Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
File: xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft (raw, json)
Hash identifier: Wik0NaRj73OeI7em3Nek+NraarkU2YnXan0Vislkob8=
Subject key identifier: CF:88:DC:B0:9C:DB:16:83:F9:A8:4D:69:46:CA:E0:0A:D9:A2:43:D5
Authority key identifier: C7:35:A6:81:5F:60:0E:A2:49:B1:DA:0A:6F:43:1E:FA:E8:1D:66:B0
Certificate issuer: /CN=c735a6815f600ea249b1da0a6f431efae81d66b0
Certificate serial: 01A0D45D46F696D035FF8DE3A9DBFC7D582C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
Manifest number: 87
Signing time: Thu 24 Sep 2026 17:01:17 +0000
Manifest this update: Thu 24 Sep 2026 17:01:17 +0000
Manifest next update: Fri 25 Sep 2026 17:01:17 +0000
Files and hashes: 1: mJ5RCAjBaYyADaNeklOPoY_zZrc.asa (hash: jcbnQ3QTEujNY2UmLxDviKLr49cB9i4XezfDbSMWaWs=)
2: xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl (hash: qZFv7Dop4xb12smj5ykDwlScAgaNl628gi/5sPKyQeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:46:f6:96:d0:35:ff:8d:e3:a9:db:fc:7d:58:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c735a6815f600ea249b1da0a6f431efae81d66b0
Validity
Not Before: Sep 24 17:01:17 2026 GMT
Not After : Sep 25 17:01:17 2026 GMT
Subject: CN=cf88dcb09cdb1683f9a84d6946cae00ad9a243d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:b1:1b:1a:62:80:1f:4e:83:e7:dc:a8:ee:
b7:cf:34:79:0e:ea:4e:b5:90:9e:33:c3:0f:e0:bd:
36:73:5c:10:9d:a9:f8:c5:d6:11:d4:0d:61:2c:1f:
dc:95:e3:e7:1f:33:10:e9:b9:80:44:9c:bd:e5:d7:
2d:7d:88:7c:7a:28:b6:f6:d3:ec:bd:27:39:90:76:
dc:7f:d7:ca:e9:17:04:15:a5:7c:97:10:e2:3d:40:
7b:de:a1:6e:db:50:b9:e7:41:17:8e:ea:e5:55:3c:
2d:9f:b7:2c:d7:5d:26:3a:74:8d:45:d8:d7:98:72:
e0:2f:16:85:5e:22:56:9f:93:f6:99:2a:71:c6:bb:
38:b7:69:77:fd:06:dc:77:82:a7:0f:0d:5a:58:2e:
c9:24:d9:db:8b:71:0d:e5:15:5a:98:c7:9e:f1:3f:
e2:ed:9e:be:ea:57:b6:40:ee:90:fe:d2:87:f6:ce:
5e:10:22:40:1a:41:91:eb:6c:99:e9:8e:ad:ea:74:
17:6e:c8:b8:0a:f1:6e:ec:e7:98:81:19:25:42:69:
7f:57:ef:57:64:00:04:21:f3:0d:c0:01:6f:dc:ed:
5b:ca:1f:ca:38:b0:9a:c4:19:38:37:05:17:89:0b:
31:2d:f1:40:8b:3a:91:88:65:41:b9:fe:f9:26:a3:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:DC:B0:9C:DB:16:83:F9:A8:4D:69:46:CA:E0:0A:D9:A2:43:D5
X509v3 Authority Key Identifier:
keyid:C7:35:A6:81:5F:60:0E:A2:49:B1:DA:0A:6F:43:1E:FA:E8:1D:66:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:83:eb:6a:29:13:fb:16:41:f9:43:b4:9c:96:26:93:69:e6:
4d:f3:ce:04:46:6a:f5:44:3e:63:ff:6e:d8:76:27:76:26:17:
a2:ac:79:c1:8d:22:b0:9c:b1:4f:03:ed:7c:a1:2a:27:a4:ac:
98:a7:3d:b6:f6:11:3a:21:64:ac:bd:0f:17:4a:c1:81:fb:31:
77:5e:e2:d6:15:f0:86:fe:00:a8:55:a5:31:66:e3:e1:d8:44:
42:aa:3f:07:64:65:03:96:bc:e1:a5:69:4d:cc:05:6b:fa:3b:
ec:a7:fa:1b:0d:94:57:c3:4e:29:79:93:07:0a:86:22:4c:62:
46:44:1b:96:d7:59:c0:31:25:d8:01:35:b1:a6:18:53:06:c5:
09:41:c6:8d:c4:9d:ec:74:ee:62:f0:62:66:61:86:31:6f:f3:
c9:d6:e2:25:f3:2c:41:77:67:a1:36:0d:3a:ae:b2:46:d0:bb:
48:a8:84:7c:47:fb:d8:31:dc:5b:37:8b:c6:d9:7b:37:2c:22:
b6:15:73:09:68:19:f7:d0:a8:07:5c:6c:96:2e:61:07:e7:bb:
a5:24:41:2b:c1:47:21:e0:6c:74:71:1a:81:21:44:44:6b:a5:
85:14:51:15:8d:96:84:1d:e2:07:41:da:f7:21:24:d6:2c:ea:
1d:d2:73:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXUb2ltA1/43jqdv8fVgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MzVhNjgxNWY2MDBlYTI0OWIxZGEwYTZmNDMxZWZhZTgx
ZDY2YjAwHhcNMjYwOTI0MTcwMTE3WhcNMjYwOTI1MTcwMTE3WjAzMTEwLwYDVQQD
EyhjZjg4ZGNiMDljZGIxNjgzZjlhODRkNjk0NmNhZTAwYWQ5YTI0M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZixGxpigB9Og+fcqO63zzR5DupO
tZCeM8MP4L02c1wQnan4xdYR1A1hLB/clePnHzMQ6bmARJy95dctfYh8eii29tPs
vSc5kHbcf9fK6RcEFaV8lxDiPUB73qFu21C550EXjurlVTwtn7cs110mOnSNRdjX
mHLgLxaFXiJWn5P2mSpxxrs4t2l3/Qbcd4KnDw1aWC7JJNnbi3EN5RVamMee8T/i
7Z6+6le2QO6Q/tKH9s5eECJAGkGR62yZ6Y6t6nQXbsi4CvFu7OeYgRklQml/V+9X
ZAAEIfMNwAFv3O1byh/KOLCaxBk4NwUXiQsxLfFAizqRiGVBuf75JqNRaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+I3LCc2xaD+ahNaUbK4ArZokPVMB8GA1UdIwQY
MBaAFMc1poFfYA6iSbHaCm9DHvroHWawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHpXbWdWOWdEcUpKc2RvS2IwTWUtdWdkWnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZDg1NjktYWMzMi00ZTAyLTkzNzUt
NDBkODIzYzljMGM0LzEveHpXbWdWOWdEcUpKc2RvS2IwTWUtdWdkWnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZDg1NjktYWMzMi00ZTAyLTkzNzUtNDBkODIzYzljMGM0
LzEveHpXbWdWOWdEcUpKc2RvS2IwTWUtdWdkWnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYPraikT
+xZB+UO0nJYmk2nmTfPOBEZq9UQ+Y/9u2HYndiYXoqx5wY0isJyxTwPtfKEqJ6Ss
mKc9tvYROiFkrL0PF0rBgfsxd17i1hXwhv4AqFWlMWbj4dhEQqo/B2RlA5a84aVp
TcwFa/o77Kf6Gw2UV8NOKXmTBwqGIkxiRkQbltdZwDEl2AE1saYYUwbFCUHGjcSd
7HTuYvBiZmGGMW/zydbiJfMsQXdnoTYNOq6yRtC7SKiEfEf72DHcWzeLxtl7Nywi
thVzCWgZ99CoB1xsli5hB+e7pSRBK8FHIeBsdHEagSFERGulhRRRFY2WhB3iB0Ha
9yEk1izqHdJzSw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:47:25 2026 by rpki-client