Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
File: xnSbIhBmFd8RMq2lGekgcJLy26o.mft (raw, json)
Hash identifier: rX1oncaCUpeqejnoWt2kAR5f+eIZ++AFZ5KD0AVkzpg=
Subject key identifier: D2:F8:7D:F4:1E:40:61:15:31:80:D3:7A:10:D1:D2:E3:2F:F3:89:6F
Authority key identifier: C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
Certificate issuer: /CN=c6749b22106615df1132ada519e9207092f2dbaa
Certificate serial: 019FAA8892BD9A2A5E37B33BDDD1EBFED76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:44 +0000
Manifest this update: Tue 28 Jul 2026 21:01:44 +0000
Manifest next update: Wed 29 Jul 2026 21:01:44 +0000
Files and hashes: 1: eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa (hash: gOJ1QVyv1enp2QMYeZEi64KYRWZktKrcxHdJcaTNmH4=)
2: xnSbIhBmFd8RMq2lGekgcJLy26o.crl (hash: naixLyu1PHyJeZc7uTPhkfrMvYlKYBd663I1wY0FYWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:92:bd:9a:2a:5e:37:b3:3b:dd:d1:eb:fe:d7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6749b22106615df1132ada519e9207092f2dbaa
Validity
Not Before: Jul 28 21:01:44 2026 GMT
Not After : Jul 29 21:01:44 2026 GMT
Subject: CN=d2f87df41e4061153180d37a10d1d2e32ff3896f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:26:a4:d0:81:88:6e:6f:13:55:eb:3b:36:
09:27:79:7e:7b:9c:7f:4b:a2:7c:aa:35:51:91:52:
a3:85:ff:87:c6:e5:21:fb:08:ca:19:01:b7:87:af:
c1:3a:b8:1b:8c:3e:6f:ac:c7:14:b9:27:ae:d3:8e:
bd:05:c0:5d:d3:cf:cb:e8:5a:af:6e:69:d2:45:a2:
ca:a3:9a:79:de:4b:12:f4:93:c0:88:05:54:cb:d4:
a6:ab:95:78:8c:d9:fc:27:ae:43:f0:48:33:13:1d:
e5:75:63:ab:14:52:92:56:3a:db:b1:45:0a:df:9e:
48:76:df:d8:76:0d:49:a1:8d:7d:14:d5:61:a2:e3:
16:48:7b:67:31:a8:59:52:b7:a3:ef:34:d5:72:aa:
93:0f:ee:1b:ae:7b:1b:d4:fe:f2:d7:2f:8d:ef:7b:
1e:bd:db:64:52:8f:9b:7c:8e:13:3f:fc:75:63:4f:
bb:0e:c1:1b:dc:06:1a:6e:4c:ea:a6:d5:4f:43:89:
bc:42:e2:ea:b2:cd:af:6d:78:fe:ce:15:c9:d2:16:
d9:db:1f:ac:93:91:46:1b:0a:a2:bd:be:0c:a4:ef:
02:3b:f7:ed:a4:1e:b0:3e:33:9e:fd:cb:91:9f:bb:
fd:a1:53:b5:ce:e6:01:77:82:66:7f:1f:cf:c1:04:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:7D:F4:1E:40:61:15:31:80:D3:7A:10:D1:D2:E3:2F:F3:89:6F
X509v3 Authority Key Identifier:
keyid:C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cd:41:10:cb:1b:cb:40:81:f1:31:97:59:36:75:26:2e:86:
3b:14:1e:a2:97:dc:24:cf:c2:2b:ec:42:48:e1:5e:fd:a9:95:
