Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier: nveT9PsIO32LXp1KleIP/9eB2FHoS25rRKhHbK5B85A=
Subject key identifier: 13:7A:9E:EF:46:7E:DD:B5:39:A2:B7:37:47:3F:98:7C:CC:F1:C0:31
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 01A0D9BB178CF1FCD3B68CF834D8E83212D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number: 12D7
Signing time: Fri 25 Sep 2026 18:01:52 +0000
Manifest this update: Fri 25 Sep 2026 18:01:52 +0000
Manifest next update: Sat 26 Sep 2026 18:01:52 +0000
Files and hashes: 1: AnmyPTbeKIdDpKQo2ow_d3sowCk.roa (hash: 5yDe2nBXJJOjrwl2r1aO5EGRjZW/0EOoxp3H2cvGJfM=)
2: H2Ow2vJleUpffVQJUaw-DrOP25Q.roa (hash: KI8QYq2nupDeoMFFlx5O6qkC1YhqNdHz/2qG81EcAxI=)
3: OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa (hash: B++2fKZYAzjlOxy+tDnJEo09oVmzZa6HnhPwxHljg8k=)
4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: 45ByFMvmLkenhyFCOai3XAj6titrxgYIybvEInyw2Vk=)
5: zmd5DMlEMs7x1X9PCKsNsTMW85A.roa (hash: +YU6hVZe0+5DtmTz9/lx0AEtMcLkshGqyIbMlS0ia0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:17:8c:f1:fc:d3:b6:8c:f8:34:d8:e8:32:12:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Sep 25 18:01:52 2026 GMT
Not After : Sep 26 18:01:52 2026 GMT
Subject: CN=137a9eef467eddb539a2b737473f987cccf1c031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:a8:b4:83:80:9d:dd:44:36:7d:a3:a8:f6:
8c:1b:a8:2b:ef:70:a2:d7:67:4f:24:a7:9e:26:c1:
7d:cb:5b:e2:d0:81:21:7a:24:18:16:ff:66:18:62:
1c:75:20:72:9f:cc:ea:21:f7:2a:98:48:17:f5:10:
49:7b:40:4d:13:5d:37:a1:12:92:da:f2:0e:77:bb:
56:00:b3:0e:10:39:a7:9c:f5:59:80:1d:54:2c:36:
25:65:8e:c9:97:d3:41:92:44:01:f1:64:e3:c2:68:
0e:c8:fd:06:93:74:2e:90:f1:06:8c:2b:98:0a:b4:
06:67:35:88:30:0b:e7:fb:2d:b6:67:ef:53:70:7c:
e6:08:87:2c:35:57:32:28:b6:39:cc:86:87:fd:91:
86:dd:1f:c8:17:06:4b:78:0d:95:14:5a:46:42:dd:
e8:15:c7:90:04:c0:c5:77:72:ac:d2:98:e3:50:24:
51:9c:e2:64:fa:6a:b7:44:78:2d:36:fa:52:94:d0:
21:f2:d0:fb:a2:5b:f3:6f:1c:59:17:5d:45:7d:4b:
17:d3:5f:11:89:15:9a:2d:a4:fe:70:c9:75:ae:c0:
86:40:4e:9c:ec:d3:15:2a:84:de:b3:a1:49:20:d1:
0c:8e:77:59:e5:78:e5:e3:00:54:34:44:38:f9:a8:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:9E:EF:46:7E:DD:B5:39:A2:B7:37:47:3F:98:7C:CC:F1:C0:31
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:53:fc:49:b6:f4:89:b2:2e:77:44:11:f9:92:29:ab:0f:a8:
0d:c9:ef:69:07:18:c8:9d:f8:d0:68:70:51:18:08:63:bb:aa:
c3:5c:23:1f:b5:ca:c2:38:20:14:48:be:63:0a:20:f5:d2:74:
e5:a7:d9:85:2d:30:b4:7b:41:0b:e0:34:67:0d:47:ca:0d:36:
39:61:16:c2:ee:e4:32:f8:05:99:cc:5b:86:08:47:ce:93:09:
ef:3f:45:76:fd:ce:a2:3c:a2:17:8d:00:56:a6:b3:ac:3c:5a:
4d:a1:e9:49:71:0f:09:5b:ed:71:eb:83:29:5e:41:be:26:6a:
ab:4c:a4:3a:60:61:4f:68:7b:41:fd:5c:b3:cf:82:6f:62:4d:
90:17:56:e6:be:8e:48:a6:9c:60:ce:f2:14:92:8e:91:10:43:
4d:d1:d8:92:3d:94:c3:cb:61:78:ce:65:74:17:22:49:34:05:
a9:cc:aa:fb:14:b4:8b:c0:1c:f3:3e:55:e9:a7:4a:df:21:99:
1d:3a:15:2b:55:df:2f:b2:85:a8:67:70:f6:37:55:26:3b:e6:
71:51:16:12:37:46:14:39:4d:15:96:58:35:c3:9f:d5:ba:d6:
10:07:6d:99:a7:56:81:f8:e1:5a:01:c7:69:30:d2:f3:95:65:
4f:90:75:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuxeM8fzTtoz4NNjoMhLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTAwNGJlZmE1NTNkZGIzNTU2NGZiNzc2MmIwNWViMjIy
ZWNmOTMwHhcNMjYwOTI1MTgwMTUyWhcNMjYwOTI2MTgwMTUyWjAzMTEwLwYDVQQD
EygxMzdhOWVlZjQ2N2VkZGI1MzlhMmI3Mzc0NzNmOTg3Y2NjZjFjMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFSotIOAnd1ENn2jqPaMG6gr73Ci
12dPJKeeJsF9y1vi0IEheiQYFv9mGGIcdSByn8zqIfcqmEgX9RBJe0BNE103oRKS
2vIOd7tWALMOEDmnnPVZgB1ULDYlZY7Jl9NBkkQB8WTjwmgOyP0Gk3QukPEGjCuY
CrQGZzWIMAvn+y22Z+9TcHzmCIcsNVcyKLY5zIaH/ZGG3R/IFwZLeA2VFFpGQt3o
FceQBMDFd3Ks0pjjUCRRnOJk+mq3RHgtNvpSlNAh8tD7olvzbxxZF11FfUsX018R
iRWaLaT+cMl1rsCGQE6c7NMVKoTes6FJINEMjndZ5Xjl4wBUNEQ4+ahIPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN6nu9Gft21OaK3N0c/mHzM8cAxMB8GA1UdIwQY
MBaAFF7gBL76VT3bNVZPt3YrBesiLs+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjIt
ZTIyOGFhYjQ1MDE0LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjItZTIyOGFhYjQ1MDE0
LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVP8Sbb0
ibIud0QR+ZIpqw+oDcnvaQcYyJ340GhwURgIY7uqw1wjH7XKwjggFEi+Ywog9dJ0
5afZhS0wtHtBC+A0Zw1Hyg02OWEWwu7kMvgFmcxbhghHzpMJ7z9Fdv3OojyiF40A
VqazrDxaTaHpSXEPCVvtceuDKV5BviZqq0ykOmBhT2h7Qf1cs8+Cb2JNkBdW5r6O
SKacYM7yFJKOkRBDTdHYkj2Uw8theM5ldBciSTQFqcyq+xS0i8Ac8z5V6adK3yGZ
HToVK1XfL7KFqGdw9jdVJjvmcVEWEjdGFDlNFZZYNcOf1brWEAdtmadWgfjhWgHH
aTDS85VlT5B1aw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:23 2026 by rpki-client