Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: x3nDhtOM4wwZOtSxOOcXTgd+1JEtKzaG3y3h20+1+dA=
Subject key identifier: 98:DB:DB:F6:58:A7:86:90:53:DA:EF:78:FB:8E:EB:A8:81:1B:CF:07
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01A1197472B9EF390AE4970A9DEEF7C95ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 19F9
Signing time: Thu 08 Oct 2026 03:00:24 +0000
Manifest this update: Thu 08 Oct 2026 03:00:24 +0000
Manifest next update: Fri 09 Oct 2026 03:00:24 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: HuBqJxrPz8cJIEhWPQ734TMtT-k.roa (hash: tQAxKG9Tf5jOtAxlSBHO2a2s2np2ioSUpEcr2kqOTv4=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: r2GRZl1gy8DehwQDxaAhQUsjJ84qOrPD2sKLaZE6FmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:72:b9:ef:39:0a:e4:97:0a:9d:ee:f7:c9:5e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Oct 8 03:00:24 2026 GMT
Not After : Oct 9 03:00:24 2026 GMT
Subject: CN=98dbdbf658a7869053daef78fb8eeba8811bcf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:7c:da:7f:89:12:33:90:a2:21:f4:a8:f5:
2e:9f:9e:e3:55:c5:87:7d:12:98:40:72:1c:bf:93:
16:9a:06:29:3e:f3:88:9c:1c:fd:ef:69:d8:f2:2a:
c2:d2:fd:54:cd:dc:2d:fa:db:06:eb:f7:2d:e7:98:
99:4c:4c:87:5d:5a:e3:fe:0d:54:d0:64:83:59:28:
c4:69:60:75:39:ac:ea:8f:08:e6:fb:d6:a3:06:12:
e6:ea:a8:62:47:89:4a:c3:b3:ed:b5:be:1b:5c:e1:
04:cf:4f:b4:25:b6:c8:4e:5a:61:4c:e6:18:ec:1b:
f0:5c:69:aa:1b:2c:37:bb:d4:cf:00:7d:74:65:93:
b0:3f:dc:a3:a9:73:1a:ee:2f:cf:6b:5e:6e:cf:63:
a8:fb:f8:f8:f2:99:5d:15:16:31:23:08:57:ea:73:
95:82:99:71:15:66:37:0a:f4:52:8b:ea:39:05:99:
0b:70:64:8f:41:51:cf:8c:94:18:93:08:ae:cb:38:
69:ee:7a:fb:56:42:10:cd:b9:71:b8:ce:e1:6b:af:
64:19:97:64:6f:0f:72:68:ce:d5:16:7e:ef:e2:80:
5d:e1:64:47:6d:fe:5e:dc:da:93:41:c6:2e:17:ea:
dd:f3:45:f5:be:49:1c:54:29:09:f3:bc:8d:3b:40:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:DB:F6:58:A7:86:90:53:DA:EF:78:FB:8E:EB:A8:81:1B:CF:07
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:6c:67:2a:56:6d:f6:b8:52:68:52:34:f1:e3:f3:c8:a8:
bf:f5:d2:6b:6d:ee:bf:1f:30:e0:f3:db:33:42:b8:1a:ce:9c:
c8:9b:be:61:35:58:9d:87:f8:1f:85:5e:b2:78:51:b3:72:8a:
65:f5:c0:e8:79:e9:8e:ca:4e:e2:c5:fd:60:75:56:8d:5c:e5:
6f:be:ba:d6:bc:4a:31:96:b7:28:4f:7f:6e:21:1f:3b:82:a0:
2d:26:06:22:32:92:79:2d:43:0d:0d:1c:87:d6:ac:ed:9e:66:
14:cf:40:ec:8e:86:ef:e0:3f:d6:9c:53:11:fe:7e:1a:55:ac:
7f:c1:83:23:6e:d5:60:77:01:95:6c:08:da:d2:6f:12:0c:6b:
ea:da:de:93:97:95:5c:5e:a9:4c:18:53:dd:13:b0:eb:50:6d:
67:e6:bd:64:c5:c6:e4:83:ae:34:f1:28:88:bf:85:51:29:03:
5a:4e:ce:64:76:01:b6:ab:4a:16:1f:05:f2:ee:79:fa:a3:94:
dd:52:4f:e7:53:ca:72:66:8d:44:9a:eb:be:8f:fe:ff:30:fb:
87:06:fc:cf:7b:0a:10:73:59:5b:80:40:f5:18:cd:94:33:1a:
fb:a5:2e:e0:06:9d:1f:96:84:40:d1:fa:e6:13:88:40:a0:bb:
45:c3:45:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZdHK57zkK5JcKne73yV7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw
ZDVkZDkwHhcNMjYxMDA4MDMwMDI0WhcNMjYxMDA5MDMwMDI0WjAzMTEwLwYDVQQD
Eyg5OGRiZGJmNjU4YTc4NjkwNTNkYWVmNzhmYjhlZWJhODgxMWJjZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3t82n+JEjOQoiH0qPUun57jVcWH
fRKYQHIcv5MWmgYpPvOInBz972nY8irC0v1Uzdwt+tsG6/ct55iZTEyHXVrj/g1U
0GSDWSjEaWB1Oazqjwjm+9ajBhLm6qhiR4lKw7Pttb4bXOEEz0+0JbbITlphTOYY
7BvwXGmqGyw3u9TPAH10ZZOwP9yjqXMa7i/Pa15uz2Oo+/j48pldFRYxIwhX6nOV
gplxFWY3CvRSi+o5BZkLcGSPQVHPjJQYkwiuyzhp7nr7VkIQzblxuM7ha69kGZdk
bw9yaM7VFn7v4oBd4WRHbf5e3NqTQcYuF+rd80X1vkkcVCkJ87yNO0BHxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjb2/ZYp4aQU9rvePuO66iBG88HMB8GA1UdIwQY
MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt
OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl
LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFlsZypW
bfa4UmhSNPHj88iov/XSa23uvx8w4PPbM0K4Gs6cyJu+YTVYnYf4H4VesnhRs3KK
ZfXA6HnpjspO4sX9YHVWjVzlb7661rxKMZa3KE9/biEfO4KgLSYGIjKSeS1DDQ0c
h9as7Z5mFM9A7I6G7+A/1pxTEf5+GlWsf8GDI27VYHcBlWwI2tJvEgxr6trek5eV
XF6pTBhT3ROw61BtZ+a9ZMXG5IOuNPEoiL+FUSkDWk7OZHYBtqtKFh8F8u55+qOU
3VJP51PKcmaNRJrrvo/+/zD7hwb8z3sKEHNZW4BA9RjNlDMa+6Uu4AadH5aEQNH6
5hOIQKC7RcNF2w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:36:36 2026 by rpki-client