4b:70:d9:6f:30:5a:cb:a4:69:e5:57:fd:43:97:8b:02:79:1a:
6c:82:04:1e:0d:3e:32:19:2b:12:04:17:56:98:d6:e2:86:3c:
c8:52:19:74:73:7b:5e:57:62:99:a9:b0:ca:26:65:a3:24:f3:
63:a5:83:44:cf:b8:7c:62:0a:ee:cc:a6:4a:71:e9:50:24:1d:
4e:d9:3e:01:0c:0c:4f:d1:65:24:4c:18:79:51:76:9f:8f:d1:
45:c6:cd:ff:59:4c:b1:90:29:2d:0f:1b:61:30:70:ef:70:e4:
71:38:a3:5d:d0:9d:61:0c:ed:9a:9a:b1:4a:a4:e7:08:d7:ac:
a0:14:f3:68:b7:d9:8e:f7:9d:4b:22:51:22:4d:75:9b:be:a4:
ec:e4:98:d1:28:76:01:f8:e8:02:5d:cd:82:6d:02:f8:e4:45:
71:ad:53:8b:b1:06:7e:23:db:25:ab:07:b5:32:01:be:1d:4c:
03:cd:10:e0:2d:c7:e6:24:10:30:26:a4:c0:98:ed:3c:1c:e7:
88:21:8f:48:15:d2:a9:42:43:91:2f:23:e7:c7:8c:d1:ba:7a:
74:fb:f1:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiJK9mipeN7M73dHr/tdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NzQ5YjIyMTA2NjE1ZGYxMTMyYWRhNTE5ZTkyMDcwOTJm
MmRiYWEwHhcNMjYwNzI4MjEwMTQ0WhcNMjYwNzI5MjEwMTQ0WjAzMTEwLwYDVQQD
EyhkMmY4N2RmNDFlNDA2MTE1MzE4MGQzN2ExMGQxZDJlMzJmZjM4OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtakmpNCBiG5vE1XrOzYJJ3l+e5x/
S6J8qjVRkVKjhf+HxuUh+wjKGQG3h6/BOrgbjD5vrMcUuSeu0469BcBd08/L6Fqv
bmnSRaLKo5p53ksS9JPAiAVUy9Smq5V4jNn8J65D8EgzEx3ldWOrFFKSVjrbsUUK
355Idt/Ydg1JoY19FNVhouMWSHtnMahZUrej7zTVcqqTD+4brnsb1P7y1y+N73se
vdtkUo+bfI4TP/x1Y0+7DsEb3AYabkzqptVPQ4m8QuLqss2vbXj+zhXJ0hbZ2x+s
k5FGGwqivb4MpO8CO/ftpB6wPjOe/cuRn7v9oVO1zuYBd4Jmfx/PwQTr6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNL4ffQeQGEVMYDTehDR0uMv84lvMB8GA1UdIwQY
MBaAFMZ0myIQZhXfETKtpRnpIHCS8tuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG5TYkloQm1GZDhSTXEybEdla2djSkx5MjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUt
MGQzMzk3MDdjYjg4LzEveG5TYkloQm1GZDhSTXEybEdla2djSkx5MjZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUtMGQzMzk3MDdjYjg4
LzEveG5TYkloQm1GZDhSTXEybEdla2djSkx5MjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjs1BEMsb
y0CB8TGXWTZ1Ji6GOxQeopfcJM/CK+xCSOFe/amVS3DZbzBay6Rp5Vf9Q5eLAnka
bIIEHg0+MhkrEgQXVpjW4oY8yFIZdHN7XldimamwyiZloyTzY6WDRM+4fGIK7sym
SnHpUCQdTtk+AQwMT9FlJEwYeVF2n4/RRcbN/1lMsZApLQ8bYTBw73DkcTijXdCd
YQztmpqxSqTnCNesoBTzaLfZjvedSyJRIk11m76k7OSY0Sh2AfjoAl3Ngm0C+ORF
ca1Ti7EGfiPbJasHtTIBvh1MA80Q4C3H5iQQMCakwJjtPBzniCGPSBXSqUJDkS8j
58eM0bp6dPvxjA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:47 2026 by rpki-client