Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: poid3PiEzUwUXYmtFupOlC2ZZtTLTEbqrIvKfucePKU=
Subject key identifier: 49:C7:82:E5:71:4D:EE:E6:BD:D8:C1:21:4C:51:32:A4:91:96:AC:A2
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 01A0D4CB03345FEA793764122D2DDAD41A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 19:01:09 +0000
Manifest this update: Thu 24 Sep 2026 19:01:09 +0000
Manifest next update: Fri 25 Sep 2026 19:01:09 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: biRBgI3ZS02CpGRiLol8uF/mAaupNIdBVdc8dQokuf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:03:34:5f:ea:79:37:64:12:2d:2d:da:d4:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Sep 24 19:01:09 2026 GMT
Not After : Sep 25 19:01:09 2026 GMT
Subject: CN=49c782e5714deee6bdd8c1214c5132a49196aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:89:57:8c:c4:27:dd:68:d0:60:71:cf:38:
05:20:02:e3:b6:02:d3:d4:82:43:33:a9:9c:8d:2b:
03:63:25:df:0a:1e:4f:f9:7d:03:4f:3d:4f:5f:f8:
70:6d:44:b3:7e:f7:c7:44:af:14:31:fb:36:42:bc:
3b:b7:af:ee:72:ba:fa:b2:03:b9:78:bf:67:76:3d:
54:77:38:c5:af:d4:52:d1:b5:78:22:a8:3f:c2:01:
17:c8:91:b7:27:4f:f0:56:a0:b7:ff:50:46:5e:04:
02:ff:2b:b6:06:63:a1:4f:19:f6:a7:b0:7f:3e:e5:
73:41:61:9e:a1:04:ce:f4:bd:b9:c0:3c:e2:51:ae:
3f:3f:f4:7d:fc:d0:2e:b9:26:bc:92:cf:dd:b2:f1:
35:f6:da:eb:1d:c3:1e:1b:65:f1:9f:ea:c0:46:22:
aa:4f:ce:6b:c7:2d:00:f9:b5:67:91:26:a9:c4:02:
8a:5e:da:e2:ce:e1:45:34:73:d1:45:04:3a:fd:f8:
0f:c0:7e:ee:e7:e8:79:e6:07:25:c0:55:14:d1:fb:
3d:68:88:34:ca:b1:f9:f0:32:c2:00:8a:40:18:d5:
e5:b8:3b:c9:f1:c6:15:07:d1:25:77:48:ea:20:8f:
5f:a9:db:45:b8:db:6e:d9:56:35:70:56:fb:46:d8:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:82:E5:71:4D:EE:E6:BD:D8:C1:21:4C:51:32:A4:91:96:AC:A2
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b4:d4:55:ac:5a:fe:25:d7:7a:fd:f3:2c:7e:44:e1:a6:43:
1d:b9:18:d2:1d:33:da:27:83:7c:93:40:13:ed:ba:e3:47:55:
3d:92:94:ea:f7:ce:c6:e6:e0:9f:c3:e3:8a:ce:aa:cf:c9:22:
20:99:93:0e:5f:7b:11:1b:d6:62:ce:22:d5:51:9a:ed:5f:d9:
69:61:c5:6d:4f:78:63:b0:48:27:5c:fd:87:02:f9:ed:12:3f:
0d:ac:1d:91:91:4a:eb:3f:dc:b9:6a:69:e1:64:b4:f7:90:87:
d4:d0:67:c4:e3:9b:1b:ad:61:83:4c:fe:be:97:33:15:ef:c1:
ec:55:7b:aa:81:4c:b5:96:de:71:0c:e9:0d:1c:64:23:04:58:
4f:21:a7:44:b7:56:16:76:7e:75:fd:48:f8:63:03:14:76:e3:
34:9c:fa:c9:06:5a:03:2c:ae:47:a8:6e:38:28:ff:1a:95:f5:
f0:f2:6d:7b:1e:26:e5:11:08:21:68:64:92:e6:45:6b:ae:2c:
96:2a:30:c4:3e:7f:8b:e7:e8:43:29:dc:77:10:d6:fc:39:83:
39:51:4e:50:72:f9:b8:31:d5:2f:8e:03:4a:cd:b2:c6:3a:51:
c0:76:85:3f:85:36:dd:2a:42:d3:cd:8c:5e:40:9d:3d:5c:74:
06:e4:9d:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUywM0X+p5N2QSLS3a1BocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWRkNmY1M2JjYjQ5ZTRiOWIwNzA2ZGZkMDc0MjU5Yzli
OGE0MDgwHhcNMjYwOTI0MTkwMTA5WhcNMjYwOTI1MTkwMTA5WjAzMTEwLwYDVQQD
Eyg0OWM3ODJlNTcxNGRlZWU2YmRkOGMxMjE0YzUxMzJhNDkxOTZhY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV+JV4zEJ91o0GBxzzgFIALjtgLT
1IJDM6mcjSsDYyXfCh5P+X0DTz1PX/hwbUSzfvfHRK8UMfs2Qrw7t6/ucrr6sgO5
eL9ndj1UdzjFr9RS0bV4Iqg/wgEXyJG3J0/wVqC3/1BGXgQC/yu2BmOhTxn2p7B/
PuVzQWGeoQTO9L25wDziUa4/P/R9/NAuuSa8ks/dsvE19trrHcMeG2Xxn+rARiKq
T85rxy0A+bVnkSapxAKKXtrizuFFNHPRRQQ6/fgPwH7u5+h55gclwFUU0fs9aIg0
yrH58DLCAIpAGNXluDvJ8cYVB9Eld0jqII9fqdtFuNtu2VY1cFb7RtjgVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnHguVxTe7mvdjBIUxRMqSRlqyiMB8GA1UdIwQY
MBaAFF7t1vU7y0nkubBwbf0HQlnJuKQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODIt
MjE1ZGJjODljMmI5LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODItMjE1ZGJjODljMmI5
LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrTUVaxa
/iXXev3zLH5E4aZDHbkY0h0z2ieDfJNAE+2640dVPZKU6vfOxubgn8Pjis6qz8ki
IJmTDl97ERvWYs4i1VGa7V/ZaWHFbU94Y7BIJ1z9hwL57RI/DawdkZFK6z/cuWpp
4WS095CH1NBnxOObG61hg0z+vpczFe/B7FV7qoFMtZbecQzpDRxkIwRYTyGnRLdW
FnZ+df1I+GMDFHbjNJz6yQZaAyyuR6huOCj/GpX18PJtex4m5REIIWhkkuZFa64s
liowxD5/i+foQyncdxDW/DmDOVFOUHL5uDHVL44DSs2yxjpRwHaFP4U23SpC082M
XkCdPVx0BuSdwg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:52:05 2026 by rpki-client