Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: dcT9DzCED0nemcpID+QS41/38gpcXPI10BbwpGuCYXI=
Subject key identifier: 8C:57:CC:01:9E:54:8E:C3:2B:8A:7D:BC:27:B7:DB:76:97:C9:79:8B
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 01A0D61513EB1E75E073AE978269C5395C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 152E
Signing time: Fri 25 Sep 2026 01:01:40 +0000
Manifest this update: Fri 25 Sep 2026 01:01:40 +0000
Manifest next update: Sat 26 Sep 2026 01:01:40 +0000
Files and hashes: 1: 2GXp3bAaWM3wTgvjV8eCwVFexe4.asa (hash: hZQJ0WbwmhsDuDCzZWaSBDjdh67b2hIGAFsSqcCCZZ8=)
2: Q2eq3vQ27LdqIhXEwPYKtKFxrj8.roa (hash: w/CxsU35XsDW4qiiMK3VW7xr1QGFT3WBU9iNjApYbmk=)
3: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: Nxoy3bnX8fba5tY9zQlr7UoUHbGBxu0uDbIB2q7sWpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:13:eb:1e:75:e0:73:ae:97:82:69:c5:39:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Sep 25 01:01:40 2026 GMT
Not After : Sep 26 01:01:40 2026 GMT
Subject: CN=8c57cc019e548ec32b8a7dbc27b7db7697c9798b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:7b:ec:ac:70:dd:81:79:99:f2:1b:c9:10:
7e:16:c8:d7:e1:0c:7e:32:96:b6:8a:db:f1:cb:00:
97:ad:bf:87:b3:ec:10:63:92:19:54:cc:b2:4e:3d:
1c:91:72:59:1f:90:15:2d:e0:be:f4:1e:a9:3b:8a:
83:a6:d9:ea:4c:6b:ee:dd:b4:7f:f2:f7:65:a4:57:
e9:13:09:7e:a3:2d:47:51:50:3e:40:ae:05:32:fa:
fc:2b:ab:b3:0c:b3:04:35:e4:aa:9b:e3:1a:4b:55:
e2:b7:ed:37:c8:2f:37:6c:87:7e:e9:3d:14:2e:cb:
ec:e7:44:5d:0a:ee:9a:15:9c:8c:f6:42:a9:99:f4:
29:86:fd:5b:52:45:40:e7:c5:d0:81:a3:62:57:f6:
a2:d5:8a:16:c1:b7:c7:2d:09:a8:d9:21:bf:09:e4:
16:3c:e2:9a:fd:c1:59:0b:60:1a:88:19:f6:13:2f:
9d:4e:39:7f:79:dd:39:fe:d9:20:16:ce:a6:a9:a3:
e8:01:29:00:16:29:b2:1d:ad:16:38:9c:b0:14:76:
aa:c5:4a:3e:bc:6d:26:76:f9:3a:2d:43:4b:ca:0c:
4c:a2:8a:d7:70:61:2e:f2:c1:9a:de:fc:d8:c7:76:
ab:78:69:0c:ff:61:40:38:d9:69:ae:01:a9:9c:17:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:CC:01:9E:54:8E:C3:2B:8A:7D:BC:27:B7:DB:76:97:C9:79:8B
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:75:45:af:ed:91:85:01:f8:8f:9d:20:fb:2a:95:c2:b9:8a:
d9:37:72:53:09:2e:a6:eb:fa:aa:82:9e:d6:08:f5:59:5f:4d:
86:ca:99:90:01:b5:20:6f:82:9a:13:3b:7b:3b:65:5c:a1:dd:
57:d9:25:06:25:5c:7a:ed:c5:9d:fb:7e:23:91:5f:e0:0f:a9:
06:72:2c:34:33:d1:a2:0a:a6:af:de:0b:8a:b3:57:36:f5:3b:
0b:1a:f0:6e:b0:8c:f4:dd:eb:6a:63:4e:35:f0:af:cf:7e:be:
bf:d6:ed:a7:a4:d6:30:17:b7:30:71:53:78:01:98:30:44:6b:
8a:8e:44:a6:4a:19:22:0d:f3:e7:d7:ca:f7:90:6d:17:dc:a6:
33:f2:18:d6:c3:cc:0c:30:68:fb:a3:a7:ee:50:e1:35:b8:dd:
e1:2b:7c:19:4e:6a:46:85:f0:0b:71:f6:9b:6b:cc:cb:2f:57:
13:d1:a2:bd:e1:f5:d9:28:48:f8:96:39:64:cb:d0:2d:32:b0:
9f:ee:ee:87:19:ea:f2:ac:15:d3:ec:53:f1:39:38:a7:51:c7:
2b:0a:82:e6:07:6e:0c:c0:31:b8:02:93:19:b5:ef:a2:bb:42:
b4:13:1b:bb:52:70:0c:a3:7e:33:44:09:f9:2e:c4:96:e0:7e:
4d:b6:b2:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFRPrHnXgc66XgmnFOVw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWI5YmVkOGY4ZDNkNTc5YmIwNTUyZTRmYzRiODE5ODY4
NjFlNjQwHhcNMjYwOTI1MDEwMTQwWhcNMjYwOTI2MDEwMTQwWjAzMTEwLwYDVQQD
Eyg4YzU3Y2MwMTllNTQ4ZWMzMmI4YTdkYmMyN2I3ZGI3Njk3Yzk3OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDt77Kxw3YF5mfIbyRB+FsjX4Qx+
Mpa2itvxywCXrb+Hs+wQY5IZVMyyTj0ckXJZH5AVLeC+9B6pO4qDptnqTGvu3bR/
8vdlpFfpEwl+oy1HUVA+QK4FMvr8K6uzDLMENeSqm+MaS1Xit+03yC83bId+6T0U
Lsvs50RdCu6aFZyM9kKpmfQphv1bUkVA58XQgaNiV/ai1YoWwbfHLQmo2SG/CeQW
POKa/cFZC2AaiBn2Ey+dTjl/ed05/tkgFs6mqaPoASkAFimyHa0WOJywFHaqxUo+
vG0mdvk6LUNLygxMoorXcGEu8sGa3vzYx3areGkM/2FAONlprgGpnBd9hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxXzAGeVI7DK4p9vCe323aXyXmLMB8GA1UdIwQY
MBaAFF6bm+2PjT1Xm7BVLk/EuBmGhh5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQt
YTVhNWFkMDZlYjQzLzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQtYTVhNWFkMDZlYjQz
LzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHVFr+2R
hQH4j50g+yqVwrmK2TdyUwkupuv6qoKe1gj1WV9NhsqZkAG1IG+CmhM7eztlXKHd
V9klBiVceu3Fnft+I5Ff4A+pBnIsNDPRogqmr94LirNXNvU7CxrwbrCM9N3ramNO
NfCvz36+v9btp6TWMBe3MHFTeAGYMERrio5EpkoZIg3z59fK95BtF9ymM/IY1sPM
DDBo+6On7lDhNbjd4St8GU5qRoXwC3H2m2vMyy9XE9GiveH12ShI+JY5ZMvQLTKw
n+7uhxnq8qwV0+xT8Tk4p1HHKwqC5gduDMAxuAKTGbXvortCtBMbu1JwDKN+M0QJ
+S7EluB+Tbay2Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:13:59 2026 by rpki-client