Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: Cfd6v4Mi79OygUJiGc5028tZMtED2tl5cTz9TNu7VEo=
Subject key identifier: 4B:BF:35:F0:24:07:2F:A8:29:95:E4:E5:25:BA:6D:8E:90:73:95:D2
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019E1DC756C683DD33E548F79652BFCB51E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1915
Signing time: Tue 12 May 2026 20:01:03 +0000
Manifest this update: Tue 12 May 2026 20:01:03 +0000
Manifest next update: Wed 13 May 2026 20:01:03 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: rnmjCw9N9uHtLca44w79YF24HhVs2ACoZMDfrQ1E3rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:56:c6:83:dd:33:e5:48:f7:96:52:bf:cb:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: May 12 20:01:03 2026 GMT
Not After : May 13 20:01:03 2026 GMT
Subject: CN=4bbf35f024072fa82995e4e525ba6d8e907395d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:db:dd:6d:f6:69:8e:3f:dc:2a:ae:a5:b5:
e9:75:52:ca:87:9c:5b:33:52:49:d8:55:f3:ef:c6:
9a:3a:06:8b:df:df:a2:92:e5:e8:c7:aa:02:35:1e:
ec:d4:84:41:cb:8a:61:88:55:7b:46:82:9d:84:a1:
d4:db:fa:82:69:a2:b5:5d:c7:47:3e:a3:06:22:f2:
bd:4d:1e:15:3b:95:b5:e5:89:81:ee:a7:47:24:50:
ea:70:42:a1:80:9a:b5:0a:0c:35:33:3f:3c:f2:50:
9e:1c:3e:26:aa:06:cb:42:65:21:67:77:15:cd:f6:
51:d5:0a:73:35:22:17:93:08:1f:e6:f2:5c:42:80:
0b:cb:ce:a2:74:a8:01:c9:50:15:e7:bf:67:41:d5:
75:cf:39:a8:62:17:c1:4d:7a:3d:74:9b:b3:36:8c:
bd:9a:bc:1e:62:06:2b:94:80:37:29:3a:0c:91:03:
db:4c:01:df:b6:d8:66:60:53:65:ce:6c:a7:48:d8:
87:9d:9b:b4:2d:38:a4:28:0d:1a:6b:a5:50:f5:c0:
4f:b1:bc:32:9f:8c:76:15:ab:d8:53:ee:ed:32:07:
f6:5d:00:99:63:1e:e0:9a:a0:a0:23:fa:80:b6:1d:
48:ae:54:f7:cd:04:4c:73:f9:14:2d:76:99:4c:92:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:35:F0:24:07:2F:A8:29:95:E4:E5:25:BA:6D:8E:90:73:95:D2
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b8:39:7d:72:50:a9:3d:cb:89:0d:01:a3:55:9e:68:b8:8a:
8c:c2:bc:b0:b5:05:ca:7e:90:3f:74:75:29:74:70:5c:36:bf:
27:35:94:dc:47:f2:39:6a:fa:55:78:8e:75:b0:74:bb:3d:66:
4c:6e:06:d9:37:61:8a:37:f4:f0:90:d2:ad:e0:86:4f:43:bd:
81:0c:37:1b:ea:8b:e8:75:60:8a:70:77:3a:66:5f:5c:8f:66:
1a:50:49:19:9a:72:71:30:a0:7d:d4:69:e0:1a:b0:35:37:30:
06:66:09:a9:d9:55:4a:d3:8f:2d:9b:b4:0f:54:f0:3a:1b:b5:
2c:4a:7f:75:44:12:2f:b4:55:75:6e:28:bb:c7:8b:fe:d4:7a:
97:4e:e5:75:3a:15:43:01:22:10:75:fe:03:96:00:5a:29:63:
63:db:f5:f2:a2:94:0a:9d:40:b6:55:fe:16:69:c7:cb:df:65:
81:9a:3b:23:d8:79:c3:d2:3c:58:05:9e:0d:1c:16:6d:38:73:
74:22:79:f7:57:3f:c4:28:02:7b:17:c7:5f:19:9a:86:98:f0:
50:50:5e:96:6c:0d:1b:6a:ae:d3:3d:7e:82:b0:82:8e:43:f7:
98:91:99:3e:dd:98:ee:ac:f3:24:ed:c8:3e:db:cd:24:8d:59:
72:71:8c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:58 2026 by rpki-client