Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: MMOHvgu148Xp+5DnITftivmExUivc/tqEbL2wQjqrA0=
Subject key identifier: 78:9E:28:BA:4B:D4:50:A0:65:1F:22:A9:83:E8:A6:CF:70:53:2C:B5
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01A0D3B8C5B4CDAFFD5FBAE3D9BCE3EEB142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1A75
Signing time: Thu 24 Sep 2026 14:01:36 +0000
Manifest this update: Thu 24 Sep 2026 14:01:36 +0000
Manifest next update: Fri 25 Sep 2026 14:01:36 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: bP692u13bCWrWG+zkSHofGPwQBwdeKXfjbq1Fd1rZ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:c5:b4:cd:af:fd:5f:ba:e3:d9:bc:e3:ee:b1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Sep 24 14:01:36 2026 GMT
Not After : Sep 25 14:01:36 2026 GMT
Subject: CN=789e28ba4bd450a0651f22a983e8a6cf70532cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:40:b5:c5:42:6d:32:e0:85:37:02:49:3e:
7f:34:a8:21:90:2c:d1:82:f1:79:cd:05:17:49:e6:
9f:1f:fe:40:d6:68:95:65:45:3d:90:c2:8a:e4:00:
04:1a:e0:97:c0:d2:cd:f6:16:bb:8d:13:94:d4:77:
6c:5c:f0:43:a9:83:58:29:bd:2d:5e:b3:b1:0e:f6:
ed:fb:e0:71:22:f3:4c:82:08:43:c0:d6:51:ed:69:
47:a2:89:9b:32:95:b4:2a:b3:fd:9e:d1:9e:2b:d4:
ba:42:4b:9b:74:c9:48:2f:44:96:24:91:06:4a:e4:
ba:66:f4:a0:16:dc:d4:fb:50:14:1a:26:33:40:ea:
89:bc:8f:bf:23:e8:63:d8:bb:3e:8b:35:c6:d4:c0:
fc:c0:fb:84:35:75:9e:55:4f:04:24:23:c6:db:21:
4a:b1:08:8f:63:d9:2f:b0:79:cb:c7:41:2b:25:9d:
19:9c:63:41:71:ea:f0:bd:80:e3:07:65:66:72:0f:
62:81:55:99:53:b1:5d:a2:c0:af:fd:1c:25:1d:36:
a0:83:5c:ed:cc:e6:79:d2:8e:ec:fa:d1:6a:4d:89:
0c:51:12:85:47:7a:90:da:8b:0a:7d:89:8e:77:30:
07:d7:60:da:8d:22:0e:56:c7:0f:9b:f3:90:e5:21:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9E:28:BA:4B:D4:50:A0:65:1F:22:A9:83:E8:A6:CF:70:53:2C:B5
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c4:e8:9b:f0:61:eb:67:20:d9:48:c3:48:a4:69:90:d9:f2:
a7:35:23:02:f4:1b:f6:88:19:3f:6e:c9:a5:dc:bd:2c:ad:96:
e7:90:20:39:29:3f:66:14:20:03:b1:e0:d4:e3:28:19:10:7e:
cf:b3:55:91:ab:3b:c6:44:96:b1:bc:f1:2d:05:1c:0a:ea:4d:
ce:e8:18:14:14:c3:56:e3:b4:6a:dc:f4:e4:68:e0:0b:3a:b3:
f1:b1:1f:f5:9a:cd:82:a2:7b:e4:17:bb:12:26:9d:7e:f0:38:
f8:cc:9a:84:14:3a:56:b5:f7:ca:c8:7d:71:30:e1:58:49:a5:
fc:bc:97:d6:b2:1c:87:17:95:8b:b7:ed:90:ca:8c:b2:ef:2f:
86:c8:d0:0b:bc:25:e9:76:3c:12:10:c9:95:a6:94:ac:97:04:
a4:1d:bc:9b:dd:40:8b:a0:ac:cd:66:c7:03:59:29:1a:58:0a:
8b:21:75:b4:ff:e6:5c:be:f3:9c:d8:01:ec:48:60:81:db:53:
3d:78:c6:63:5c:33:68:ed:22:0e:88:37:0a:86:c7:bd:03:6c:
72:64:ac:3e:a4:6f:be:2a:93:6f:08:2d:e0:9a:21:e9:22:3e:
1e:c6:21:bb:e8:ae:91:eb:e6:69:e1:11:00:99:19:5d:b1:31:
a2:eb:b9:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuMW0za/9X7rj2bzj7rFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm
MmY5YTkwHhcNMjYwOTI0MTQwMTM2WhcNMjYwOTI1MTQwMTM2WjAzMTEwLwYDVQQD
Eyg3ODllMjhiYTRiZDQ1MGEwNjUxZjIyYTk4M2U4YTZjZjcwNTMyY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEBAtcVCbTLghTcCST5/NKghkCzR
gvF5zQUXSeafH/5A1miVZUU9kMKK5AAEGuCXwNLN9ha7jROU1HdsXPBDqYNYKb0t
XrOxDvbt++BxIvNMgghDwNZR7WlHoombMpW0KrP9ntGeK9S6QkubdMlIL0SWJJEG
SuS6ZvSgFtzU+1AUGiYzQOqJvI+/I+hj2Ls+izXG1MD8wPuENXWeVU8EJCPG2yFK
sQiPY9kvsHnLx0ErJZ0ZnGNBcerwvYDjB2Vmcg9igVWZU7FdosCv/RwlHTagg1zt
zOZ50o7s+tFqTYkMURKFR3qQ2osKfYmOdzAH12DajSIOVscPm/OQ5SG5PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHieKLpL1FCgZR8iqYPops9wUyy1MB8GA1UdIwQY
MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt
MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4
LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsTom/Bh
62cg2UjDSKRpkNnypzUjAvQb9ogZP27Jpdy9LK2W55AgOSk/ZhQgA7Hg1OMoGRB+
z7NVkas7xkSWsbzxLQUcCupNzugYFBTDVuO0atz05GjgCzqz8bEf9ZrNgqJ75Be7
EiadfvA4+MyahBQ6VrX3ysh9cTDhWEml/LyX1rIchxeVi7ftkMqMsu8vhsjQC7wl
6XY8EhDJlaaUrJcEpB28m91Ai6CszWbHA1kpGlgKiyF1tP/mXL7znNgB7EhggdtT
PXjGY1wzaO0iDog3CobHvQNscmSsPqRvviqTbwgt4Joh6SI+HsYhu+iukevmaeER
AJkZXbExouu5ww==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:13 2026 by rpki-client