Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: HJGei9CipvhUHQjtZWab//7YrI4HPXfuzx3QeQnuvYs=
Subject key identifier: A6:59:2F:14:D5:F9:59:F1:9E:87:87:46:0C:2F:A5:2B:DD:18:7C:CC
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 01A0CDB576640830E29AD5E3FB089C52A878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1A7A
Signing time: Wed 23 Sep 2026 10:00:16 +0000
Manifest this update: Wed 23 Sep 2026 10:00:16 +0000
Manifest next update: Thu 24 Sep 2026 10:00:16 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: b2OvrwS5fdlnhd8jiScteBrMJzo.roa (hash: 2y9dXhwloiTIsuknPn5cIK/PWnisQw1xqs5MGBYxLGI=)
3: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
4: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: HD+DO8PLfdXEqG8Tcn2MdfWmHLs+ACtHo6wIBxcz01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:76:64:08:30:e2:9a:d5:e3:fb:08:9c:52:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Sep 23 10:00:16 2026 GMT
Not After : Sep 24 10:00:16 2026 GMT
Subject: CN=a6592f14d5f959f19e8787460c2fa52bdd187ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:87:e4:b2:a6:03:14:43:cb:c8:54:fa:26:
d0:86:8d:9d:a7:ff:a6:38:c0:5b:4b:25:cc:02:7d:
5e:e3:a4:4e:12:f8:69:97:a7:31:89:8d:af:e7:b6:
8b:54:69:bb:37:67:16:ff:d4:8a:54:e2:0a:06:f7:
ab:76:e1:7f:b2:eb:69:62:49:18:0d:85:a1:a8:41:
bb:d3:30:61:2a:68:7f:ba:f8:93:29:67:3f:4b:29:
65:ec:f0:d2:a0:44:95:41:50:67:f9:14:2d:43:cb:
53:67:de:1c:50:5e:44:1a:39:ff:ce:3c:87:70:15:
02:14:6d:63:68:f7:96:23:d1:e7:9a:a4:42:51:fc:
49:91:9d:c9:3f:ea:a7:18:46:d5:ec:f7:c1:c7:0d:
b0:78:b9:31:61:7f:c4:b5:67:fd:82:ae:5a:4a:86:
64:14:b6:c4:2d:1d:9c:4f:4c:b4:86:a2:3d:d4:a3:
d7:c1:a0:fe:f9:27:21:61:8b:c6:95:cd:12:80:94:
7d:e1:a8:56:72:6d:0c:9b:7f:09:c5:79:79:35:79:
89:c2:ed:31:5e:62:a4:56:d4:d4:20:b1:14:71:05:
a6:c2:c2:60:29:aa:f4:8a:2a:5c:ef:c8:d9:8e:e0:
23:1c:ac:42:dd:2f:fe:80:03:97:8c:b1:ad:45:bb:
6d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:59:2F:14:D5:F9:59:F1:9E:87:87:46:0C:2F:A5:2B:DD:18:7C:CC
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:62:2e:b0:6a:c8:0c:f0:c3:c9:58:f1:82:f0:6d:2a:12:
a7:31:62:73:ce:2f:e0:e2:08:fe:a2:2a:a5:4f:04:63:6f:6c:
5b:0e:cf:86:b0:5f:91:fe:f9:96:12:11:3e:9a:36:fe:b8:8c:
94:4b:6f:5f:93:a6:2a:89:18:17:9f:41:75:ea:9e:19:bc:43:
cf:b0:f8:33:d0:da:97:06:ed:5f:e7:37:cd:42:e4:e6:81:2a:
2c:36:88:2d:52:08:ad:db:fc:73:2a:4e:8a:92:7a:9b:2b:f9:
c1:0c:71:db:82:d9:96:ba:85:13:0a:d6:f4:a2:2f:f2:83:97:
c5:08:51:b1:ff:fb:0b:fc:1e:1f:37:97:70:43:c0:1f:c0:43:
f6:62:44:7d:f9:dd:1e:29:87:8c:a3:e6:35:0f:29:03:99:a7:
3c:b6:3f:2f:7e:67:14:54:3b:ec:e5:15:01:88:9b:8f:0e:41:
cd:2a:67:79:9d:0b:1c:0a:67:0f:32:b3:ac:e9:66:7c:e5:0f:
3d:a9:94:28:08:0d:06:0f:8b:b5:20:8b:a3:83:3d:07:a2:55:
44:b6:ef:ad:1f:ec:3a:13:ae:63:68:8d:8d:79:1e:70:1e:f3:
88:cb:0f:bc:77:5e:5e:3d:e4:8d:c2:41:00:17:79:d1:65:3e:
74:4e:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:14 2026 by rpki-client