Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: NpU5tDMkDiH4SJ2o14fYnK62E/DCp4vpAhIhVfrjN/8=
Subject key identifier: BE:2E:57:BD:4D:45:48:D0:C4:A9:15:7F:A5:5F:EA:D3:71:C9:E1:9E
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019D2B4E270F088E351C65386665CCD80BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 17EB
Signing time: Thu 26 Mar 2026 18:00:35 +0000
Manifest this update: Thu 26 Mar 2026 18:00:35 +0000
Manifest next update: Fri 27 Mar 2026 18:00:35 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: BfDjCxQZpVIvWuHPpUF1014sxPo.roa (hash: xAMeCUjUJk50I2+3B3yRzk6L+sK+RxuSoLFdPe8pfMM=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: VkM9tuOQxwlHwm2U1Spbm3TPyqoX0g+B0K7NiBe88AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:27:0f:08:8e:35:1c:65:38:66:65:cc:d8:0b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Mar 26 18:00:35 2026 GMT
Not After : Mar 27 18:00:35 2026 GMT
Subject: CN=be2e57bd4d4548d0c4a9157fa55fead371c9e19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:e6:0e:54:63:f0:04:44:2c:8b:39:1f:ea:
30:7b:74:90:65:e2:a8:58:ec:e6:40:f4:7b:c3:9e:
31:0f:5e:09:f4:ff:5f:8a:6b:1b:f0:1e:0e:75:63:
e9:d8:14:48:6e:8c:2e:2a:ba:a7:5e:ce:b9:e9:1a:
40:fd:5f:eb:7d:61:42:aa:66:70:ab:1a:d0:0b:bd:
aa:7e:f6:13:35:db:3d:cc:85:2a:5b:14:e7:67:b3:
26:80:45:fc:59:01:1c:e5:39:90:9b:12:8f:0d:35:
4b:41:0b:bb:53:26:02:8f:03:51:37:dc:4b:4a:57:
6e:51:4f:c6:66:6d:d2:16:78:4c:95:aa:ee:06:bb:
94:0c:78:ba:c4:76:e7:ec:84:d8:68:cf:f5:dc:0f:
15:e6:ae:a2:31:66:7e:8a:ef:e5:64:ad:b2:9d:33:
f3:c7:3d:89:46:5a:11:3f:10:21:b9:f2:f0:72:72:
e7:a5:0e:64:bc:84:d9:0d:b9:e0:cc:9a:0a:95:51:
2d:fb:af:5e:14:f5:3f:ae:bd:46:21:d8:db:c5:dd:
37:06:42:11:fd:be:29:3a:85:42:cc:f6:04:f1:62:
06:bc:16:3b:82:22:00:bf:9f:48:dd:3f:53:cd:3e:
07:24:a7:26:66:b0:88:c7:97:6b:9a:35:da:78:01:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2E:57:BD:4D:45:48:D0:C4:A9:15:7F:A5:5F:EA:D3:71:C9:E1:9E
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:95:a9:57:7a:23:b1:76:33:14:83:72:5a:f8:8b:b1:7b:25:
10:5c:7d:1c:c2:24:3f:92:cf:88:b7:32:9d:98:66:2d:7f:86:
20:50:7c:4b:e1:61:92:d3:dd:55:21:11:90:cf:92:bc:83:bf:
b9:c8:14:3f:35:ac:c9:57:96:68:f0:1d:c5:34:eb:e5:5f:57:
dc:da:44:09:ac:3c:c0:eb:19:8c:9f:00:7f:d7:b5:01:5c:6e:
50:ca:cf:97:28:7e:15:b0:05:4f:31:4d:30:6f:18:24:eb:a1:
76:ae:16:45:9d:56:16:c5:97:49:3e:ff:36:73:4c:2f:c5:ba:
c7:2b:bf:d0:ea:1b:ff:1d:8b:02:6e:c2:ed:0b:19:85:5f:f2:
e7:9a:a9:59:1e:49:aa:5c:90:fa:5b:4a:20:eb:2f:d9:82:c9:
a4:ce:ea:3a:f3:75:e3:b2:13:3d:44:0e:1d:c1:55:ce:74:d8:
3b:29:e6:9d:46:25:6c:22:28:9d:8d:d8:07:de:e3:cd:dc:71:
96:cf:53:c8:15:e4:d8:f2:cd:58:3f:1c:1e:4c:53:32:3b:ec:
3f:f2:5b:f5:b2:d9:50:22:52:bb:d4:9c:a0:f9:dd:b7:2b:83:
4c:8a:a0:a8:b4:b6:a9:d4:d2:41:85:39:83:cf:65:ba:99:5e:
84:8b:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:29 2026 by rpki-client