Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: k5C5NQx49N09paVst5uTnkTgMeTgRVfMqTg0j6PHANE=
Subject key identifier: 1E:A1:9E:95:DE:5D:C9:44:A0:45:2F:39:98:61:6B:9E:CF:19:3E:CA
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 01A0DBDF90D3675E3619ADF7F094C1033CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0D06
Signing time: Sat 26 Sep 2026 04:00:56 +0000
Manifest this update: Sat 26 Sep 2026 04:00:56 +0000
Manifest next update: Sun 27 Sep 2026 04:00:56 +0000
Files and hashes: 1: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (hash: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=)
2: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: mw7dzwD0S7YOI/h7VE1qxKzAuBKz6p1RUyP9+2yMq4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:90:d3:67:5e:36:19:ad:f7:f0:94:c1:03:3c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Sep 26 04:00:56 2026 GMT
Not After : Sep 27 04:00:56 2026 GMT
Subject: CN=1ea19e95de5dc944a0452f3998616b9ecf193eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:db:31:7c:bf:5f:92:9b:2d:34:9b:46:88:
ae:d8:ef:fe:e4:30:d0:9e:fc:30:da:c8:fe:85:aa:
9b:5b:85:8f:07:4d:a4:df:a9:49:47:8c:5a:d1:d3:
3f:b7:21:e3:28:fe:17:a7:1a:57:58:4c:78:36:d5:
b8:2c:de:fb:b0:88:30:67:0c:9f:59:88:4a:06:59:
32:87:32:f2:a7:0b:38:aa:8d:f6:c7:f1:5d:27:6b:
88:66:b6:33:61:b2:c6:64:e1:7a:07:a9:fa:c2:c8:
53:8e:c1:6a:f0:06:c6:4c:7d:ce:0c:1c:a7:86:d3:
fb:d3:41:89:b2:fa:ce:6f:cf:fe:fe:de:bb:4a:3c:
4d:89:c2:c9:c7:0c:98:ae:99:8c:26:56:7d:8f:d7:
26:3a:f4:af:b3:67:62:43:76:52:c1:9f:08:91:96:
33:dc:96:c5:58:f1:bf:83:33:f8:26:ae:cf:19:89:
bb:d8:33:ac:a2:24:8f:bd:46:f3:39:2c:fa:9d:da:
45:35:ff:14:eb:aa:5f:c5:25:36:be:c3:68:5a:4e:
8c:3f:50:90:61:dd:06:f2:82:f2:2c:90:03:27:d8:
12:24:e2:e4:02:04:f9:27:a9:9a:71:d8:bb:c4:3b:
2c:11:ba:47:98:44:2d:80:c8:d8:31:08:0a:24:17:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:9E:95:DE:5D:C9:44:A0:45:2F:39:98:61:6B:9E:CF:19:3E:CA
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:2b:a1:28:b5:8b:70:18:a7:6b:62:cf:8c:11:da:a6:0e:
95:8c:cd:01:42:d4:eb:a8:c8:9b:c7:eb:f1:a2:c7:fa:ea:70:
4a:6d:2e:19:f4:f7:41:4f:71:2b:1e:16:b9:a3:22:a8:13:bb:
81:f5:05:e8:65:a3:ef:fb:90:89:3c:3a:d1:4b:9e:e2:88:ce:
ed:f6:82:33:3b:c2:80:91:dc:59:4a:a0:e1:7a:cd:41:fe:c3:
39:40:f3:5e:29:87:de:0e:21:7c:87:50:86:14:ed:ae:de:6b:
0c:b5:9a:ed:62:46:73:3c:26:ee:7d:cb:ad:63:99:58:11:28:
86:e9:44:a1:c1:e3:b3:3f:44:4e:fe:6a:ea:46:68:0a:2b:8d:
9c:44:db:14:bf:10:45:e9:41:6f:78:a6:27:6b:d5:83:2d:fd:
56:a9:ab:6d:62:c0:7e:91:43:1b:b1:29:49:cf:ca:d6:1b:5d:
02:02:fd:76:09:d9:d4:10:01:79:bd:d1:2c:f0:79:0a:00:4e:
af:d0:7c:84:7c:6f:e2:86:f1:14:dc:30:70:48:e7:8e:80:bc:
dd:84:91:0b:86:03:bd:d5:85:b0:6c:55:08:fb:26:55:7b:5f:
8e:49:2c:24:7b:ce:f1:36:fb:12:1d:20:09:f7:f7:29:3b:88:
9b:95:10:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb35DTZ142Ga338JTBAzy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMDAyYzQ0NzliYjRjOTZlMjIzNDM5OWNlNzFmNTYwMzQ1
Mjk5ZDAwHhcNMjYwOTI2MDQwMDU2WhcNMjYwOTI3MDQwMDU2WjAzMTEwLwYDVQQD
EygxZWExOWU5NWRlNWRjOTQ0YTA0NTJmMzk5ODYxNmI5ZWNmMTkzZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4zbMXy/X5KbLTSbRoiu2O/+5DDQ
nvww2sj+haqbW4WPB02k36lJR4xa0dM/tyHjKP4XpxpXWEx4NtW4LN77sIgwZwyf
WYhKBlkyhzLypws4qo32x/FdJ2uIZrYzYbLGZOF6B6n6wshTjsFq8AbGTH3ODByn
htP700GJsvrOb8/+/t67SjxNicLJxwyYrpmMJlZ9j9cmOvSvs2diQ3ZSwZ8IkZYz
3JbFWPG/gzP4Jq7PGYm72DOsoiSPvUbzOSz6ndpFNf8U66pfxSU2vsNoWk6MP1CQ
Yd0G8oLyLJADJ9gSJOLkAgT5J6macdi7xDssEbpHmEQtgMjYMQgKJBeYbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6hnpXeXclEoEUvOZhha57PGT7KMB8GA1UdIwQY
MBaAFFwALER5u0yW4iNDmc5x9WA0UpnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYt
NzFjNTcwZGNiMGE0LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYtNzFjNTcwZGNiMGE0
LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZoroSi1
i3AYp2tiz4wR2qYOlYzNAULU66jIm8fr8aLH+upwSm0uGfT3QU9xKx4WuaMiqBO7
gfUF6GWj7/uQiTw60Uue4ojO7faCMzvCgJHcWUqg4XrNQf7DOUDzXimH3g4hfIdQ
hhTtrt5rDLWa7WJGczwm7n3LrWOZWBEohulEocHjsz9ETv5q6kZoCiuNnETbFL8Q
RelBb3imJ2vVgy39VqmrbWLAfpFDG7EpSc/K1htdAgL9dgnZ1BABeb3RLPB5CgBO
r9B8hHxv4obxFNwwcEjnjoC83YSRC4YDvdWFsGxVCPsmVXtfjkksJHvO8Tb7Eh0g
Cff3KTuIm5UQcw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:25:52 2026 by rpki-client