Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: h+7Pd//l806R1yzCUprQpsA6Dz0FXklHbCCZtpnNRnw=
Subject key identifier: A2:D7:E4:AD:6B:DA:3B:5F:A6:22:DD:FD:38:A2:5E:3E:36:04:1A:E4
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 01A13B25725863E3EA5D816ECF3CD0C85440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 19DF
Signing time: Wed 14 Oct 2026 16:01:12 +0000
Manifest this update: Wed 14 Oct 2026 16:01:12 +0000
Manifest next update: Thu 15 Oct 2026 16:01:12 +0000
Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: ozkDmRm/xhzA1CMQnN7i2cIXb1J7KIMDuAjYiHC+O5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:25:72:58:63:e3:ea:5d:81:6e:cf:3c:d0:c8:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Oct 14 16:01:12 2026 GMT
Not After : Oct 15 16:01:12 2026 GMT
Subject: CN=a2d7e4ad6bda3b5fa622ddfd38a25e3e36041ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:1b:a5:d4:b8:ca:fa:69:62:6d:7d:18:43:
ee:37:e8:f7:8d:a2:06:d2:6e:e1:75:0d:af:1e:56:
69:77:fd:90:9f:79:a4:f6:dd:29:90:1a:f0:9a:c0:
e7:2e:70:8f:da:b3:c9:6c:75:d5:f5:25:3f:a1:f7:
a9:38:c2:03:70:8c:a4:a2:96:8f:92:ce:b5:7c:33:
d0:dc:36:62:14:21:db:ae:89:ba:a6:c8:6d:fc:5c:
de:37:11:4c:35:20:25:7a:34:92:3c:67:1c:c8:56:
69:5f:6b:17:c9:d3:43:2c:4a:68:e1:2c:ba:78:69:
8b:e8:c3:a7:df:cc:75:6c:c7:7d:8c:f4:0c:9e:d7:
04:96:b2:99:b5:e1:60:fd:b2:5c:0b:68:a6:a3:1f:
88:6f:b8:80:34:52:de:82:7a:55:18:31:d3:9c:c2:
4f:be:56:07:94:33:48:bb:f7:b7:3a:2d:52:e1:e7:
ab:9b:b2:29:6c:25:cc:11:d6:a3:e7:ff:33:22:93:
c6:7b:35:9d:41:ff:cc:4b:f6:64:ec:7b:82:ff:f7:
27:08:71:35:33:ce:14:de:97:37:f3:d2:15:1b:9d:
0b:37:24:14:14:d0:d8:29:77:6e:7e:87:13:7f:8f:
d1:a5:ac:77:b2:29:a9:b6:3a:c3:1b:f4:2a:e3:14:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:E4:AD:6B:DA:3B:5F:A6:22:DD:FD:38:A2:5E:3E:36:04:1A:E4
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:95:43:f7:8d:4e:e1:f2:4d:e0:a8:68:c6:86:06:e6:7b:53:
c5:60:45:83:74:f1:f6:69:2d:86:e9:42:b3:3b:60:66:eb:d2:
29:e0:de:36:26:bc:2b:87:ef:aa:9b:08:ff:1c:6f:e8:4b:aa:
2f:e3:a8:ab:c9:26:6d:bc:23:85:94:d6:27:c8:06:a8:47:83:
8d:2e:0e:ed:1b:c1:df:cd:ba:5f:d6:ba:a2:ee:19:bf:06:d2:
ac:ea:bf:f1:98:aa:e0:0d:cc:ea:53:36:cc:1a:55:eb:62:15:
be:37:4b:3e:81:17:d0:19:6d:1e:02:3e:ca:a8:f7:3d:a8:24:
81:1a:34:f2:13:6e:b3:0a:eb:62:94:0a:f8:40:3f:96:ae:76:
a9:3a:dc:68:0e:58:1d:c3:c0:0b:72:e2:db:58:89:7b:75:79:
f3:55:3f:26:39:97:48:da:05:37:e9:53:77:e1:17:de:95:49:
74:e1:57:e0:d1:49:5d:99:b3:f5:32:43:d1:43:7d:74:1a:d8:
76:2a:12:91:cb:10:c7:98:4c:e4:da:f7:43:fa:8d:5d:65:a3:
70:a6:c0:1b:23:3e:d8:33:7f:1d:9a:26:aa:ec:1c:27:ce:d8:
ed:72:93:59:97:92:86:e6:b1:f6:a0:6e:5e:bb:f2:4c:8b:34:
24:c6:20:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7JXJYY+PqXYFuzzzQyFRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4
MDVlZjEwHhcNMjYxMDE0MTYwMTEyWhcNMjYxMDE1MTYwMTEyWjAzMTEwLwYDVQQD
EyhhMmQ3ZTRhZDZiZGEzYjVmYTYyMmRkZmQzOGEyNWUzZTM2MDQxYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIsbpdS4yvppYm19GEPuN+j3jaIG
0m7hdQ2vHlZpd/2Qn3mk9t0pkBrwmsDnLnCP2rPJbHXV9SU/ofepOMIDcIykopaP
ks61fDPQ3DZiFCHbrom6psht/FzeNxFMNSAlejSSPGccyFZpX2sXydNDLEpo4Sy6
eGmL6MOn38x1bMd9jPQMntcElrKZteFg/bJcC2imox+Ib7iANFLegnpVGDHTnMJP
vlYHlDNIu/e3Oi1S4eerm7IpbCXMEdaj5/8zIpPGezWdQf/MS/Zk7HuC//cnCHE1
M84U3pc389IVG50LNyQUFNDYKXdufocTf4/Rpax3simptjrDG/Qq4xTARQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLX5K1r2jtfpiLd/TiiXj42BBrkMB8GA1UdIwQY
MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt
NzdjM2UxYzhmNmRlLzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl
LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZVD941O
4fJN4KhoxoYG5ntTxWBFg3Tx9mkthulCsztgZuvSKeDeNia8K4fvqpsI/xxv6Euq
L+Ooq8kmbbwjhZTWJ8gGqEeDjS4O7RvB3826X9a6ou4ZvwbSrOq/8Ziq4A3M6lM2
zBpV62IVvjdLPoEX0BltHgI+yqj3PagkgRo08hNuswrrYpQK+EA/lq52qTrcaA5Y
HcPAC3Li21iJe3V581U/JjmXSNoFN+lTd+EX3pVJdOFX4NFJXZmz9TJD0UN9dBrY
dioSkcsQx5hM5Nr3Q/qNXWWjcKbAGyM+2DN/HZomquwcJ87Y7XKTWZeShuax9qBu
XrvyTIs0JMYgIw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 22:00:32 2026 by rpki-client