Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: 8eluqlsheXvx1zMN8QFTV/UQGn24HOQRutTjokISqI0=
Subject key identifier: CC:AC:AD:2A:AB:D2:1E:1D:29:A1:F4:CD:90:C9:60:0E:96:24:28:99
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 01A0DE72F454F38A34F68AE37876BD53CEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 16:01:10 +0000
Manifest this update: Sat 26 Sep 2026 16:01:10 +0000
Manifest next update: Sun 27 Sep 2026 16:01:10 +0000
Files and hashes: 1: F7bFWfa8raW6YPzNQdPQYhccFpw.roa (hash: XVhjnbPUE5xdXqpegewxKMJvfafoKnZU90EE9D+PlOg=)
2: JpOEIniBJHts2084NOqMHq98Ajc.roa (hash: bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: Ll8H7Qsk5Erd/OoF6ougz+xRvtk1xKdo95bmPAQsdBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:72:f4:54:f3:8a:34:f6:8a:e3:78:76:bd:53:ce:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Sep 26 16:01:10 2026 GMT
Not After : Sep 27 16:01:10 2026 GMT
Subject: CN=ccacad2aabd21e1d29a1f4cd90c9600e96242899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:e2:99:90:08:96:71:36:39:5b:33:74:55:
e3:70:76:26:72:7f:1e:8f:03:cd:a3:cb:5b:f7:4f:
93:12:40:51:e0:5a:f6:1d:b3:60:43:00:28:8e:71:
e6:d0:36:9b:15:17:57:18:63:12:7a:b8:9f:00:54:
a9:23:c3:cc:03:25:c9:64:ba:2b:38:93:9e:62:c7:
b6:ed:f0:10:f8:b5:64:35:b8:4f:a8:f9:66:d5:d2:
43:8e:ae:b8:f0:4d:dd:87:bd:fa:0a:bc:1a:74:bb:
78:d4:1a:d9:0b:84:24:bb:51:2a:b2:4a:cc:0d:0a:
18:ea:19:1e:a7:2d:ce:70:54:25:9f:0b:59:16:dc:
b9:06:a2:9a:c8:7b:83:bf:ec:7e:7f:cd:a6:13:36:
fb:5c:fa:33:c6:6d:80:f8:a1:ff:f0:52:0f:10:7e:
ce:b9:5c:64:1c:23:bf:c2:95:a9:08:78:59:aa:a8:
84:e1:96:a0:81:11:97:5d:60:0e:8f:1f:9d:81:b7:
ee:c2:2b:97:c6:5b:d6:04:dc:80:c2:7f:71:96:a0:
f2:97:c8:1a:3b:46:ff:3e:27:d4:53:10:84:16:89:
21:ef:08:12:46:01:7b:d5:13:8c:a2:62:8c:ba:c3:
ae:ab:62:16:0b:a5:71:bd:88:15:34:ee:da:08:fe:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AC:AD:2A:AB:D2:1E:1D:29:A1:F4:CD:90:C9:60:0E:96:24:28:99
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:17:6a:51:07:c3:ac:5a:53:56:11:62:ca:0a:0f:34:65:24:
74:21:f4:4a:4d:d1:1b:5f:fb:4a:99:e3:8f:a0:32:28:c2:f6:
45:d2:49:58:57:d9:54:4a:9c:61:3e:78:83:a5:02:84:79:fa:
99:2a:1e:08:7a:94:ec:e4:39:e7:65:d5:a8:97:d7:96:95:c1:
38:5d:07:8d:08:81:c9:ef:a5:10:8a:55:44:79:f2:27:11:9b:
de:ae:fd:78:6e:7a:79:2a:b1:1b:af:24:38:22:a8:a8:68:02:
ab:6b:68:2b:4c:d4:5b:01:4a:14:a1:b7:98:23:90:c7:66:5a:
1d:8c:91:b2:b5:8e:d2:87:77:46:cd:72:be:93:52:e9:bd:9e:
ba:52:d3:24:f0:1a:09:c4:c8:91:8b:89:2c:a0:a1:5e:ad:4d:
eb:e2:8a:53:2f:8a:a8:f3:c4:96:2d:43:cb:c3:c6:f6:4f:63:
17:0f:57:24:6a:b6:a7:04:a2:f5:cd:51:8b:60:c3:cf:a0:fd:
29:b8:9f:3b:16:8f:d2:1c:48:09:46:ef:1a:17:f6:74:51:54:
67:b2:4d:bd:c8:50:e3:b6:1a:5d:64:0f:fc:ae:2e:ce:46:06:
b5:cd:3a:fd:30:a5:6d:09:a8:a0:f3:ad:40:77:2b:d2:d0:24:
09:d4:dd:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDecvRU84o09orjeHa9U86wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjIxZTQwMjk5OGFiYzFmMDM1NDc1ZTE1OGI3NGU4Yzc2
OTIwYzAwHhcNMjYwOTI2MTYwMTEwWhcNMjYwOTI3MTYwMTEwWjAzMTEwLwYDVQQD
EyhjY2FjYWQyYWFiZDIxZTFkMjlhMWY0Y2Q5MGM5NjAwZTk2MjQyODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW7imZAIlnE2OVszdFXjcHYmcn8e
jwPNo8tb90+TEkBR4Fr2HbNgQwAojnHm0DabFRdXGGMSerifAFSpI8PMAyXJZLor
OJOeYse27fAQ+LVkNbhPqPlm1dJDjq648E3dh736CrwadLt41BrZC4Qku1EqskrM
DQoY6hkepy3OcFQlnwtZFty5BqKayHuDv+x+f82mEzb7XPozxm2A+KH/8FIPEH7O
uVxkHCO/wpWpCHhZqqiE4ZaggRGXXWAOjx+dgbfuwiuXxlvWBNyAwn9xlqDyl8ga
O0b/PifUUxCEFokh7wgSRgF71ROMomKMusOuq2IWC6VxvYgVNO7aCP4egwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMysrSqr0h4dKaH0zZDJYA6WJCiZMB8GA1UdIwQY
MBaAFMciHkApmKvB8DVHXhWLdOjHaSDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOWNhN2EtNDExYy00M2E4LTk1MmYt
Y2M1NDA2MDhjNDFkLzEveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lOWNhN2EtNDExYy00M2E4LTk1MmYtY2M1NDA2MDhjNDFk
LzEveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhdqUQfD
rFpTVhFiygoPNGUkdCH0Sk3RG1/7Spnjj6AyKML2RdJJWFfZVEqcYT54g6UChHn6
mSoeCHqU7OQ552XVqJfXlpXBOF0HjQiBye+lEIpVRHnyJxGb3q79eG56eSqxG68k
OCKoqGgCq2toK0zUWwFKFKG3mCOQx2ZaHYyRsrWO0od3Rs1yvpNS6b2eulLTJPAa
CcTIkYuJLKChXq1N6+KKUy+KqPPEli1Dy8PG9k9jFw9XJGq2pwSi9c1Ri2DDz6D9
KbifOxaP0hxICUbvGhf2dFFUZ7JNvchQ47YaXWQP/K4uzkYGtc06/TClbQmooPOt
QHcr0tAkCdTd1Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:54:20 2026 by rpki-client