Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: 8F1xu+aI1lKVd/YRoYQsS8w9ZX2+vFglPjQUC0wE/vs=
Subject key identifier: 72:92:FF:B5:B4:AB:BA:64:85:D0:D2:E4:90:F8:F4:FC:09:A2:CE:16
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 01A0D614F3EA85DB295F1A668676F07E9306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 0A8B
Signing time: Fri 25 Sep 2026 01:01:32 +0000
Manifest this update: Fri 25 Sep 2026 01:01:32 +0000
Manifest next update: Sat 26 Sep 2026 01:01:32 +0000
Files and hashes: 1: _E48T5Kk_YeYZLQhVAgd8hC7YsU.roa (hash: k0dJ8PeVcNyuxj67fWBRQ1gHRoWtlCyhQvB826alDbQ=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: //FQdG2rR0+JGWoYmpZKAi/1JzaBfOCDlIDNsMf2q6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:f3:ea:85:db:29:5f:1a:66:86:76:f0:7e:93:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Sep 25 01:01:32 2026 GMT
Not After : Sep 26 01:01:32 2026 GMT
Subject: CN=7292ffb5b4abba6485d0d2e490f8f4fc09a2ce16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:2d:7d:19:bc:42:82:9f:3a:9e:19:5d:a6:
32:6e:03:82:df:c9:50:72:c5:7f:cb:b5:cc:d4:20:
16:41:63:16:4b:3d:07:4a:c8:c9:57:57:ee:5d:0a:
8c:3c:f4:aa:21:7a:42:a9:e0:7b:c6:83:5f:5e:7f:
ad:47:0c:b4:5a:a2:0a:53:f1:d5:d1:e7:c2:e6:a8:
57:54:20:f3:9c:3a:15:5f:80:60:ac:dc:cb:68:4f:
7c:57:40:73:f0:f6:7a:fe:f5:64:a8:93:95:0b:ad:
7f:4b:fa:94:ba:89:72:25:f4:d7:96:ff:6a:e3:49:
21:2f:b4:8a:ea:e3:06:77:c1:c1:22:28:56:0d:ef:
b9:cd:46:9a:f1:53:f2:bd:7b:c0:e8:0d:98:fa:0c:
e0:fb:a5:8c:cb:0e:4d:c3:bd:ec:bf:27:f5:b0:e9:
95:2d:98:aa:bd:47:88:b2:08:3e:2a:33:9b:63:a3:
39:2b:3e:38:db:ca:a7:0e:8d:ee:16:ad:19:56:58:
57:77:b3:32:d9:f5:0d:02:1b:08:7e:cf:cb:6f:b1:
aa:e8:e7:58:f0:8d:c1:b2:f6:db:f6:97:0d:e4:4c:
ad:de:0e:9f:69:63:b9:b2:0b:a9:82:8c:57:12:a7:
52:81:12:ed:11:ae:37:5c:40:c4:1f:1b:08:04:f3:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:FF:B5:B4:AB:BA:64:85:D0:D2:E4:90:F8:F4:FC:09:A2:CE:16
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:ba:09:d6:a0:88:ba:1e:b5:fa:a1:48:a7:80:61:d4:3c:
82:9a:db:fd:2e:df:4b:77:76:61:52:77:db:c4:0d:a2:56:70:
00:4d:1e:d0:12:5f:53:c5:c1:1b:ad:ca:80:ba:a1:b0:fb:99:
0d:8f:51:2c:22:5e:bc:bd:54:f3:29:e4:d0:78:fc:71:fa:ef:
68:03:51:b9:83:35:83:da:c3:52:3c:92:42:d2:c4:49:31:73:
82:0f:ba:03:77:57:12:3c:78:11:61:37:60:44:84:4f:5f:cf:
22:df:0d:3b:90:66:c0:1c:77:3c:41:fe:87:c1:4f:19:d1:47:
61:ab:7a:34:d6:b3:d4:85:cf:44:64:88:e8:38:31:32:a9:6b:
34:f7:22:98:f0:e8:36:c1:ce:66:2d:d4:e4:0d:c3:7f:61:62:
88:7c:53:20:06:93:aa:5e:8e:51:cf:f3:2c:d3:f2:50:a4:af:
15:c8:81:1e:e5:ed:c0:b3:ba:81:51:f1:57:70:0b:e8:a4:1b:
6d:ee:a7:60:96:1c:ad:95:4d:b2:f3:59:9b:45:8e:ac:6a:61:
7f:d2:3c:2e:1f:d2:f2:31:4a:f9:60:57:2b:6b:93:5b:e2:92:
fa:fc:2a:ae:62:e3:39:d4:c3:47:5b:c7:e9:62:15:66:e2:5d:
e0:93:b4:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFPPqhdspXxpmhnbwfpMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxN2MzM2M3NTk2MTMxOGQ4ZWUzY2IxMzQ2NGE5MGQwMGFi
OGJkMmQwHhcNMjYwOTI1MDEwMTMyWhcNMjYwOTI2MDEwMTMyWjAzMTEwLwYDVQQD
Eyg3MjkyZmZiNWI0YWJiYTY0ODVkMGQyZTQ5MGY4ZjRmYzA5YTJjZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJEtfRm8QoKfOp4ZXaYybgOC38lQ
csV/y7XM1CAWQWMWSz0HSsjJV1fuXQqMPPSqIXpCqeB7xoNfXn+tRwy0WqIKU/HV
0efC5qhXVCDznDoVX4BgrNzLaE98V0Bz8PZ6/vVkqJOVC61/S/qUuolyJfTXlv9q
40khL7SK6uMGd8HBIihWDe+5zUaa8VPyvXvA6A2Y+gzg+6WMyw5Nw73svyf1sOmV
LZiqvUeIsgg+KjObY6M5Kz4428qnDo3uFq0ZVlhXd7My2fUNAhsIfs/Lb7Gq6OdY
8I3Bsvbb9pcN5Eyt3g6faWO5sgupgoxXEqdSgRLtEa43XEDEHxsIBPPHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKS/7W0q7pkhdDS5JD49PwJos4WMB8GA1UdIwQY
MBaAFJF8M8dZYTGNjuPLE0ZKkNAKuL0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAt
YzM3NjFhNzVkMDQ3LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hYzI3M2EtOWM4Yi00ZWY3LWE0MDAtYzM3NjFhNzVkMDQ3
LzEva1h3engxbGhNWTJPNDhzVFJrcVEwQXE0dlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsC6Cdag
iLoetfqhSKeAYdQ8gprb/S7fS3d2YVJ328QNolZwAE0e0BJfU8XBG63KgLqhsPuZ
DY9RLCJevL1U8ynk0Hj8cfrvaANRuYM1g9rDUjySQtLESTFzgg+6A3dXEjx4EWE3
YESET1/PIt8NO5BmwBx3PEH+h8FPGdFHYat6NNaz1IXPRGSI6DgxMqlrNPcimPDo
NsHOZi3U5A3Df2FiiHxTIAaTql6OUc/zLNPyUKSvFciBHuXtwLO6gVHxV3AL6KQb
be6nYJYcrZVNsvNZm0WOrGphf9I8Lh/S8jFK+WBXK2uTW+KS+vwqrmLjOdTDR1vH
6WIVZuJd4JO0AQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:40:46 2026 by rpki-client