Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier: eHwJbhWfv9vptRd7cB5d/SZK26LWZg8j9JZ0KTgQRY4=
Subject key identifier: 1C:92:1F:C1:F0:19:82:CD:66:E9:2E:66:58:EB:54:5A:49:8D:0D:85
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial: 01A0E889693C71FD84DA8A88EF8C6F706AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number: 0C46
Signing time: Mon 28 Sep 2026 15:01:54 +0000
Manifest this update: Mon 28 Sep 2026 15:01:54 +0000
Manifest next update: Tue 29 Sep 2026 15:01:54 +0000
Files and hashes: 1: Wd7kxNOQtW9wntahD6-s3hs_RN8.roa (hash: Yn5VDfyyadHVMUb0Gm6V0K9m9w04Ph9wP22TSsc2ons=)
2: Zd2PZJM2-BoHB9V0Vm2TLCeAKws.asa (hash: OpJX3qnH2PFs+bU0xU6kT7vgyoAOLVzFICTCuQQVC9g=)
3: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: gi+/ZfdmjqpbRbRyRqWVDPL33afgCwC/scrQIfL/qlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:69:3c:71:fd:84:da:8a:88:ef:8c:6f:70:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Validity
Not Before: Sep 28 15:01:54 2026 GMT
Not After : Sep 29 15:01:54 2026 GMT
Subject: CN=1c921fc1f01982cd66e92e6658eb545a498d0d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:21:79:08:c2:e1:cf:27:10:b1:80:d8:63:
c2:db:37:a3:c2:b1:64:48:56:55:59:dd:aa:7d:47:
e0:c8:81:ff:22:f3:4f:97:b3:83:ad:a4:aa:67:94:
01:a2:73:f1:7c:ee:d4:f6:d4:e7:36:e1:04:a5:38:
d0:29:05:6a:5d:ab:43:74:6c:64:9a:46:b0:e5:12:
71:a8:64:86:80:95:96:cc:dc:8d:ad:93:f3:a8:2e:
6e:78:9d:da:dc:10:e7:11:79:13:5c:67:4b:44:45:
fc:7d:06:d0:fd:e9:ce:cd:a3:9f:4a:63:0e:a8:07:
70:89:ba:38:e7:f0:90:85:a1:0e:07:1b:45:30:cb:
38:a6:6c:05:02:f0:f9:e9:8a:f6:03:d2:83:ae:14:
f7:2e:f5:2c:d0:68:54:28:98:70:ea:6c:dd:fa:11:
3a:57:b1:ef:aa:fb:b9:49:c2:6b:a0:f5:54:9e:8f:
ee:d8:a4:4c:a5:f5:63:22:8c:05:1f:cd:75:5d:6f:
44:fe:38:2a:2e:84:51:0e:89:52:ac:7a:88:61:7c:
05:1e:04:63:92:35:d6:06:7e:56:4e:bc:b7:5a:71:
81:28:08:00:57:a2:f0:2e:f1:16:52:d9:c5:6d:f3:
2a:0f:ea:57:d2:77:1b:07:13:3c:39:5f:0b:b8:5a:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:92:1F:C1:F0:19:82:CD:66:E9:2E:66:58:EB:54:5A:49:8D:0D:85
X509v3 Authority Key Identifier:
keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c1:ce:3a:47:4b:9e:d6:fa:e8:00:41:30:95:83:84:b7:93:
6e:d7:2e:ea:d4:f8:ed:5e:c8:d2:e3:a0:3a:51:51:92:2f:3a:
d3:d9:ab:cf:d7:4c:fc:74:eb:26:3f:24:a9:7a:46:87:06:65:
c6:74:d9:a6:f6:53:61:b7:d5:e8:7a:53:a0:53:45:ed:29:80:
cc:77:4a:a5:8e:e5:66:56:8c:be:12:1f:61:0d:30:69:14:70:
77:c9:a6:1a:81:a2:b0:4d:2e:34:aa:da:a7:db:ff:58:38:0f:
d0:67:23:43:14:24:15:5a:f9:55:d6:d8:d4:ac:f4:45:d7:c6:
45:32:b9:f2:f2:32:f9:4b:d9:5f:f9:37:fa:fd:a8:0a:b1:9f:
ad:bd:10:37:63:d3:77:af:06:07:a9:b3:16:5d:19:01:70:ab:
c3:8d:63:db:47:a7:ef:63:2f:cf:fe:87:54:b4:6c:73:92:22:
19:7a:13:fd:0e:04:8a:75:80:32:6d:f5:23:c7:f4:55:04:5a:
68:73:67:71:b4:54:3f:79:46:28:08:7b:2f:2d:26:d6:cb:80:
ee:83:7b:cc:78:e4:d0:4b:40:fa:5d:9b:f3:8d:c3:e2:af:29:
9f:68:e2:76:e0:bb:52:10:7a:12:4c:3a:03:d4:69:7e:a3:96:
64:b1:87:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoiWk8cf2E2oqI74xvcGqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDcxMzk3Y2Y1ZWMzOTlhYTBlZWM1YzMxNzNiMWYzMDQw
NzIzYTkwHhcNMjYwOTI4MTUwMTU0WhcNMjYwOTI5MTUwMTU0WjAzMTEwLwYDVQQD
EygxYzkyMWZjMWYwMTk4MmNkNjZlOTJlNjY1OGViNTQ1YTQ5OGQwZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7q8heQjC4c8nELGA2GPC2zejwrFk
SFZVWd2qfUfgyIH/IvNPl7ODraSqZ5QBonPxfO7U9tTnNuEEpTjQKQVqXatDdGxk
mkaw5RJxqGSGgJWWzNyNrZPzqC5ueJ3a3BDnEXkTXGdLREX8fQbQ/enOzaOfSmMO
qAdwibo45/CQhaEOBxtFMMs4pmwFAvD56Yr2A9KDrhT3LvUs0GhUKJhw6mzd+hE6
V7Hvqvu5ScJroPVUno/u2KRMpfVjIowFH811XW9E/jgqLoRRDolSrHqIYXwFHgRj
kjXWBn5WTry3WnGBKAgAV6LwLvEWUtnFbfMqD+pX0ncbBxM8OV8LuFpoFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBySH8HwGYLNZukuZljrVFpJjQ2FMB8GA1UdIwQY
MBaAFMVHE5fPXsOZqg7sXDFzsfMEByOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83NzdhNjAtNmRlMS00ZGZiLWI5NjUt
MjYyMjJmMDk1NWFlLzEveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS83NzdhNjAtNmRlMS00ZGZiLWI5NjUtMjYyMjJmMDk1NWFl
LzEveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsHOOkdL
ntb66ABBMJWDhLeTbtcu6tT47V7I0uOgOlFRki8609mrz9dM/HTrJj8kqXpGhwZl
xnTZpvZTYbfV6HpToFNF7SmAzHdKpY7lZlaMvhIfYQ0waRRwd8mmGoGisE0uNKra
p9v/WDgP0GcjQxQkFVr5VdbY1Kz0RdfGRTK58vIy+UvZX/k3+v2oCrGfrb0QN2PT
d68GB6mzFl0ZAXCrw41j20en72Mvz/6HVLRsc5IiGXoT/Q4EinWAMm31I8f0VQRa
aHNncbRUP3lGKAh7Ly0m1suA7oN7zHjk0EtA+l2b843D4q8pn2jiduC7UhB6Ekw6
A9RpfqOWZLGHpQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:18:45 2026 by rpki-client