Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: cQdPRk35TYOXfSIMPN6VEe5AfYxWLPaWOopciSbTm4c=
Subject key identifier: 0B:50:9F:DF:42:95:27:AE:52:5E:DD:FD:D0:46:35:E0:2B:53:E3:20
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019E1F47E6701F766CD061F83BA105416954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 186C
Signing time: Wed 13 May 2026 03:01:06 +0000
Manifest this update: Wed 13 May 2026 03:01:06 +0000
Manifest next update: Thu 14 May 2026 03:01:06 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: 73ifgy99OQkGzTEcq9zepTONKxQ.roa (hash: 4zhTzbj3V3yrAZvwEac5lyxz6RMKFD+ijUfTKZuFWOA=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: OUaQXoGIrioNaznpzSgpWlyrVKRtdUJh9im1q3qsHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:e6:70:1f:76:6c:d0:61:f8:3b:a1:05:41:69:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: May 13 03:01:06 2026 GMT
Not After : May 14 03:01:06 2026 GMT
Subject: CN=0b509fdf429527ae525eddfdd04635e02b53e320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:8a:27:9d:5b:f7:44:74:01:80:4b:85:0a:
01:6e:b5:ad:31:40:1a:40:8b:8b:c3:ab:92:0c:80:
91:e3:e7:b6:90:9b:7f:43:ab:79:fb:1a:4a:92:22:
48:d1:0d:ab:b7:79:67:9a:40:57:20:8f:93:06:da:
dc:4d:6c:39:ef:35:ae:f1:81:41:0f:91:55:b0:16:
97:f2:73:7b:6b:82:1f:64:6a:f9:1a:6a:f9:d0:48:
d0:bc:96:07:9c:b3:24:fe:8f:a6:d6:3a:01:5d:f2:
b4:9e:bc:48:42:14:50:12:ee:47:af:7c:a6:5b:47:
3b:6d:8f:19:e6:5e:0d:10:0c:e8:ac:f3:d1:da:2d:
66:ee:a2:ea:87:80:47:87:57:5e:90:33:8c:06:b6:
b4:61:8d:0a:a2:63:42:77:00:a9:35:8f:ca:2a:75:
e5:f7:ec:90:e0:87:72:6e:cf:51:66:44:cf:49:7b:
a0:98:ad:d9:41:c0:dc:f7:78:80:a4:78:52:80:e1:
71:5c:f5:0a:eb:d6:4d:a3:1c:5b:68:c1:f0:c3:e2:
54:3f:b4:2c:10:1c:98:a7:be:fe:d4:5f:e8:fc:bc:
75:b2:c6:5a:50:24:fd:d9:5e:42:98:a6:87:40:b0:
67:e3:a6:2c:54:b6:ae:c7:b7:36:8f:8b:ca:db:c2:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:9F:DF:42:95:27:AE:52:5E:DD:FD:D0:46:35:E0:2B:53:E3:20
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5d:29:34:4c:fa:e9:8b:2e:2c:e3:b7:8e:39:27:99:1b:50:
2b:e5:64:ec:25:c9:c7:04:ad:b0:e0:3d:fb:6f:9b:02:f1:56:
54:12:7c:58:e7:ee:30:44:14:7e:55:a2:ae:1b:a6:47:c6:14:
b3:03:2a:a4:7c:2e:5d:ee:a5:78:ed:46:90:c2:1f:a3:02:09:
d2:76:45:fe:6b:73:f6:53:1e:ab:e7:9b:ab:d6:02:0a:54:f7:
35:2f:5a:0a:68:9d:31:69:95:af:b1:7a:2b:51:56:ae:84:50:
87:ad:59:c9:28:cd:c2:cb:2f:10:bf:26:38:ca:91:c6:6c:89:
85:c4:e9:bb:51:1c:6b:48:30:9f:ef:29:fb:33:7f:55:8b:04:
f2:34:91:26:0b:4f:83:5b:63:77:b5:f1:38:d3:06:fb:ca:d1:
26:ea:f5:34:dc:b9:52:d0:a2:30:2e:c4:2a:66:7a:7c:b4:bf:
18:5c:2a:e1:87:05:d9:77:53:3c:9d:54:4f:72:1d:82:7f:2c:
44:29:db:59:da:d3:11:6a:10:07:87:fc:cd:2c:34:4d:03:6d:
97:c9:e3:8b:23:4b:fa:48:fd:60:5b:14:e1:40:1b:9f:e4:0e:
50:83:c6:0a:54:40:2c:c3:12:62:e1:c0:e2:df:44:22:27:ae:
64:af:14:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:49:27 2026 by rpki-client