Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: wYdjTrj9CpP1UQZCfPvvCrJti1gbL6ADn4ywdCTyiwE=
Subject key identifier: E8:4B:25:45:2C:79:ED:7F:B7:DB:58:31:96:71:67:4A:45:34:15:CA
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019F932422714977E89A3C2970674DA185DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 1610
Signing time: Fri 24 Jul 2026 08:00:46 +0000
Manifest this update: Fri 24 Jul 2026 08:00:46 +0000
Manifest next update: Sat 25 Jul 2026 08:00:46 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: qG8LASzfLDCqR44FwtYk7RglN81vprEwzhA6QHDIrHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:22:71:49:77:e8:9a:3c:29:70:67:4d:a1:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jul 24 08:00:46 2026 GMT
Not After : Jul 25 08:00:46 2026 GMT
Subject: CN=e84b25452c79ed7fb7db58319671674a453415ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:1c:82:04:a6:8e:da:98:1c:3f:b2:5d:75:
53:3e:72:e1:b9:29:0f:1e:a6:6c:b8:e1:96:3c:64:
6c:0a:19:52:d5:ee:0f:16:7d:f9:69:2f:fd:68:a5:
b9:b2:36:80:ff:23:a6:7b:d7:a5:bc:36:d3:ff:36:
cd:82:5d:8c:58:1b:13:03:79:96:17:ea:5f:94:58:
d8:00:ec:d0:fd:a4:ce:12:3e:5a:5d:2c:67:5c:29:
e5:81:b3:e3:69:2f:15:f5:d5:8c:a7:db:2d:e0:2d:
e9:87:ed:43:01:0b:e9:34:04:c0:91:1e:61:7e:e4:
14:3c:46:1a:bf:bc:24:a8:fb:ff:c6:73:14:dd:91:
22:f1:44:e2:bc:f8:63:fe:8a:d0:4c:e3:98:eb:dc:
84:43:7b:cf:a7:2f:0e:13:9a:fd:c2:14:81:a1:53:
b6:38:01:62:5b:5d:93:67:1c:e2:c9:ff:89:6d:e8:
08:cf:18:76:fc:38:c4:77:22:72:03:d5:4c:59:e6:
ce:87:cc:a4:bb:61:f2:c3:d3:b1:87:8e:c7:23:5e:
ed:9f:85:88:36:43:03:82:b8:b4:3e:16:76:d6:d6:
97:29:8c:40:69:67:a7:e7:d2:07:63:f6:35:88:ea:
29:f1:5a:4a:04:33:cd:7e:e5:c7:4f:04:dd:02:dd:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4B:25:45:2C:79:ED:7F:B7:DB:58:31:96:71:67:4A:45:34:15:CA
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1a:9d:63:8d:a5:8f:18:fc:83:f5:6f:5b:f0:86:95:1d:b4:
ac:bb:f2:f0:22:6d:51:33:74:f4:a4:79:46:37:25:ea:32:45:
bf:fd:85:7b:c8:1c:fb:5d:81:1a:26:fb:f6:6e:f7:71:21:18:
0a:39:96:3e:03:b0:07:32:02:34:c6:71:f2:46:a3:a1:ee:3d:
e9:e4:d1:b7:b1:ee:9e:d6:fb:2e:e4:13:7d:c4:15:a3:01:22:
fb:a9:3b:d7:66:b0:61:73:1d:79:ca:50:cf:46:5f:d7:64:0f:
e5:31:e9:95:e2:67:6c:a2:2b:58:2f:b5:27:31:3e:f6:f2:74:
b7:36:d6:4d:e2:be:2e:1a:33:be:4f:98:88:3e:b0:c2:a2:54:
bc:74:1b:a0:d3:8e:04:1b:27:4a:4c:ba:e6:ce:7f:bc:f5:77:
a2:d2:bc:1d:12:1c:12:00:d8:eb:37:8a:3d:ee:05:9e:7b:3c:
9a:d8:5f:02:32:37:6a:13:51:df:46:e4:9a:ee:e3:37:bb:3a:
38:a8:27:8c:df:24:fc:97:ff:4c:20:18:65:9c:fc:fe:3c:90:
5c:a9:58:3c:b6:38:1e:05:91:8f:ee:7e:e1:06:6a:d7:b3:d3:
94:04:58:f8:dd:0f:1f:0a:0f:1a:f8:c0:c4:0b:b7:67:41:43:
f4:f9:77:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJCJxSXfomjwpcGdNoYXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGI1NmNkYTJlN2RkYjAyMzE2OGM1ZDc3ZWM5N2Q5YTAw
NmJhZWQwHhcNMjYwNzI0MDgwMDQ2WhcNMjYwNzI1MDgwMDQ2WjAzMTEwLwYDVQQD
EyhlODRiMjU0NTJjNzllZDdmYjdkYjU4MzE5NjcxNjc0YTQ1MzQxNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BYcggSmjtqYHD+yXXVTPnLhuSkP
HqZsuOGWPGRsChlS1e4PFn35aS/9aKW5sjaA/yOme9elvDbT/zbNgl2MWBsTA3mW
F+pflFjYAOzQ/aTOEj5aXSxnXCnlgbPjaS8V9dWMp9st4C3ph+1DAQvpNATAkR5h
fuQUPEYav7wkqPv/xnMU3ZEi8UTivPhj/orQTOOY69yEQ3vPpy8OE5r9whSBoVO2
OAFiW12TZxziyf+JbegIzxh2/DjEdyJyA9VMWebOh8yku2Hyw9Oxh47HI17tn4WI
NkMDgri0PhZ21taXKYxAaWen59IHY/Y1iOop8VpKBDPNfuXHTwTdAt1UhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhLJUUsee1/t9tYMZZxZ0pFNBXKMB8GA1UdIwQY
MBaAFMfbVs2i592wIxaMXXfsl9mgBrrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTIt
ODJlYjZmZDExZGQ1LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTItODJlYjZmZDExZGQ1
LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRqdY42l
jxj8g/VvW/CGlR20rLvy8CJtUTN09KR5Rjcl6jJFv/2Fe8gc+12BGib79m73cSEY
CjmWPgOwBzICNMZx8kajoe496eTRt7Huntb7LuQTfcQVowEi+6k712awYXMdecpQ
z0Zf12QP5THpleJnbKIrWC+1JzE+9vJ0tzbWTeK+Lhozvk+YiD6wwqJUvHQboNOO
BBsnSky65s5/vPV3otK8HRIcEgDY6zeKPe4Fnns8mthfAjI3ahNR30bkmu7jN7s6
OKgnjN8k/Jf/TCAYZZz8/jyQXKlYPLY4HgWRj+5+4QZq17PTlARY+N0PHwoPGvjA
xAu3Z0FD9Pl3yQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:47 2026 by rpki-client