Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: ITXEdOI7EF5cH+GpQBau3UxobGMNrtuUhcPVQLXKSmY=
Subject key identifier: D2:3B:75:12:D3:01:2E:4A:49:5D:CF:D4:D5:2A:AE:D4:93:BF:1F:2E
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 01A0D7278E4603EBD2BCC9462BDAE3451718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 10B3
Signing time: Fri 25 Sep 2026 06:01:28 +0000
Manifest this update: Fri 25 Sep 2026 06:01:28 +0000
Manifest next update: Sat 26 Sep 2026 06:01:28 +0000
Files and hashes: 1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: QaqerRBhzhMLOYL1QRbZhtsPeR7NCCrn532N7cGKxYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:8e:46:03:eb:d2:bc:c9:46:2b:da:e3:45:17:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Sep 25 06:01:28 2026 GMT
Not After : Sep 26 06:01:28 2026 GMT
Subject: CN=d23b7512d3012e4a495dcfd4d52aaed493bf1f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:40:57:8e:57:0c:7a:bb:48:0a:71:e3:0a:
1d:31:64:30:02:5d:d6:2b:d4:bb:9e:3b:75:9e:30:
97:f1:03:46:72:1e:34:d2:46:bc:e6:1d:17:e9:5b:
c9:20:2f:b9:9f:b7:4b:b0:15:fe:c2:d4:0f:6d:4d:
a8:d5:3d:7d:fd:48:6c:63:0e:0b:21:a2:a2:ef:75:
17:55:e7:fc:8c:63:bc:76:f2:6b:ea:b4:1b:65:7a:
9a:ef:68:65:3d:a6:d4:d9:21:18:ff:8e:16:db:7e:
e5:b6:d0:40:17:0f:c2:a6:00:1e:77:81:a5:46:a8:
24:ba:6d:6e:c8:97:90:17:d2:a8:46:0d:85:af:9b:
0b:40:cd:f7:b0:b0:b6:ab:9e:1b:ea:87:18:a3:dd:
45:bc:41:df:20:dc:25:c6:93:e1:a1:fd:b5:32:22:
ca:7f:90:61:f6:3e:cf:9e:2f:39:d5:e7:c0:50:b9:
35:13:25:2f:20:32:35:62:b3:a0:3d:57:d0:d2:f5:
99:cf:2f:62:1b:5a:b5:b9:0b:23:e0:46:aa:3c:15:
b2:ab:99:b1:cd:d2:99:83:b4:db:f3:be:52:1a:ad:
42:04:41:ee:5b:f6:d9:d3:d1:24:2d:d8:36:41:e1:
73:dc:d1:6d:cb:7a:8f:03:3e:63:98:bb:1d:1c:c6:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3B:75:12:D3:01:2E:4A:49:5D:CF:D4:D5:2A:AE:D4:93:BF:1F:2E
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8f:81:70:69:89:ad:e0:4c:80:b1:39:a2:ae:88:5e:ed:e7:
b9:ca:4e:ce:0b:81:b2:5e:26:cb:c8:f0:95:15:90:75:89:d4:
82:1d:5a:a6:88:ea:19:31:76:64:17:dd:4d:fc:9b:c2:89:0e:
1a:db:9a:d0:8b:42:c2:98:83:4b:75:c0:b6:63:ec:07:8c:e7:
55:42:9b:8a:e6:b9:08:fe:45:12:18:60:41:a3:fd:3e:b8:1b:
83:c5:75:66:e4:9f:e8:ed:b7:5d:34:03:33:6d:82:00:05:82:
d0:6a:50:8e:2e:7a:70:90:05:47:e6:c7:f0:d5:be:5c:20:ca:
a0:ac:4c:d0:b8:a4:42:50:89:de:47:09:32:c6:44:9c:07:3c:
de:48:8c:70:13:4c:73:9c:86:50:09:5c:04:d9:0a:20:56:84:
49:14:9b:00:e9:5c:a1:07:82:e4:7a:83:65:95:21:3f:b0:cd:
f7:cf:87:78:ca:5c:75:bd:fd:9c:b5:23:7b:96:6b:3d:72:c6:
cf:14:b9:0c:12:0b:89:23:35:90:da:1f:21:bc:d5:32:a2:38:
7e:9d:ad:ec:dd:10:53:fa:6f:76:e3:03:f7:f2:e0:9b:1b:b1:
cf:6d:56:19:2f:8b:86:0e:58:85:a7:7b:7e:12:21:30:b4:28:
87:ab:51:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXJ45GA+vSvMlGK9rjRRcYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkN2QxY2IxMTQ5NGViMzg5OGYxMGQzZDYzNWJlNzVmMTZi
MmRjNTEwHhcNMjYwOTI1MDYwMTI4WhcNMjYwOTI2MDYwMTI4WjAzMTEwLwYDVQQD
EyhkMjNiNzUxMmQzMDEyZTRhNDk1ZGNmZDRkNTJhYWVkNDkzYmYxZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwFAV45XDHq7SApx4wodMWQwAl3W
K9S7njt1njCX8QNGch400ka85h0X6VvJIC+5n7dLsBX+wtQPbU2o1T19/UhsYw4L
IaKi73UXVef8jGO8dvJr6rQbZXqa72hlPabU2SEY/44W237lttBAFw/CpgAed4Gl
Rqgkum1uyJeQF9KoRg2Fr5sLQM33sLC2q54b6ocYo91FvEHfINwlxpPhof21MiLK
f5Bh9j7Pni851efAULk1EyUvIDI1YrOgPVfQ0vWZzy9iG1q1uQsj4EaqPBWyq5mx
zdKZg7Tb875SGq1CBEHuW/bZ09EkLdg2QeFz3NFty3qPAz5jmLsdHMYfoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNI7dRLTAS5KSV3P1NUqrtSTvx8uMB8GA1UdIwQY
MBaAFP19HLEUlOs4mPENPWNb518WstxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUt
NzY1OWJmODZhYzRjLzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUtNzY1OWJmODZhYzRj
LzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI+BcGmJ
reBMgLE5oq6IXu3nucpOzguBsl4my8jwlRWQdYnUgh1apojqGTF2ZBfdTfybwokO
Gtua0ItCwpiDS3XAtmPsB4znVUKbiua5CP5FEhhgQaP9Prgbg8V1ZuSf6O23XTQD
M22CAAWC0GpQji56cJAFR+bH8NW+XCDKoKxM0LikQlCJ3kcJMsZEnAc83kiMcBNM
c5yGUAlcBNkKIFaESRSbAOlcoQeC5HqDZZUhP7DN98+HeMpcdb39nLUje5ZrPXLG
zxS5DBILiSM1kNofIbzVMqI4fp2t7N0QU/pvduMD9/Lgmxuxz21WGS+Lhg5Yhad7
fhIhMLQoh6tR8Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:02:02 2026 by rpki-client