Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: pf+T9K9VVdugspgl5wyDw7ql6MyWDcITVHqebUbGfTg=
Subject key identifier: 30:14:DE:C8:AB:6B:3A:C9:FA:21:FF:2D:50:D1:F3:AE:EB:30:D0:B0
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 01A1DFBA6AF72665CC4765C5433FFC0BC661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 15:01:38 +0000
Manifest this update: Sun 15 Nov 2026 15:01:38 +0000
Manifest next update: Mon 16 Nov 2026 15:01:38 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: kbh+IsbMMGpk5JrPOSXle9EQflzD5yUDWanDyzf/mrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:6a:f7:26:65:cc:47:65:c5:43:3f:fc:0b:c6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Nov 15 15:01:38 2026 GMT
Not After : Nov 16 15:01:38 2026 GMT
Subject: CN=3014dec8ab6b3ac9fa21ff2d50d1f3aeeb30d0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:e8:60:12:57:a0:30:b9:6e:60:f7:6c:dd:
ed:90:7d:50:1f:01:3b:41:6d:7f:47:55:1f:74:c6:
c9:39:34:f3:1d:a6:8b:8e:1e:e3:3e:59:1a:5f:c9:
dd:dc:e5:9f:c5:e8:80:58:cb:9a:d2:b0:af:39:f6:
ae:cb:8d:85:d2:2e:e0:ce:05:f6:ca:de:a3:03:0d:
45:f8:41:fe:ec:88:38:cf:b9:08:58:de:0a:19:4e:
31:f7:a4:c3:fb:f6:4c:31:85:bd:0e:a0:90:b3:55:
52:52:a3:c6:c5:62:2b:b6:e5:49:52:5f:ce:68:7c:
44:ab:76:f1:a8:2b:67:16:c9:81:01:f2:f9:d2:dc:
d1:5c:7c:db:53:46:c9:33:b0:7b:37:15:6c:80:53:
bb:31:34:84:d6:f1:7a:ae:6f:9b:04:f4:15:fb:40:
ef:67:f9:0c:fc:3f:5d:e3:4d:c9:9e:fc:0f:97:b1:
62:bb:3d:46:ef:d6:02:ed:e4:8b:1a:10:c2:7e:0b:
5d:c8:8b:46:0c:21:1d:f5:77:03:0c:01:11:b3:7f:
e0:71:35:01:7f:c8:b2:4b:7e:e5:5d:c5:ce:82:78:
00:fc:21:b6:40:d8:b0:88:c8:d0:42:61:61:ba:d3:
58:79:c5:02:92:3c:7d:f6:1d:e0:55:0f:99:10:ac:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:14:DE:C8:AB:6B:3A:C9:FA:21:FF:2D:50:D1:F3:AE:EB:30:D0:B0
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4d:c9:2e:e5:c6:55:9a:59:d9:b2:1b:34:b5:0d:58:dd:1b:
00:9f:16:e2:a4:c5:99:27:59:d7:e3:c4:0a:60:54:ef:23:a4:
0a:e6:e1:5c:b5:63:ad:a2:57:de:bc:31:56:c5:ab:0c:84:ba:
d6:0f:07:ec:54:32:a9:f6:60:3c:7e:09:d6:18:52:2e:8c:d9:
7c:43:18:29:2a:c6:73:93:c8:17:1f:b2:02:16:66:65:2a:91:
99:ef:13:fa:e0:d1:2e:6e:80:e5:eb:89:ce:55:f3:f3:f5:9a:
38:16:a4:ad:5f:43:ba:5b:93:66:25:21:33:54:47:e6:78:27:
46:0d:b8:c7:94:fe:4a:3a:62:20:58:1d:de:bd:89:83:8b:7f:
da:de:8b:18:81:b4:1b:18:44:d0:f2:2f:86:23:77:64:eb:d3:
5f:ce:16:60:50:40:a8:ad:b0:68:f5:eb:29:e0:ff:bd:5b:cf:
56:01:3e:c4:8a:2e:ff:8c:71:ce:f8:7f:c5:71:71:fe:fc:65:
3e:76:83:b3:1d:92:0d:85:2f:54:87:ea:65:14:fa:3b:5d:98:
11:df:f8:df:e4:09:bd:fe:ee:00:65:02:9a:f9:c8:ce:d9:3a:
d9:19:69:90:c6:09:d9:33:e4:e9:d9:03:ad:24:75:cb:60:ce:
bc:17:a3:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfumr3JmXMR2XFQz/8C8ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjYxMTE1MTUwMTM4WhcNMjYxMTE2MTUwMTM4WjAzMTEwLwYDVQQD
EygzMDE0ZGVjOGFiNmIzYWM5ZmEyMWZmMmQ1MGQxZjNhZWViMzBkMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bboYBJXoDC5bmD3bN3tkH1QHwE7
QW1/R1UfdMbJOTTzHaaLjh7jPlkaX8nd3OWfxeiAWMua0rCvOfauy42F0i7gzgX2
yt6jAw1F+EH+7Ig4z7kIWN4KGU4x96TD+/ZMMYW9DqCQs1VSUqPGxWIrtuVJUl/O
aHxEq3bxqCtnFsmBAfL50tzRXHzbU0bJM7B7NxVsgFO7MTSE1vF6rm+bBPQV+0Dv
Z/kM/D9d403JnvwPl7Fiuz1G79YC7eSLGhDCfgtdyItGDCEd9XcDDAERs3/gcTUB
f8iyS37lXcXOgngA/CG2QNiwiMjQQmFhutNYecUCkjx99h3gVQ+ZEKzm1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAU3sirazrJ+iH/LVDR867rMNCwMB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk03JLuXG
VZpZ2bIbNLUNWN0bAJ8W4qTFmSdZ1+PECmBU7yOkCubhXLVjraJX3rwxVsWrDIS6
1g8H7FQyqfZgPH4J1hhSLozZfEMYKSrGc5PIFx+yAhZmZSqRme8T+uDRLm6A5euJ
zlXz8/WaOBakrV9DuluTZiUhM1RH5ngnRg24x5T+SjpiIFgd3r2Jg4t/2t6LGIG0
GxhE0PIvhiN3ZOvTX84WYFBAqK2waPXrKeD/vVvPVgE+xIou/4xxzvh/xXFx/vxl
PnaDsx2SDYUvVIfqZRT6O12YEd/43+QJvf7uAGUCmvnIztk62RlpkMYJ2TPk6dkD
rSR1y2DOvBej1Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:25:48 2026 by rpki-client