Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: N/e+oLvUgqcH4UQn2smBBx+Fr85pERlQEhdsEYqFMic=
Subject key identifier: DD:66:12:FA:9E:AF:8D:52:AD:E6:B7:45:64:10:80:D4:1B:38:0F:CE
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019F935B48638827C3ACC4F71B22D0C0E409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 192F
Signing time: Fri 24 Jul 2026 09:01:00 +0000
Manifest this update: Fri 24 Jul 2026 09:01:00 +0000
Manifest next update: Sat 25 Jul 2026 09:01:00 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: HuBqJxrPz8cJIEhWPQ734TMtT-k.roa (hash: tQAxKG9Tf5jOtAxlSBHO2a2s2np2ioSUpEcr2kqOTv4=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: 0EgDeJHES9tz6qOw5rUFpBYGp7KzyhYaHhERycEKE7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:48:63:88:27:c3:ac:c4:f7:1b:22:d0:c0:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jul 24 09:01:00 2026 GMT
Not After : Jul 25 09:01:00 2026 GMT
Subject: CN=dd6612fa9eaf8d52ade6b745641080d41b380fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:45:8e:b5:09:de:cd:97:cd:53:36:d3:29:
17:2b:5b:5c:ba:61:fb:b8:a3:9f:01:91:b9:30:03:
93:6c:1a:62:99:1c:b4:36:d2:61:78:e5:c8:36:ea:
bf:a8:72:be:69:68:4b:5f:4d:07:c4:af:1a:3b:ad:
37:59:17:23:19:8f:59:54:5a:c0:37:64:7a:6c:aa:
80:69:db:d8:19:b5:47:7b:3f:c1:f4:b1:5f:76:9d:
95:16:4b:50:8e:5d:df:a6:b0:58:56:f1:44:75:c4:
59:a6:b6:2a:85:bf:96:8b:a7:03:28:12:92:e8:a8:
f5:46:2c:61:77:67:36:da:2d:57:f4:96:83:01:bc:
e8:7e:b4:0d:3e:30:23:c3:29:3c:b5:3f:96:99:d9:
82:c0:96:b1:d9:90:44:bf:01:c9:04:b1:7d:75:72:
5d:6a:4f:f1:53:65:da:97:0d:ac:35:47:d6:a7:3e:
fa:84:b2:97:dc:ce:e3:97:d1:a7:ab:3c:62:80:83:
32:aa:d1:8c:5e:8c:e4:15:1a:ab:e8:0b:11:15:5f:
20:c4:5c:e8:df:7d:b6:ae:eb:12:8f:d2:96:be:84:
61:b6:98:b4:97:dd:f9:2a:21:9a:d1:55:4f:82:9c:
6d:f5:a6:cb:2c:77:33:9c:e4:5d:5d:8f:80:da:f2:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:12:FA:9E:AF:8D:52:AD:E6:B7:45:64:10:80:D4:1B:38:0F:CE
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:65:91:db:2f:37:36:b1:f0:8b:62:1f:a1:c6:63:77:26:4e:
31:aa:98:4f:50:52:ef:b1:d3:89:14:94:6e:f8:20:d6:34:de:
cb:a6:fd:bd:91:b5:b7:27:4e:99:1e:d5:6f:c7:31:c6:0c:44:
d1:88:e9:25:39:67:6b:b0:b8:59:11:d7:47:4e:26:9b:7d:82:
2c:b5:24:11:21:cf:a3:3d:b6:b5:b1:64:03:1d:f0:8f:d8:d2:
4b:db:e8:21:e4:da:1e:4a:d9:16:63:e7:e5:35:73:1c:f3:43:
f5:52:9d:46:32:ad:88:2e:aa:48:5b:f1:dd:0b:2c:33:94:f7:
a1:7d:d2:e7:ca:5a:7e:55:41:d8:07:5c:0d:77:38:ce:d2:fe:
fd:86:72:65:76:71:86:07:3e:8b:dd:0b:f2:6e:64:97:b3:96:
67:2a:db:bb:2c:7f:3a:6f:c2:66:77:06:8e:0b:b1:0c:40:9b:
75:fe:e1:46:f0:45:b3:23:4f:94:f2:d0:be:87:5f:4d:45:03:
fa:8a:16:50:08:92:63:6f:12:c5:42:92:81:56:1a:1c:1e:d8:
f9:26:86:a3:ad:d4:76:b7:27:fc:30:df:5a:d2:3a:04:8b:7f:
d2:84:20:60:28:20:b1:50:58:8f:3b:f0:10:72:3a:e7:61:0a:
cf:a7:a2:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW0hjiCfDrMT3GyLQwOQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw
ZDVkZDkwHhcNMjYwNzI0MDkwMTAwWhcNMjYwNzI1MDkwMTAwWjAzMTEwLwYDVQQD
EyhkZDY2MTJmYTllYWY4ZDUyYWRlNmI3NDU2NDEwODBkNDFiMzgwZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta9FjrUJ3s2XzVM20ykXK1tcumH7
uKOfAZG5MAOTbBpimRy0NtJheOXINuq/qHK+aWhLX00HxK8aO603WRcjGY9ZVFrA
N2R6bKqAadvYGbVHez/B9LFfdp2VFktQjl3fprBYVvFEdcRZprYqhb+Wi6cDKBKS
6Kj1Rixhd2c22i1X9JaDAbzofrQNPjAjwyk8tT+WmdmCwJax2ZBEvwHJBLF9dXJd
ak/xU2Xalw2sNUfWpz76hLKX3M7jl9GnqzxigIMyqtGMXozkFRqr6AsRFV8gxFzo
3322rusSj9KWvoRhtpi0l935KiGa0VVPgpxt9abLLHcznORdXY+A2vI8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1mEvqer41Srea3RWQQgNQbOA/OMB8GA1UdIwQY
MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt
OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl
LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGWR2y83
NrHwi2IfocZjdyZOMaqYT1BS77HTiRSUbvgg1jTey6b9vZG1tydOmR7Vb8cxxgxE
0YjpJTlna7C4WRHXR04mm32CLLUkESHPoz22tbFkAx3wj9jSS9voIeTaHkrZFmPn
5TVzHPND9VKdRjKtiC6qSFvx3QssM5T3oX3S58paflVB2AdcDXc4ztL+/YZyZXZx
hgc+i90L8m5kl7OWZyrbuyx/Om/CZncGjguxDECbdf7hRvBFsyNPlPLQvodfTUUD
+ooWUAiSY28SxUKSgVYaHB7Y+SaGo63Udrcn/DDfWtI6BIt/0oQgYCggsVBYjzvw
EHI652EKz6eiTg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:18 2026 by rpki-client