Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: FKwdKmpZZVGvy6OcES833TxhsN8s176/2/+j8PwQESM=
Subject key identifier: A9:7A:81:F3:BD:E2:FD:60:8A:55:97:FA:9F:F3:B2:21:12:44:92:FE
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019F9323CD36C4BFCBF162A985F7C5F0CF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 08:00:24 +0000
Manifest this update: Fri 24 Jul 2026 08:00:24 +0000
Manifest next update: Sat 25 Jul 2026 08:00:24 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: k+9WLVP4nsmHoqhEu+Cdrn06mqdF1GeccHKCkU/qmtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:cd:36:c4:bf:cb:f1:62:a9:85:f7:c5:f0:cf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jul 24 08:00:24 2026 GMT
Not After : Jul 25 08:00:24 2026 GMT
Subject: CN=a97a81f3bde2fd608a5597fa9ff3b221124492fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:58:98:72:b3:91:3f:3a:5c:6c:f8:4e:db:
fd:bf:31:60:06:f2:ca:bd:77:00:99:5f:ea:c8:28:
1e:45:fa:0b:af:61:e7:f4:82:f7:46:ee:63:f5:76:
85:e5:c0:a0:87:5b:9b:68:5b:a8:5d:f9:bc:23:d1:
c5:95:43:77:ed:e0:35:70:eb:92:fe:cc:79:0a:d8:
34:d2:09:41:84:94:ab:7a:9c:8b:b5:e9:40:ab:d2:
6c:e1:8d:3f:37:f5:39:1a:a9:20:7a:d5:5a:22:02:
d6:fe:58:66:56:f3:7a:97:9b:72:36:0e:fc:ba:15:
99:f5:70:f8:38:22:7f:b7:b8:c2:f8:95:fb:bc:c6:
91:71:22:fc:eb:dd:df:56:b4:a3:c0:1c:27:6f:e5:
45:61:54:e1:d4:40:b7:72:bb:f4:ab:17:bc:04:67:
be:88:78:af:6e:5d:22:ee:d2:b9:0f:fa:91:6e:dc:
a9:c8:bb:d2:a5:80:2c:40:a9:54:19:ab:b8:52:da:
ce:6c:bc:97:ca:75:d1:a6:aa:74:ab:56:43:97:26:
e1:13:4e:df:0c:5f:b2:06:bd:16:fe:3f:64:6e:3f:
a9:f1:00:de:5f:f6:b6:f8:b3:b6:43:64:2a:56:de:
2c:ca:a1:59:37:1e:6f:ed:fd:1c:eb:7e:26:49:d6:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7A:81:F3:BD:E2:FD:60:8A:55:97:FA:9F:F3:B2:21:12:44:92:FE
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d4:ba:10:04:a1:0b:cf:70:11:05:91:89:0b:6f:a1:b8:53:
6e:ce:7b:78:34:db:b5:5d:a9:06:7e:bc:f8:27:4f:c6:de:8e:
6a:23:b6:af:7e:40:ba:1c:59:8d:37:1a:8a:29:08:69:e8:1e:
95:bd:8b:7b:24:ad:b0:e4:0c:28:fd:bc:91:bd:2f:4f:c3:53:
6c:21:c1:39:e5:78:f0:21:d7:23:9b:ec:f7:8a:4a:63:10:21:
9f:16:a3:9c:b9:39:a7:eb:cf:83:4b:4d:51:62:7d:df:49:54:
1d:db:2e:af:41:28:a0:74:99:82:9c:b5:d1:c3:b8:7e:a5:15:
6d:de:34:bc:e2:2f:7f:3c:a9:e1:0f:df:95:55:7f:08:d8:4d:
2c:e7:6f:be:16:2c:70:82:eb:df:a7:ce:c2:f3:25:19:4a:51:
56:9d:c1:01:af:e4:81:92:90:d2:9b:b9:26:1d:56:1e:19:74:
e9:11:86:bd:46:51:b6:46:ea:43:0c:50:d3:fa:45:43:0f:8e:
62:8d:ce:02:66:cb:bc:67:41:e5:62:c7:ac:3f:29:93:5a:0d:
a0:98:d7:2a:39:7b:3e:c0:eb:ea:7c:c4:0d:86:ae:7d:95:43:
17:c1:14:b4:fb:8a:71:77:f3:9d:af:bf:75:31:aa:ed:b0:80:
a7:56:6c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI802xL/L8WKphffF8M8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2
Zjg4MzIwHhcNMjYwNzI0MDgwMDI0WhcNMjYwNzI1MDgwMDI0WjAzMTEwLwYDVQQD
EyhhOTdhODFmM2JkZTJmZDYwOGE1NTk3ZmE5ZmYzYjIyMTEyNDQ5MmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApptYmHKzkT86XGz4Ttv9vzFgBvLK
vXcAmV/qyCgeRfoLr2Hn9IL3Ru5j9XaF5cCgh1ubaFuoXfm8I9HFlUN37eA1cOuS
/sx5Ctg00glBhJSrepyLtelAq9Js4Y0/N/U5GqkgetVaIgLW/lhmVvN6l5tyNg78
uhWZ9XD4OCJ/t7jC+JX7vMaRcSL8693fVrSjwBwnb+VFYVTh1EC3crv0qxe8BGe+
iHivbl0i7tK5D/qRbtypyLvSpYAsQKlUGau4UtrObLyXynXRpqp0q1ZDlybhE07f
DF+yBr0W/j9kbj+p8QDeX/a2+LO2Q2QqVt4syqFZNx5v7f0c634mSdZbmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl6gfO94v1gilWX+p/zsiESRJL+MB8GA1UdIwQY
MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt
Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj
LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtS6EASh
C89wEQWRiQtvobhTbs57eDTbtV2pBn68+CdPxt6OaiO2r35AuhxZjTcaiikIaege
lb2LeyStsOQMKP28kb0vT8NTbCHBOeV48CHXI5vs94pKYxAhnxajnLk5p+vPg0tN
UWJ930lUHdsur0EooHSZgpy10cO4fqUVbd40vOIvfzyp4Q/flVV/CNhNLOdvvhYs
cILr36fOwvMlGUpRVp3BAa/kgZKQ0pu5Jh1WHhl06RGGvUZRtkbqQwxQ0/pFQw+O
Yo3OAmbLvGdB5WLHrD8pk1oNoJjXKjl7PsDr6nzEDYaufZVDF8EUtPuKcXfzna+/
dTGq7bCAp1Zsfg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:59:51 2026 by rpki-client