Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: 4qD+xa9j9GQOKU3UL7yBXPCT5qnRqeOO2RTSZLpS6QQ=
Subject key identifier: 29:4A:AC:A9:A8:4E:05:56:AE:03:40:DC:39:EE:A8:95:11:CE:4E:5B
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 01A0CD1160B67377D7888460248411D4E398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 19FD
Signing time: Wed 23 Sep 2026 07:01:03 +0000
Manifest this update: Wed 23 Sep 2026 07:01:03 +0000
Manifest next update: Thu 24 Sep 2026 07:01:03 +0000
Files and hashes: 1: 8cS6Qj5MYE4B8boPnbZ2kcXbU-k.roa (hash: AKR29eJxFVsOMPaiI3uGdOD049mIqIl+nuPgud2mgtc=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: yual/M5fD/vrVaoOIIzgGlvDUcmrHU3t/8ConpWW67w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:60:b6:73:77:d7:88:84:60:24:84:11:d4:e3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Sep 23 07:01:03 2026 GMT
Not After : Sep 24 07:01:03 2026 GMT
Subject: CN=294aaca9a84e0556ae0340dc39eea89511ce4e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:0c:9e:8a:be:93:76:03:f5:f5:2a:59:cf:
89:21:2f:63:19:8b:bf:bf:cf:76:a2:09:af:e0:9f:
41:b9:39:f9:47:a4:2f:30:81:6f:92:7c:a3:87:8c:
ce:04:61:75:54:f5:97:e3:d4:8d:dc:5d:5b:3b:e6:
33:14:a9:bf:d2:80:18:94:36:27:55:13:10:4e:d0:
68:b5:b0:b1:8e:20:f9:a9:c9:2d:85:8e:5d:84:43:
6a:88:81:ac:2f:fc:b4:91:53:3e:3b:79:3f:4e:a7:
1d:6e:87:9a:e4:4a:6c:45:bb:9a:f6:2a:99:af:b1:
df:f8:9f:fe:6c:fc:7d:68:58:98:57:b9:bd:bf:86:
2b:8b:9d:34:73:51:6c:10:b8:ce:24:61:50:5b:81:
50:2d:80:7d:90:1a:96:72:84:8e:10:5b:c1:49:55:
bb:44:ba:28:0d:de:e0:97:3c:42:9a:57:99:9a:49:
8a:2d:3d:b6:cd:fa:ef:ed:09:35:df:14:bd:06:e1:
05:39:ff:f1:93:77:3e:5a:7a:1e:e0:00:5c:bd:34:
ad:46:9e:ef:54:6f:7c:bc:74:05:df:7d:83:6e:57:
f4:b7:9c:ac:a7:f6:19:d9:c0:50:fc:9d:84:74:87:
5c:5c:a8:33:a0:09:6a:6e:21:39:b3:58:ae:25:81:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:AC:A9:A8:4E:05:56:AE:03:40:DC:39:EE:A8:95:11:CE:4E:5B
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5f:7c:83:6e:3b:87:d9:c0:98:a1:4e:de:c8:5b:41:cd:a7:
fa:7f:2c:8e:9c:b5:28:07:05:de:53:46:af:23:0b:26:80:84:
b4:8b:d6:c0:cc:f9:2b:f5:48:65:bd:d4:d1:4d:f2:e4:4c:43:
aa:68:8e:44:1e:11:14:e1:f7:1b:d9:dc:98:8d:11:40:95:5a:
cd:68:69:39:0c:b8:c4:d4:64:29:1c:6c:de:72:d7:08:ed:e1:
6a:be:ae:1d:7e:61:e2:89:22:9a:62:f5:06:68:ea:34:fe:c5:
ea:f0:24:71:27:c0:18:de:1b:79:95:44:a8:bb:b7:38:f7:ac:
a7:e6:65:f4:25:08:c4:6a:64:2c:01:73:58:9c:16:58:03:44:
46:46:8e:43:f3:c8:7f:f6:e5:f2:a7:20:4d:aa:88:26:cb:5a:
10:b3:fd:c6:2f:b6:4c:58:bc:38:a8:b3:52:a9:00:84:5a:63:
21:fe:93:4f:c7:d2:15:71:80:ef:9f:62:88:fa:d7:99:2b:9d:
5c:e3:e1:51:52:2a:28:3a:28:0f:35:48:fa:52:d8:75:ca:0b:
91:8f:b2:99:5f:ee:bf:eb:eb:d7:51:85:62:37:76:45:8a:01:
5d:4f:58:19:28:b3:05:42:3d:7e:9e:55:b9:e5:af:0b:b6:04:
aa:27:84:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEWC2c3fXiIRgJIQR1OOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWM0MWRhZjAwOTJiNzAzYmMwNTliYTEzNTNmMDcxZWQx
MjE5OWIwHhcNMjYwOTIzMDcwMTAzWhcNMjYwOTI0MDcwMTAzWjAzMTEwLwYDVQQD
EygyOTRhYWNhOWE4NGUwNTU2YWUwMzQwZGMzOWVlYTg5NTExY2U0ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPcMnoq+k3YD9fUqWc+JIS9jGYu/
v892ogmv4J9BuTn5R6QvMIFvknyjh4zOBGF1VPWX49SN3F1bO+YzFKm/0oAYlDYn
VRMQTtBotbCxjiD5qckthY5dhENqiIGsL/y0kVM+O3k/Tqcdboea5EpsRbua9iqZ
r7Hf+J/+bPx9aFiYV7m9v4Yri500c1FsELjOJGFQW4FQLYB9kBqWcoSOEFvBSVW7
RLooDd7glzxCmleZmkmKLT22zfrv7Qk13xS9BuEFOf/xk3c+Wnoe4ABcvTStRp7v
VG98vHQF332Dblf0t5ysp/YZ2cBQ/J2EdIdcXKgzoAlqbiE5s1iuJYGXWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClKrKmoTgVWrgNA3DnuqJURzk5bMB8GA1UdIwQY
MBaAFMWcQdrwCStwO8BZuhNT8HHtEhmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQt
YzU0OTNmZTgyZTI2LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQtYzU0OTNmZTgyZTI2
LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY198g247
h9nAmKFO3shbQc2n+n8sjpy1KAcF3lNGryMLJoCEtIvWwMz5K/VIZb3U0U3y5ExD
qmiORB4RFOH3G9ncmI0RQJVazWhpOQy4xNRkKRxs3nLXCO3har6uHX5h4okimmL1
BmjqNP7F6vAkcSfAGN4beZVEqLu3OPesp+Zl9CUIxGpkLAFzWJwWWANERkaOQ/PI
f/bl8qcgTaqIJstaELP9xi+2TFi8OKizUqkAhFpjIf6TT8fSFXGA759iiPrXmSud
XOPhUVIqKDooDzVI+lLYdcoLkY+ymV/uv+vr11GFYjd2RYoBXU9YGSizBUI9fp5V
ueWvC7YEqieENw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:32:09 2026 by rpki-client