Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: WZua+m8wdFe/7w/txbyUs+kRzS7MSqkZJUVosF9jzuw=
Subject key identifier: B3:2A:31:4D:34:70:64:FC:46:F9:E3:96:E6:88:88:E9:29:D9:7F:A3
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 01A110A8BB1887E156347252A09BD5C8A649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 0941
Signing time: Tue 06 Oct 2026 10:00:55 +0000
Manifest this update: Tue 06 Oct 2026 10:00:55 +0000
Manifest next update: Wed 07 Oct 2026 10:00:55 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: LYXjTjZduT01o7kI6PhQ5Ny0SoJvD+FoVs6+Z+bXVJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:bb:18:87:e1:56:34:72:52:a0:9b:d5:c8:a6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Oct 6 10:00:55 2026 GMT
Not After : Oct 7 10:00:55 2026 GMT
Subject: CN=b32a314d347064fc46f9e396e68888e929d97fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:c2:82:d6:8e:2a:fd:3a:d7:5f:4a:b2:c5:
83:56:0d:97:c1:d0:00:f3:47:b9:a4:e8:b4:86:51:
5a:fa:b0:a0:40:43:3d:a4:59:ff:10:23:63:db:37:
dc:d0:0c:dc:c5:1f:de:8d:9d:ec:2a:00:f7:5e:33:
82:bc:94:0e:04:71:18:7e:6d:51:ee:fb:a3:be:01:
d6:5c:98:0c:9c:58:d7:06:a1:09:45:a3:29:4a:aa:
1e:bc:3c:74:81:40:21:94:45:a1:e7:da:51:6d:6f:
51:aa:1a:1e:fb:f2:8a:11:a4:2a:1f:c6:02:89:28:
f0:3d:41:0e:38:3a:6e:9c:34:54:76:39:7c:ca:cf:
bc:cb:6c:c6:cc:df:15:98:f6:1e:36:10:8c:2d:35:
84:47:37:d4:6c:be:20:25:4b:8a:fb:f6:eb:c2:53:
09:fd:88:bf:82:76:30:96:e8:38:51:b6:32:8f:a2:
04:ca:94:38:79:8d:b9:40:21:ad:b4:38:75:d4:8c:
47:42:c0:d3:6d:3e:ba:33:78:4e:79:d7:e4:e9:40:
c4:30:11:6a:45:ac:4a:76:18:85:55:03:25:5d:d9:
07:ad:61:20:14:0d:55:7b:d8:08:26:1c:91:fb:a0:
c0:94:b7:bc:c3:ea:94:d1:93:f4:a7:54:2b:46:8b:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:31:4D:34:70:64:FC:46:F9:E3:96:E6:88:88:E9:29:D9:7F:A3
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:df:cf:cf:6c:79:5b:3b:aa:0d:41:7e:12:3d:2a:30:7d:e9:
c0:25:c6:20:fd:50:0c:e3:91:90:88:d0:b0:19:7a:39:34:de:
88:37:92:e2:34:2e:2b:ee:d6:58:5a:7e:6c:bf:e3:e8:ec:52:
33:e0:d2:1f:f2:db:87:2a:74:85:4e:10:67:74:72:75:75:95:
c6:e5:13:da:95:4d:06:55:43:65:c0:c3:2f:5f:ed:52:f2:51:
9e:8f:de:91:da:85:91:d7:1a:cb:ad:dc:b9:90:fb:b1:1d:da:
05:45:d5:4c:d6:ae:00:8e:60:02:4e:6d:2a:24:ed:61:62:24:
53:b5:cb:3c:60:8c:47:88:d7:9f:1b:4c:66:4e:86:df:7c:1c:
b6:50:59:ce:52:25:cf:f2:8c:03:5e:21:d0:32:0e:1b:ce:35:
f0:40:e6:8a:a7:b6:e1:df:de:05:4a:72:9a:4d:5b:bc:a2:aa:
c1:b4:17:7e:55:bb:59:26:e7:0c:ee:ff:44:05:c0:b5:74:82:
cf:f0:3b:6f:0b:47:8c:5a:fe:2e:2f:c0:e2:bb:dc:63:3b:d5:
8a:38:7e:62:3e:fa:b1:db:77:65:1b:b3:21:05:2c:ff:6d:fb:
c7:72:5b:48:96:2f:9b:f7:a9:cb:6b:14:82:b1:55:51:b6:24:
02:30:04:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQqLsYh+FWNHJSoJvVyKZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzFkOTU4MGE4ZjAxZTQ5YzYxYzVmY2ZkZmYyZTU4OTk1
MzRiOGYwHhcNMjYxMDA2MTAwMDU1WhcNMjYxMDA3MTAwMDU1WjAzMTEwLwYDVQQD
EyhiMzJhMzE0ZDM0NzA2NGZjNDZmOWUzOTZlNjg4ODhlOTI5ZDk3ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlPCgtaOKv06119KssWDVg2XwdAA
80e5pOi0hlFa+rCgQEM9pFn/ECNj2zfc0AzcxR/ejZ3sKgD3XjOCvJQOBHEYfm1R
7vujvgHWXJgMnFjXBqEJRaMpSqoevDx0gUAhlEWh59pRbW9Rqhoe+/KKEaQqH8YC
iSjwPUEOODpunDRUdjl8ys+8y2zGzN8VmPYeNhCMLTWERzfUbL4gJUuK+/brwlMJ
/Yi/gnYwlug4UbYyj6IEypQ4eY25QCGttDh11IxHQsDTbT66M3hOedfk6UDEMBFq
RaxKdhiFVQMlXdkHrWEgFA1Ve9gIJhyR+6DAlLe8w+qU0ZP0p1QrRosmowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMqMU00cGT8RvnjluaIiOkp2X+jMB8GA1UdIwQY
MBaAFMVx2VgKjwHknGHF/P3/LliZU0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgt
NzU0NmRkMTcxNmM4LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgtNzU0NmRkMTcxNmM4
LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad/Pz2x5
WzuqDUF+Ej0qMH3pwCXGIP1QDOORkIjQsBl6OTTeiDeS4jQuK+7WWFp+bL/j6OxS
M+DSH/Lbhyp0hU4QZ3RydXWVxuUT2pVNBlVDZcDDL1/tUvJRno/ekdqFkdcay63c
uZD7sR3aBUXVTNauAI5gAk5tKiTtYWIkU7XLPGCMR4jXnxtMZk6G33wctlBZzlIl
z/KMA14h0DIOG8418EDmiqe24d/eBUpymk1bvKKqwbQXflW7WSbnDO7/RAXAtXSC
z/A7bwtHjFr+Li/A4rvcYzvVijh+Yj76sdt3ZRuzIQUs/237x3JbSJYvm/epy2sU
grFVUbYkAjAEvQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:47:58 2026 by rpki-client