Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: P0K0d2jnDi+9QVTSHGRtzjoJOtl5FY+grhGzr3qMdHk=
Subject key identifier: 95:2A:3E:2C:30:57:EC:47:3C:37:E5:B6:08:B8:C1:4F:47:A2:B9:DD
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019F927F88F2787BF22FCD4E1AD0A19AF5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 19D6
Signing time: Fri 24 Jul 2026 05:00:59 +0000
Manifest this update: Fri 24 Jul 2026 05:00:59 +0000
Manifest next update: Sat 25 Jul 2026 05:00:59 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: JcjQoMuwvwe4Ppde9U2H+JD92/t1A/6YCos8jBmXY8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:88:f2:78:7b:f2:2f:cd:4e:1a:d0:a1:9a:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jul 24 05:00:59 2026 GMT
Not After : Jul 25 05:00:59 2026 GMT
Subject: CN=952a3e2c3057ec473c37e5b608b8c14f47a2b9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:5c:e8:69:5f:c9:ea:83:19:4f:ba:95:44:
0c:77:e1:39:e0:68:56:e1:f9:ba:58:8f:73:d2:67:
83:ee:e2:63:a8:db:41:01:ce:a8:dd:48:9d:40:8a:
5c:b8:2c:b9:6d:54:56:6f:0d:c3:e4:43:f5:b6:cf:
df:87:ed:18:ba:c6:4a:a0:b0:6d:39:67:fb:66:7c:
05:ab:e0:b1:0d:16:ad:76:a3:13:8d:ed:a5:e3:01:
71:24:06:22:9b:ad:52:33:09:77:e7:95:81:80:b4:
0b:bb:73:f9:ea:01:95:61:b3:37:a1:0d:bd:3d:a6:
1e:c9:52:d4:de:fe:9d:4c:6d:e0:1e:0e:68:45:37:
78:74:92:dc:ea:47:70:e7:9b:6e:c2:3b:a9:4e:e4:
a5:1e:ec:91:59:f2:f9:39:c3:d6:60:8f:47:2e:a3:
2e:56:75:4d:1b:30:1b:39:bf:d9:f0:7b:8d:42:de:
cf:a8:c8:89:3b:d2:76:fe:55:94:f7:46:7e:5c:0f:
3e:c9:1a:9a:b0:ad:b9:59:bd:c8:58:4f:32:53:84:
3f:68:d9:2f:1d:f9:3e:00:06:39:6e:35:3f:69:46:
0d:46:5e:0c:ad:23:85:40:2d:a6:b4:3c:07:ce:e6:
6d:b2:7f:16:9d:74:cf:6c:30:b3:76:47:8d:20:e5:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:3E:2C:30:57:EC:47:3C:37:E5:B6:08:B8:C1:4F:47:A2:B9:DD
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3c:31:b1:da:bf:34:f2:5b:4a:71:87:d1:8a:51:49:9e:84:
f9:63:37:23:a3:c6:70:7c:36:98:5d:ab:92:e2:7b:c9:91:c1:
15:7e:3b:92:cc:cd:37:02:1e:48:4f:ff:c1:d6:35:10:ac:c3:
c3:08:88:45:30:2b:95:13:f5:b8:7d:c9:81:53:cb:83:dd:fa:
42:2c:d7:56:f5:a0:1d:f8:67:6d:fb:d6:54:e7:2e:6a:5a:1b:
91:ef:f7:f1:1f:71:16:0e:f5:eb:57:c0:2c:13:76:1b:7a:6b:
21:dc:34:97:1f:eb:11:d4:9f:f3:92:78:e2:10:4b:ff:8f:22:
79:67:86:bf:34:f3:18:12:90:9a:38:df:96:99:e3:58:92:6b:
98:c7:9b:f5:ce:f6:9b:a9:50:46:97:a4:93:3e:9f:0b:1b:52:
69:21:2a:d1:f9:53:f0:57:6b:49:05:52:67:80:bc:9e:50:23:
e3:08:8f:e0:ea:92:01:08:50:9f:d5:0c:75:84:ab:ef:6c:d1:
4e:db:4c:30:c3:b2:6a:d7:e0:f0:da:02:4d:86:3b:be:18:5d:
42:51:c2:72:36:81:c8:ae:f5:30:80:22:73:b5:1b:df:49:52:
91:d3:31:49:f5:26:87:0d:e5:7c:6d:be:00:7f:71:4f:26:11:
4e:13:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:51:59 2026 by rpki-client