Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: ksVU2UjgbodNQDuFuOSSUZ3+rqwqKa6RnaMfScfPLBk=
Subject key identifier: B1:B2:3E:90:79:B7:A6:B2:D1:08:1D:95:18:4A:F4:8B:3C:07:89:01
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 01A0E173FA65AEAD515452F9A7AF9EBCD71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: 028D
Signing time: Sun 27 Sep 2026 06:01:09 +0000
Manifest this update: Sun 27 Sep 2026 06:01:09 +0000
Manifest next update: Mon 28 Sep 2026 06:01:09 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: KiNMgdfJ-jED44ngYXhsk4y4eUo.roa (hash: a7w7sWRkPS/IylXEpEG2ZktzWT1XLIn8MRkkpzcobUA=)
3: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: dKpG6UC9OdARebMter1WSIqR+u5enODS3ZBTEaBvX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:fa:65:ae:ad:51:54:52:f9:a7:af:9e:bc:d7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Sep 27 06:01:09 2026 GMT
Not After : Sep 28 06:01:09 2026 GMT
Subject: CN=b1b23e9079b7a6b2d1081d95184af48b3c078901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:d4:4e:0e:b3:56:7d:8a:52:c4:6b:3e:ba:
65:47:95:04:e9:10:08:3a:c7:5c:2d:47:3e:cb:8a:
99:95:8d:f9:fe:1b:3e:16:7c:dd:43:73:0a:bf:3e:
6f:5f:e6:72:b5:34:42:84:de:f8:fd:1c:2d:e8:af:
68:a6:8e:e9:66:07:fc:09:eb:6a:96:41:f9:fb:60:
1f:62:3a:39:6d:80:9e:98:46:42:fe:d6:e9:ce:49:
47:f8:72:bb:9e:31:51:db:38:79:09:7e:7a:98:ac:
db:f3:79:e7:d9:b9:33:0a:24:7c:8d:48:06:31:95:
86:c2:88:e5:25:da:a8:7d:d7:77:14:f3:9b:75:3b:
52:07:5e:7b:68:35:25:40:a7:9f:ea:b8:46:2c:17:
37:f9:79:77:40:c6:78:cb:29:c0:f9:c9:f4:ae:fa:
4c:cd:2a:2e:7d:c7:74:a6:75:b0:b0:cd:29:e9:f0:
6d:86:46:b8:83:f2:63:85:ea:37:6c:91:86:f6:bd:
33:66:84:aa:91:4c:33:ce:5f:2a:42:a8:9b:fd:80:
f6:e2:70:82:b7:76:f5:46:e7:1a:10:51:a6:f9:76:
de:95:17:f8:6b:57:96:bc:dc:bd:1a:88:00:2c:b0:
e3:1f:c8:48:92:59:94:20:d4:40:a4:09:7b:ea:44:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B2:3E:90:79:B7:A6:B2:D1:08:1D:95:18:4A:F4:8B:3C:07:89:01
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4b:da:13:7e:d9:25:de:c2:8a:19:11:17:13:0f:dc:38:a7:
d0:42:d1:4d:4d:b0:69:ca:4c:84:8f:96:50:74:e8:0a:9c:0c:
e6:07:07:03:a0:d8:61:6a:9a:c5:86:31:90:9a:e8:f3:0b:0b:
e5:25:68:6e:9e:32:90:48:75:28:2e:35:f4:ba:70:43:af:3e:
24:af:fa:71:22:d6:7c:a5:0a:14:54:1a:da:b3:e0:36:43:a6:
5f:9d:07:7a:24:cd:29:6f:af:5d:83:e2:76:3b:a8:5e:65:fb:
6c:2d:51:01:11:7d:0f:c7:88:bd:d1:fd:bf:23:5b:68:15:d6:
48:bb:b3:18:ff:30:f0:2b:0c:d4:e7:6b:82:ed:95:86:d8:5e:
63:15:ee:2c:05:49:bc:45:3d:db:ee:6a:12:c5:52:a6:4c:f8:
09:67:d9:0e:46:37:0a:e5:1d:c4:39:c4:6f:d1:d1:ac:d8:6a:
4c:6f:bb:a4:81:57:ad:d5:11:3b:68:b8:a2:8d:db:c6:d4:0c:
bb:c1:6a:4d:87:0c:0f:b8:10:04:84:a3:65:3a:2c:18:04:7d:
af:9e:6e:49:59:c4:6c:20:a8:24:0c:0e:13:22:be:bd:8f:6e:
3d:3a:a1:fe:82:50:9d:d4:71:ee:19:23:4d:d5:00:22:79:cd:
63:dc:a3:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhc/plrq1RVFL5p6+evNccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTM4YmIyMTBiN2MxYThmMDY2NmUwNzU5ZjQ3NWYwMDY0
ZGYxZjcwHhcNMjYwOTI3MDYwMTA5WhcNMjYwOTI4MDYwMTA5WjAzMTEwLwYDVQQD
EyhiMWIyM2U5MDc5YjdhNmIyZDEwODFkOTUxODRhZjQ4YjNjMDc4OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzePUTg6zVn2KUsRrPrplR5UE6RAI
OsdcLUc+y4qZlY35/hs+FnzdQ3MKvz5vX+ZytTRChN74/Rwt6K9opo7pZgf8Cetq
lkH5+2AfYjo5bYCemEZC/tbpzklH+HK7njFR2zh5CX56mKzb83nn2bkzCiR8jUgG
MZWGwojlJdqofdd3FPObdTtSB157aDUlQKef6rhGLBc3+Xl3QMZ4yynA+cn0rvpM
zSoufcd0pnWwsM0p6fBthka4g/Jjheo3bJGG9r0zZoSqkUwzzl8qQqib/YD24nCC
t3b1RucaEFGm+XbelRf4a1eWvNy9GogALLDjH8hIklmUINRApAl76kSlYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGyPpB5t6ay0QgdlRhK9Is8B4kBMB8GA1UdIwQY
MBaAFMQTi7IQt8Go8GZuB1n0dfAGTfH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUt
ZmIxZjJhYWM1NjdlLzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUtZmIxZjJhYWM1Njdl
LzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0vaE37Z
Jd7CihkRFxMP3Din0ELRTU2wacpMhI+WUHToCpwM5gcHA6DYYWqaxYYxkJro8wsL
5SVobp4ykEh1KC419LpwQ68+JK/6cSLWfKUKFFQa2rPgNkOmX50HeiTNKW+vXYPi
djuoXmX7bC1RARF9D8eIvdH9vyNbaBXWSLuzGP8w8CsM1Odrgu2VhtheYxXuLAVJ
vEU92+5qEsVSpkz4CWfZDkY3CuUdxDnEb9HRrNhqTG+7pIFXrdURO2i4oo3bxtQM
u8FqTYcMD7gQBISjZTosGAR9r55uSVnEbCCoJAwOEyK+vY9uPTqh/oJQndRx7hkj
TdUAInnNY9yjxA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:04 2026 by rpki-client