Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
File: Xx0htjXMvXDmTKZR9atINcrjufk.mft (raw, json)
Hash identifier: M7a0XtVPiVpMt1U+hMIAcUzbXs1y18RE72oY/HGZ9ig=
Subject key identifier: A6:12:AE:82:1D:FE:B6:4C:BB:43:50:D7:54:9F:C2:DD:D1:08:35:E1
Authority key identifier: 5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
Certificate issuer: /CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Certificate serial: 01A0D7277B40975E3615FA5D7DC932D5A6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
Manifest number: 87
Signing time: Fri 25 Sep 2026 06:01:23 +0000
Manifest this update: Fri 25 Sep 2026 06:01:23 +0000
Manifest next update: Sat 26 Sep 2026 06:01:23 +0000
Files and hashes: 1: 7bWbVotUtv52xOiDEME3dz5_e98.roa (hash: sHchAOAFmNObQRTRvZeViPzc8t8WH0mwLDZ2MCC81Ag=)
2: Xx0htjXMvXDmTKZR9atINcrjufk.crl (hash: BdUqB9AU4HsMPXzmDO0JMLDazLvBa4Naa5G1kSxbEvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:7b:40:97:5e:36:15:fa:5d:7d:c9:32:d5:a6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Validity
Not Before: Sep 25 06:01:23 2026 GMT
Not After : Sep 26 06:01:23 2026 GMT
Subject: CN=a612ae821dfeb64cbb4350d7549fc2ddd10835e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:57:9d:9c:c5:17:73:b8:2e:0e:ec:6c:3a:
07:29:cc:1a:90:ae:71:b0:da:30:8a:07:64:06:5f:
8f:e5:3e:d1:e0:9d:1f:66:29:64:00:08:be:e2:33:
2f:7a:19:17:88:e3:78:15:21:da:3a:c6:ff:62:c6:
7d:40:7b:f6:5f:0c:4c:82:19:8e:99:cc:31:e7:54:
fc:98:7f:d2:18:ac:42:33:f9:7b:57:4a:f4:0b:c7:
91:3e:7c:7d:2f:9d:6e:f9:fa:1e:8d:44:7e:e0:83:
31:be:07:c2:8a:b1:cf:02:c3:f0:a1:76:8c:60:d2:
ce:db:f6:fd:c3:91:31:05:4a:89:42:78:26:bb:0b:
d3:6a:8b:6f:62:d0:13:c9:4b:c8:e7:c2:da:c5:0b:
b3:12:19:70:4d:60:45:c8:78:e2:cc:2a:77:f1:2f:
f8:3f:f0:61:f9:29:df:90:59:73:36:c8:7b:a2:1c:
05:12:3f:9d:78:e4:c7:92:59:f6:c6:01:24:24:d1:
5c:dc:c9:d9:ac:06:60:a0:b6:af:51:3b:58:81:9a:
1a:a0:3e:23:84:4e:90:b8:6e:e9:a5:c2:4e:97:73:
91:4a:4f:62:95:dd:ab:46:f4:74:e2:ac:20:11:ea:
8a:29:d5:43:21:cd:b2:b1:ed:ce:a3:3a:58:c9:52:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:12:AE:82:1D:FE:B6:4C:BB:43:50:D7:54:9F:C2:DD:D1:08:35:E1
X509v3 Authority Key Identifier:
keyid:5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:bd:85:62:48:79:96:f5:a7:7f:ae:07:02:e1:6c:dc:b7:
ba:45:53:df:8a:70:c0:25:10:4d:a3:1c:66:70:44:16:6f:e3:
