Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: CSk57lOw3xc4lt9R0g4x6b8vWfPQ6x61spVNqsJAXLE=
Subject key identifier: 1A:7F:7A:FA:63:03:8E:31:7B:DF:EC:15:48:F0:95:2E:44:DA:82:85
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 01A0DFBC97CD32AE7CB18A540000807AE376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 1AB3
Signing time: Sat 26 Sep 2026 22:01:13 +0000
Manifest this update: Sat 26 Sep 2026 22:01:13 +0000
Manifest next update: Sun 27 Sep 2026 22:01:13 +0000
Files and hashes: 1: CZ1LSUniiHGNKwvHak6fSDmBxdc.roa (hash: Mosbvu2i3W9lRSEMHDa5n4kbGcSkA8mN4bx3wDReYfc=)
2: JhlPUIaiuE2YohDfzMjZESoyDBM.roa (hash: 7exMhOdMj9M/aNI0j3yYX3O6VN6kNC8RAmHhooROzJc=)
3: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: hfObOpuNCZguIJ7FNP5wAZQorwrkcVoAHACNCXmtzLg=)
4: i9Jjligy-EqoCiaFX_JoZgf9dZ4.roa (hash: XW8rc6v037pilJaZxg9f1SStjDu20ZBHUdc/h3ZDPqs=)
5: j2M12KSK7yupbk2QrIFnkpZ-KPM.roa (hash: yQynIUWOty/ocy5JzISGlHN5/AewbIRpARiMe1+4m+I=)
6: kSIrlNkYtxjevrUOWqXwGaCeFxQ.roa (hash: P1EFKe/doBtEMdSkydhZWieCIypvlDRY3TVJIkRt4p8=)
7: rgypQg1mq_y1PkBJTzbgugJszfU.roa (hash: 2UJiTYNC2SMcM+K20BC59uzzBZrc7ob9nA7WO1YUWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:97:cd:32:ae:7c:b1:8a:54:00:00:80:7a:e3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Sep 26 22:01:13 2026 GMT
Not After : Sep 27 22:01:13 2026 GMT
Subject: CN=1a7f7afa63038e317bdfec1548f0952e44da8285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:94:12:9b:78:58:94:56:8b:31:c4:a9:05:
20:aa:f2:41:3a:38:3a:f5:6f:e8:3b:c1:63:57:cf:
0c:79:e1:bc:c5:6b:e3:ee:91:d4:10:cd:9b:2b:3f:
74:2b:59:68:f2:ee:60:8b:5f:06:1e:45:fa:2c:79:
c8:46:47:87:cb:17:75:c2:85:4c:1f:be:25:33:b5:
6c:6f:f3:07:4a:e7:42:2e:f9:91:07:cb:17:ca:87:
27:55:ff:c5:b5:cf:d0:1e:de:4d:da:d7:97:b0:37:
49:8e:c0:0b:6d:66:47:ef:a6:95:f4:bc:6a:de:c8:
71:a7:1d:30:eb:a9:e0:61:75:8d:ff:02:3b:fe:84:
5f:e9:b4:e0:ad:a4:18:da:d8:d8:e3:62:26:08:21:
8c:65:2b:56:3d:f1:77:90:b3:93:c7:da:53:c9:8e:
3a:f0:d9:bc:a7:20:1c:c9:00:4d:4e:8c:8c:4a:a7:
8a:a1:d6:a6:57:57:6a:bb:ae:4e:10:e9:10:4c:c5:
7f:d5:d4:90:53:4c:e8:a3:8c:14:2a:de:6c:58:d0:
75:71:ab:8f:df:36:a5:18:6c:cb:67:f9:d8:8b:d2:
86:43:78:3d:47:73:07:5d:bc:4d:c2:7f:5b:17:6c:
67:b1:bc:b2:7f:37:43:9f:3e:a5:45:27:71:31:b6:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:7A:FA:63:03:8E:31:7B:DF:EC:15:48:F0:95:2E:44:DA:82:85
