNe7a/tMRdCHH97GWt6//hYgDw=
Subject key identifier: CB:38:B6:2D:DC:20:0C:F9:AD:A5:3A:28:34:30:53:B2:80:73:3D:DA
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019CABA2187BB9301F09C852BA805852A3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 23:00:52 +0000
Manifest this update: Sun 01 Mar 2026 23:00:52 +0000
Manifest next update: Mon 02 Mar 2026 23:00:52 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: 4RAu6jCNArGmNmFVhEn3Xtf1PxtfzHBXN+L40m6QnBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:18:7b:b9:30:1f:09:c8:52:ba:80:58:52:a3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Mar 1 23:00:52 2026 GMT
Not After : Mar 2 23:00:52 2026 GMT
Subject: CN=cb38b62ddc200cf9ada53a28343053b280733dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:35:05:3a:a1:ee:4f:66:11:9d:0c:31:56:
b5:89:dd:dc:b6:ed:34:b6:97:3c:75:58:47:48:79:
ad:6b:39:b8:88:39:d0:72:f7:c3:f1:a4:65:9d:5f:
74:e8:ce:de:86:4e:15:67:e8:b5:4a:7a:70:5a:d4:
5a:aa:f6:42:4f:e7:ed:84:e8:7c:d9:b2:8b:04:0b:
70:f1:14:51:20:d9:36:4a:b8:88:72:40:85:ca:e3:
83:04:ca:8d:4a:7e:85:46:f9:58:a1:22:97:0d:ea:
17:1e:8c:ed:ee:71:9d:53:98:34:2c:5d:97:6d:f2:
0d:89:75:e9:40:ab:ae:b1:78:b3:b4:14:c3:86:82:
b5:6f:a2:be:fc:02:d4:93:c0:df:6d:a5:01:4b:f3:
28:7f:25:60:6c:01:7f:ab:33:97:8b:76:1d:36:24:
f6:f9:01:8d:9d:02:a0:22:6a:72:ba:11:98:2c:74:
ef:1d:cc:3d:c3:59:b0:7f:0a:53:de:35:36:a6:80:
fa:de:ee:0b:3d:75:5a:96:c9:64:41:09:ae:75:17:
24:20:81:a5:0d:52:dd:49:7f:6e:9a:0a:2b:d9:c4:
01:75:99:72:f4:6e:ba:71:c8:b3:4d:8a:63:01:7a:
71:9e:0c:e0:46:18:a3:5d:c9:78:67:8b:1f:10:2f:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:38:B6:2D:DC:20:0C:F9:AD:A5:3A:28:34:30:53:B2:80:73:3D:DA
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9e:25:5c:bd:ab:be:9e:76:77:8c:8a:91:f7:a6:b9:0a:3c:
d6:cd:58:15:34:53:00:ef:02:4b:b0:b3:f1:70:f6:2c:a5:e9:
2c:ed:c7:eb:bf:cf:e2:c7:8b:9d:f4:e7:21:5b:04:07:a2:85:
da:f8:3f:ee:77:e5:4e:d0:02:f3:4a:8e:40:a0:ff:d7:f7:a5:
57:ca:f4:ab:41:bd:c0:fd:76:10:66:51:d0:16:96:e9:9e:27:
49:b7:2e:b5:1e:c8:c1:43:87:6c:41:88:73:ad:1f:20:c0:41:
56:86:5a:a8:b7:68:da:13:94:c8:1e:14:fa:05:f6:51:34:f5:
3a:c2:4b:13:f0:ef:d3:77:30:cd:c5:4f:46:3b:4c:18:46:4b:
77:f9:a1:fa:8e:d7:2b:66:27:cb:5c:ef:c6:e0:05:5c:28:4f:
8c:1f:54:d3:f4:d5:d4:5e:b6:94:31:ec:88:4c:f4:7b:16:3a:
67:8a:06:57:89:c5:d8:e0:0b:08:ad:83:d4:71:b9:40:e3:f8:
ff:f3:80:ea:76:14:49:3c:7f:04:2a:73:2c:d3:61:38:3d:bc:
bd:03:c7:f3:7f:04:ba:89:77:cb:f5:ee:85:d4:dc:34:7e:1e:
b8:a6:61:3d:0e:6d:18:c2:23:d8:91:7f:7a:a4:5c:00:0f:30:
86:ac:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:13 2026 by rpki-client