Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: 2IwptcRt6Zo5sHcmnlnM16GNmXpYhWFYtpmdVmoQmB0=
Subject key identifier: 7C:77:4E:8E:24:58:03:81:5F:EA:CA:AA:85:CE:C0:EB:06:C0:4E:89
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01A0D2A5B6AE7202FF658B4188B437C01B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 09:01:10 +0000
Manifest this update: Thu 24 Sep 2026 09:01:10 +0000
Manifest next update: Fri 25 Sep 2026 09:01:10 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: uL8/3bYiFMRlde60k2GhYdXLNq45+to8zPJqDM4iaYc=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:b6:ae:72:02:ff:65:8b:41:88:b4:37:c0:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Sep 24 09:01:10 2026 GMT
Not After : Sep 25 09:01:10 2026 GMT
Subject: CN=7c774e8e245803815feacaaa85cec0eb06c04e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:e1:1d:ad:3d:ee:dd:0e:cb:69:50:b0:2a:
50:a2:6b:7e:ac:03:ae:3e:5a:7e:11:ec:16:46:4b:
20:8b:21:0e:a3:d0:20:0a:c9:1e:d1:db:c0:ea:5e:
26:a3:2f:4d:e6:cf:c8:ca:4f:0d:56:0f:8a:45:e4:
30:1f:5e:4a:73:a9:6b:89:c9:e4:80:45:d1:58:96:
d3:9a:55:d3:f0:26:b1:8b:a9:b6:1f:65:95:db:97:
a7:b6:f0:12:e0:9d:6c:56:2c:c4:e8:80:89:22:3f:
83:dd:ab:83:b8:2b:fe:37:7b:f1:91:e5:97:a2:71:
f5:ec:4e:a0:1e:dc:60:ba:69:17:18:f4:30:58:2a:
3e:3d:ad:d3:02:27:1b:ea:bd:64:6c:a3:dd:36:b5:
ff:3c:e0:ee:da:ad:2e:7f:54:07:ca:c6:68:c9:53:
19:49:4b:06:98:10:7e:57:7f:86:28:e4:0b:2d:96:
e4:25:c6:39:8d:9d:0f:22:bd:a6:ca:80:3d:9f:e4:
14:79:c5:35:c2:6c:b9:8b:84:e8:d3:ed:9b:96:b8:
e0:72:af:5a:98:93:bb:43:5b:5c:01:b6:b3:57:d4:
8b:90:d8:b2:0b:0c:34:61:9a:1b:dc:de:f2:08:62:
d5:df:15:86:40:75:2c:e0:5d:5c:e7:24:1f:ca:be:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:77:4E:8E:24:58:03:81:5F:EA:CA:AA:85:CE:C0:EB:06:C0:4E:89
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:18:73:10:e0:db:ac:5b:8b:80:c5:6d:89:41:39:7e:15:63:
de:cf:36:dd:04:a8:cf:e7:c7:52:26:37:36:26:d7:dc:53:9b:
6b:a1:4c:63:c2:b2:71:12:12:6d:8f:dd:8e:c5:f7:6b:04:e7:
73:52:3c:06:4d:7c:75:3e:92:f0:66:59:c6:ab:e4:11:c2:5f:
00:28:66:7c:a0:aa:87:f6:94:a3:ca:db:e3:a2:f8:74:55:23:
fe:d7:15:5b:ed:ae:a0:6a:09:69:0a:7d:71:58:6a:3d:e4:62:
16:11:e8:71:13:19:5d:b8:31:61:57:64:ca:cc:c1:36:ce:1b:
c3:92:fe:84:bb:25:5d:35:32:1a:ea:a6:44:cf:1e:01:80:45:
58:6d:ee:fc:bd:6a:e6:11:1d:e1:3d:78:40:b4:e3:62:4b:ac:
2c:3a:c2:53:25:b1:45:27:b7:09:a4:dc:fd:24:bd:da:e6:b8:
d4:cf:6e:a1:7d:a5:d7:6e:69:53:6b:f3:35:57:4f:53:e3:cc:
b6:f3:0a:25:a8:e0:b2:25:ae:3a:09:9c:9b:f8:98:4e:e7:21:
4b:42:82:4e:df:90:3f:f7:9a:58:9d:78:41:a5:b3:ea:15:5d:
22:c0:98:13:11:02:df:b6:00:77:78:30:13:8e:95:6a:d4:3b:
79:a0:e8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpbaucgL/ZYtBiLQ3wBtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl
OTZjMzUwHhcNMjYwOTI0MDkwMTEwWhcNMjYwOTI1MDkwMTEwWjAzMTEwLwYDVQQD
Eyg3Yzc3NGU4ZTI0NTgwMzgxNWZlYWNhYWE4NWNlYzBlYjA2YzA0ZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0DhHa097t0Oy2lQsCpQomt+rAOu
Plp+EewWRksgiyEOo9AgCske0dvA6l4moy9N5s/Iyk8NVg+KReQwH15Kc6lricnk
gEXRWJbTmlXT8Caxi6m2H2WV25entvAS4J1sVizE6ICJIj+D3auDuCv+N3vxkeWX
onH17E6gHtxgumkXGPQwWCo+Pa3TAicb6r1kbKPdNrX/PODu2q0uf1QHysZoyVMZ
SUsGmBB+V3+GKOQLLZbkJcY5jZ0PIr2myoA9n+QUecU1wmy5i4To0+2blrjgcq9a
mJO7Q1tcAbazV9SLkNiyCww0YZob3N7yCGLV3xWGQHUs4F1c5yQfyr6jdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx3To4kWAOBX+rKqoXOwOsGwE6JMB8GA1UdIwQY
MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct
ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4
LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRhzEODb
rFuLgMVtiUE5fhVj3s823QSoz+fHUiY3NibX3FOba6FMY8KycRISbY/djsX3awTn
c1I8Bk18dT6S8GZZxqvkEcJfAChmfKCqh/aUo8rb46L4dFUj/tcVW+2uoGoJaQp9
cVhqPeRiFhHocRMZXbgxYVdkyszBNs4bw5L+hLslXTUyGuqmRM8eAYBFWG3u/L1q
5hEd4T14QLTjYkusLDrCUyWxRSe3CaTc/SS92ua41M9uoX2l125pU2vzNVdPU+PM
tvMKJajgsiWuOgmcm/iYTuchS0KCTt+QP/eaWJ14QaWz6hVdIsCYExEC37YAd3gw
E46VatQ7eaDoQg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:41:32 2026 by rpki-client