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:25:8e:05:11:0d:12:d1:64:b1:e7:ea:1c:d5:90:44:48:9b:
bd:d5:0c:eb:98:b8:c7:47:77:84:d5:21:69:a4:c7:e4:4d:03:
a9:87:0d:a6:2e:24:70:30:09:0a:43:c4:18:87:76:4d:c2:13:
31:c0:b2:47:33:58:34:15:6a:af:5b:95:a9:a6:03:49:ba:93:
24:2d:f9:ee:09:62:fd:f5:c0:a1:cd:63:b3:8a:fd:8b:be:9e:
a8:f6:d6:1f:d9:27:6b:b0:d3:ba:21:5f:44:f8:08:e8:49:70:
6d:cc:39:e9:13:a0:ed:b0:b9:59:c5:81:03:c4:2a:2c:86:d7:
98:7d:3d:dc:79:a4:6c:07:cb:aa:a8:57:7a:f5:17:d7:04:d3:
77:65:7a:0e:ed:c0:66:0a:f3:f7:78:8b:e7:3d:b9:c3:22:08:
d4:e3:bd:21:62:e5:ec:a4:b0:a4:18:ea:33:39:23:ad:bf:02:
9e:a5:7e:0a:82:20:9a:04:a4:15:58:77:b6:90:21:3a:85:a1:
ab:ae:b8:dc:2c:54:02:bc:a6:19:93:be:7b:fb:71:e1:20:bb:
9f:65:4b:cc:44:10:bb:b3:a4:3c:82:06:37:f3:9a:a5:cf:ce:
09:40:ad:ec:98:c8:93:42:5b:fd:fa:1d:c0:6c:2e:bf:11:d6:
f0:59:11:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvJfNMq58sYpUAACAeuN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm
OTM2OTUwHhcNMjYwOTI2MjIwMTEzWhcNMjYwOTI3MjIwMTEzWjAzMTEwLwYDVQQD
EygxYTdmN2FmYTYzMDM4ZTMxN2JkZmVjMTU0OGYwOTUyZTQ0ZGE4Mjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlqUEpt4WJRWizHEqQUgqvJBOjg6
9W/oO8FjV88MeeG8xWvj7pHUEM2bKz90K1lo8u5gi18GHkX6LHnIRkeHyxd1woVM
H74lM7Vsb/MHSudCLvmRB8sXyocnVf/Ftc/QHt5N2teXsDdJjsALbWZH76aV9Lxq
3shxpx0w66ngYXWN/wI7/oRf6bTgraQY2tjY42ImCCGMZStWPfF3kLOTx9pTyY46
8Nm8pyAcyQBNToyMSqeKodamV1dqu65OEOkQTMV/1dSQU0zoo4wUKt5sWNB1cauP
3zalGGzLZ/nYi9KGQ3g9R3MHXbxNwn9bF2xnsbyyfzdDnz6lRSdxMbYEOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp/evpjA44xe9/sFUjwlS5E2oKFMB8GA1UdIwQY
MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt
NjBjZjlhYjFiMTNlLzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl
LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCWOBREN
EtFksefqHNWQREibvdUM65i4x0d3hNUhaaTH5E0DqYcNpi4kcDAJCkPEGId2TcIT
McCyRzNYNBVqr1uVqaYDSbqTJC357gli/fXAoc1js4r9i76eqPbWH9kna7DTuiFf
RPgI6Elwbcw56ROg7bC5WcWBA8QqLIbXmH093HmkbAfLqqhXevUX1wTTd2V6Du3A
Zgrz93iL5z25wyII1OO9IWLl7KSwpBjqMzkjrb8CnqV+CoIgmgSkFVh3tpAhOoWh
q6643CxUArymGZO+e/tx4SC7n2VLzEQQu7OkPIIGN/Oapc/OCUCt7JjIk0Jb/fod
wGwuvxHW8FkROQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:05 2026 by rpki-client