Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: f8TA2IHm+nwB+NOxm9ssHm9Bgdj+2ZgEKp/Lt55Rtgc=
Subject key identifier: 88:3E:30:AC:36:5A:1C:AE:78:B1:9A:6D:9A:D1:A0:9B:64:4E:5B:46
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 01A0D9BA6FA8DFDF92AEC32B5F028C7A2AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 1089
Signing time: Fri 25 Sep 2026 18:01:09 +0000
Manifest this update: Fri 25 Sep 2026 18:01:09 +0000
Manifest next update: Sat 26 Sep 2026 18:01:09 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: vPKMt6b1tXeT1F2nStDhmxMLLOs4ogPlaYHUtt882pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:6f:a8:df:df:92:ae:c3:2b:5f:02:8c:7a:2a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Sep 25 18:01:09 2026 GMT
Not After : Sep 26 18:01:09 2026 GMT
Subject: CN=883e30ac365a1cae78b19a6d9ad1a09b644e5b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:01:f6:4e:c0:c0:0c:01:55:3b:12:5b:0d:
b2:36:bf:64:1c:80:36:f9:55:2f:69:a1:e6:bf:00:
ba:b2:fa:68:af:e9:ab:2f:3f:1f:31:7b:3e:3b:a7:
55:32:f4:7b:3d:36:7c:e7:a1:53:44:44:8f:e3:a5:
0b:77:a5:6e:46:bb:d7:75:84:35:c1:6c:33:7b:e7:
fd:98:08:5c:12:1a:47:78:cf:b4:b7:95:bf:85:f0:
e1:c4:83:ff:ff:0d:c2:84:11:b0:00:8e:b8:70:90:
f4:c1:78:22:06:79:8d:c2:f7:ef:a6:d6:56:d0:97:
66:a3:a8:62:24:7a:6f:01:f8:9a:31:7f:87:61:30:
b8:c7:4c:20:1e:fa:0e:8e:47:7a:c8:cc:d6:aa:f7:
ce:0a:73:01:65:dd:f0:17:60:12:1d:cf:0f:67:58:
42:65:6a:08:a2:c2:d0:d1:4a:28:79:1d:ed:24:e9:
33:dd:53:d6:b8:38:b2:33:a2:55:9d:14:6a:99:2d:
bf:f1:68:9a:30:4d:9a:e8:c0:d2:51:6f:cf:5d:a3:
c6:9a:28:d9:47:d6:04:d0:04:a1:18:a5:1b:77:38:
5f:50:9c:66:27:8d:72:3d:ac:79:5f:ae:3f:11:39:
78:9c:55:04:b6:99:8e:8f:bd:43:6d:86:d3:12:0a:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3E:30:AC:36:5A:1C:AE:78:B1:9A:6D:9A:D1:A0:9B:64:4E:5B:46
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:16:f8:35:8b:99:1c:0f:82:00:38:b1:64:ad:e9:7a:c3:f0:
17:b0:bd:2b:32:de:a0:d2:da:62:8e:59:19:23:62:fa:07:00:
9c:53:6e:e4:f0:98:2c:4d:77:42:e9:0d:74:a8:11:73:20:44:
ee:3f:cc:da:ef:8e:d1:ff:5a:35:12:56:e0:18:c2:3f:02:31:
3a:f5:39:10:59:a6:32:58:5a:04:f8:eb:09:67:d9:7d:4d:cd:
8d:e0:a6:54:e1:fe:6c:4d:ec:aa:6a:9b:7c:0a:93:73:2d:ee:
a2:94:d8:03:a2:cd:ee:77:2d:c4:67:f2:35:5c:44:2d:7d:23:
7c:5a:99:a5:97:c8:60:b3:9b:8a:83:e4:e9:81:d5:27:f2:79:
2d:d9:cf:cf:0a:ec:55:c6:03:88:9e:84:76:dd:1b:c2:26:49:
d9:de:4d:ab:82:05:83:01:13:8c:5d:68:8b:8d:ce:4c:1e:ac:
fb:58:0a:a9:a0:d5:63:29:3d:34:ff:c8:d4:d9:07:f1:b0:b0:
4e:87:c0:65:70:3f:43:5c:27:5e:dc:dd:82:db:84:b2:e3:eb:
ea:bc:11:ab:d2:20:51:a0:f0:d3:e6:41:45:9d:ea:e3:de:90:
df:77:7c:f8:16:06:49:7d:30:41:07:90:39:dd:3d:77:a4:3b:
28:10:69:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZum+o39+SrsMrXwKMeirTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Y2RjZTMyYWRjNjJhZmI3N2U0MzE4NmNmN2MyYzA3MWU0
MmI3YmIwHhcNMjYwOTI1MTgwMTA5WhcNMjYwOTI2MTgwMTA5WjAzMTEwLwYDVQQD
Eyg4ODNlMzBhYzM2NWExY2FlNzhiMTlhNmQ5YWQxYTA5YjY0NGU1YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztsB9k7AwAwBVTsSWw2yNr9kHIA2
+VUvaaHmvwC6svpor+mrLz8fMXs+O6dVMvR7PTZ856FTRESP46ULd6VuRrvXdYQ1
wWwze+f9mAhcEhpHeM+0t5W/hfDhxIP//w3ChBGwAI64cJD0wXgiBnmNwvfvptZW
0Jdmo6hiJHpvAfiaMX+HYTC4x0wgHvoOjkd6yMzWqvfOCnMBZd3wF2ASHc8PZ1hC
ZWoIosLQ0UooeR3tJOkz3VPWuDiyM6JVnRRqmS2/8WiaME2a6MDSUW/PXaPGmijZ
R9YE0AShGKUbdzhfUJxmJ41yPax5X64/ETl4nFUEtpmOj71DbYbTEgobMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg+MKw2WhyueLGabZrRoJtkTltGMB8GA1UdIwQY
MBaAFMXNzjKtxir7d+Qxhs98LAceQre7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUt
YjBhMjhiYjM1YjIwLzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUtYjBhMjhiYjM1YjIw
LzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxb4NYuZ
HA+CADixZK3pesPwF7C9KzLeoNLaYo5ZGSNi+gcAnFNu5PCYLE13QukNdKgRcyBE
7j/M2u+O0f9aNRJW4BjCPwIxOvU5EFmmMlhaBPjrCWfZfU3NjeCmVOH+bE3sqmqb
fAqTcy3uopTYA6LN7nctxGfyNVxELX0jfFqZpZfIYLObioPk6YHVJ/J5LdnPzwrs
VcYDiJ6Edt0bwiZJ2d5Nq4IFgwETjF1oi43OTB6s+1gKqaDVYyk9NP/I1NkH8bCw
TofAZXA/Q1wnXtzdgtuEsuPr6rwRq9IgUaDw0+ZBRZ3q496Q33d8+BYGSX0wQQeQ
Od09d6Q7KBBpcg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:38:24 2026 by rpki-client