Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: sRBcGPc3Go+guXaVZ/OYxNYJ7H7z9aOE5iZG835WjFM=
Subject key identifier: 42:3D:95:26:B9:6A:93:8F:54:0A:9E:86:04:1C:BE:B8:54:B3:45:D8
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019D2695DD1B8BEF707B81B9DC50BBA6A79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1895
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: P/msuVOEw3mp5TorCuU5XXCYf3srLH1dWVubxoZu4kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:dd:1b:8b:ef:70:7b:81:b9:dc:50:bb:a6:a7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=423d9526b96a938f540a9e86041cbeb854b345d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:da:8f:ae:24:23:ce:a5:5c:53:f5:8d:5c:
bd:bb:f2:bc:84:4d:84:ce:e3:39:95:ee:a9:0a:6f:
3b:1e:89:7b:93:dd:50:71:d8:c2:b1:95:c8:5d:0c:
40:7e:d7:3a:e0:77:58:64:23:bd:a8:dd:51:15:41:
4f:e5:a1:9f:83:bb:24:04:b5:e0:b3:e0:48:e9:29:
17:13:99:47:59:fb:44:8c:2d:f6:6e:09:14:38:a1:
39:64:a3:22:55:c8:7e:b8:6f:74:ba:23:37:ca:38:
75:d3:4b:be:93:8d:b0:c3:8d:7d:82:ed:6b:76:5e:
1a:1b:03:1f:26:e9:52:8c:d5:fc:3d:7b:88:11:ae:
16:92:b0:a5:ea:68:d2:9c:c5:cc:c3:de:23:09:be:
50:6c:63:aa:99:f4:88:49:45:58:bd:65:88:bf:b7:
cb:aa:51:40:4c:43:d8:21:1e:c5:8f:75:04:39:1b:
44:ad:29:0f:b0:6e:e7:1a:b3:eb:52:9d:c8:13:44:
d7:54:07:ff:0b:8f:1d:7a:c5:81:5f:a7:52:2f:64:
30:cb:1f:25:ae:95:83:7b:ac:17:cd:30:ea:3e:51:
c2:45:69:18:1a:45:2f:aa:e4:aa:5e:49:9a:7f:a7:
c8:46:7c:4b:4e:1e:7a:13:f9:34:71:04:0e:9e:fa:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3D:95:26:B9:6A:93:8F:54:0A:9E:86:04:1C:BE:B8:54:B3:45:D8
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:27:a0:2d:09:0e:47:0c:c2:f6:ee:2e:b5:ba:c8:c6:00:fa:
61:d5:1c:61:ab:7b:d3:14:ee:05:57:5a:ad:f9:3a:e4:d3:d9:
f6:56:97:9b:dc:ba:93:e3:50:34:42:7d:9c:54:dd:03:80:68:
c1:10:67:48:e6:f7:ba:c1:52:7d:13:48:a2:d9:9f:56:39:f9:
bd:98:83:12:01:1e:c8:22:45:5f:1d:eb:57:ab:11:01:07:d9:
b8:1d:c6:2e:32:d7:5f:70:81:d8:73:3a:ea:8b:c0:ef:34:13:
0f:cc:bf:6e:1c:94:5f:53:77:f8:e4:43:2d:8e:f4:52:8f:e6:
1d:e7:4e:00:4c:4b:38:db:69:a3:31:34:bd:fe:cc:78:68:17:
b0:51:93:67:50:f9:d1:e8:49:55:15:cd:4d:28:16:78:f2:f4:
a8:13:61:a9:01:5d:38:9b:aa:bc:6c:0b:f7:a8:c8:85:f5:59:
1c:81:16:a4:66:66:43:6b:54:2c:fa:e0:d1:7c:44:a9:93:0f:
0c:77:0f:12:62:08:be:86:b6:0e:30:09:5f:4b:c8:4c:a9:43:
a6:a3:af:86:63:8e:95:3f:a2:cf:9e:64:e0:17:8c:e2:03:91:
ef:7a:01:e0:a6:10:f8:11:01:b5:21:f9:a7:00:6c:c5:02:01:
27:c4:9d:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mld0bi+9we4G53FC7pqeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjYwMzI1MjAwMDQ4WhcNMjYwMzI2MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg0MjNkOTUyNmI5NmE5MzhmNTQwYTllODYwNDFjYmViODU0YjM0NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkETaj64kI86lXFP1jVy9u/K8hE2E
zuM5le6pCm87Hol7k91QcdjCsZXIXQxAftc64HdYZCO9qN1RFUFP5aGfg7skBLXg
s+BI6SkXE5lHWftEjC32bgkUOKE5ZKMiVch+uG90uiM3yjh100u+k42ww419gu1r
dl4aGwMfJulSjNX8PXuIEa4WkrCl6mjSnMXMw94jCb5QbGOqmfSISUVYvWWIv7fL
qlFATEPYIR7Fj3UEORtErSkPsG7nGrPrUp3IE0TXVAf/C48desWBX6dSL2Qwyx8l
rpWDe6wXzTDqPlHCRWkYGkUvquSqXkmaf6fIRnxLTh56E/k0cQQOnvrX3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI9lSa5apOPVAqehgQcvrhUs0XYMB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSegLQkO
RwzC9u4utbrIxgD6YdUcYat70xTuBVdarfk65NPZ9laXm9y6k+NQNEJ9nFTdA4Bo
wRBnSOb3usFSfRNIotmfVjn5vZiDEgEeyCJFXx3rV6sRAQfZuB3GLjLXX3CB2HM6
6ovA7zQTD8y/bhyUX1N3+ORDLY70Uo/mHedOAExLONtpozE0vf7MeGgXsFGTZ1D5
0ehJVRXNTSgWePL0qBNhqQFdOJuqvGwL96jIhfVZHIEWpGZmQ2tULPrg0XxEqZMP
DHcPEmIIvoa2DjAJX0vITKlDpqOvhmOOlT+iz55k4BeM4gOR73oB4KYQ+BEBtSH5
pwBsxQIBJ8SdRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:53 2026 by rpki-client