88:e9:2c:7b:77:39:cb:03:43:85:8d:df:61:40:ac:bf:35:ab:
61:6f:c3:bb:61:10:dc:05:1a:ee:a6:9f:11:a9:9f:0c:85:67:
7e:0b:88:91:ff:a8:3b:9e:29:94:7d:eb:5a:57:99:48:72:3c:
e0:45:04:a2:16:7d:d9:d3:1e:4c:a3:a5:29:7c:7d:44:8e:22:
84:2c:d5:21:0a:6b:58:4f:12:90:a1:ee:ee:ff:77:c1:6f:3b:
e6:3a:b2:aa:1a:c9:07:31:3a:c7:cd:cb:9e:92:e9:12:44:09:
7c:2f:32:da:c1:d2:9c:a7:e5:78:14:9b:39:c9:19:89:f7:e5:
a1:12:de:38:b7:06:7a:41:2d:ef:4e:75:ee:13:c3:41:52:54:
ee:54:85:40:27:b3:a8:11:8a:8c:2d:58:1c:a2:e0:d1:a2:a8:
ce:80:97:99:41:89:34:a1:18:2d:1b:fb:49:1e:6c:12:77:42:
04:55:f9:9e:48:54:48:23:ac:83:f7:57:17:ae:91:10:ff:f0:
ab:46:6c:03:e9:1b:ec:30:a2:a4:f4:41:0f:87:c3:07:cf:22:
09:8b:06:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXJ3tAl142Ffpdfcky1ab3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWQyMWI2MzVjY2JkNzBlNjRjYTY1MWY1YWI0ODM1Y2Fl
M2I5ZjkwHhcNMjYwOTI1MDYwMTIzWhcNMjYwOTI2MDYwMTIzWjAzMTEwLwYDVQQD
EyhhNjEyYWU4MjFkZmViNjRjYmI0MzUwZDc1NDlmYzJkZGQxMDgzNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN9XnZzFF3O4Lg7sbDoHKcwakK5x
sNowigdkBl+P5T7R4J0fZilkAAi+4jMvehkXiON4FSHaOsb/YsZ9QHv2XwxMghmO
mcwx51T8mH/SGKxCM/l7V0r0C8eRPnx9L51u+foejUR+4IMxvgfCirHPAsPwoXaM
YNLO2/b9w5ExBUqJQngmuwvTaotvYtATyUvI58LaxQuzEhlwTWBFyHjizCp38S/4
P/Bh+SnfkFlzNsh7ohwFEj+deOTHkln2xgEkJNFc3MnZrAZgoLavUTtYgZoaoD4j
hE6QuG7ppcJOl3ORSk9ild2rRvR04qwgEeqKKdVDIc2yse3OozpYyVIWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYSroId/rZMu0NQ11Sfwt3RCDXhMB8GA1UdIwQY
MBaAFF8dIbY1zL1w5kymUfWrSDXK47n5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHgwaHRqWE12WERtVEtaUjlhdElOY3JqdWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85MTRlMTEtOGFiZi00ZTE5LTk2NDct
YTQxMGNhYzIzZDEzLzEvWHgwaHRqWE12WERtVEtaUjlhdElOY3JqdWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85MTRlMTEtOGFiZi00ZTE5LTk2NDctYTQxMGNhYzIzZDEz
LzEvWHgwaHRqWE12WERtVEtaUjlhdElOY3JqdWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAS9hWJI
eZb1p3+uBwLhbNy3ukVT34pwwCUQTaMcZnBEFm/jiOkse3c5ywNDhY3fYUCsvzWr
YW/Du2EQ3AUa7qafEamfDIVnfguIkf+oO54plH3rWleZSHI84EUEohZ92dMeTKOl
KXx9RI4ihCzVIQprWE8SkKHu7v93wW875jqyqhrJBzE6x83LnpLpEkQJfC8y2sHS
nKfleBSbOckZiffloRLeOLcGekEt70517hPDQVJU7lSFQCezqBGKjC1YHKLg0aKo
zoCXmUGJNKEYLRv7SR5sEndCBFX5nkhUSCOsg/dXF66REP/wq0ZsA+kb7DCipPRB
D4fDB88iCYsGjg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:07:25 2026 by rpki-client