Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
File: rxxaicQTkD_UwrlE07xJezIZYsY.mft (raw, json)
Hash identifier: V9rlFhxA1uyxGImF6C33oAnxuwVWFlbCO4RYTIp8y0g=
Subject key identifier: AC:E6:F5:5F:02:AB:3A:CE:D5:0E:56:DA:89:13:D1:34:6D:09:CF:BC
Authority key identifier: AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
Certificate issuer: /CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Certificate serial: 01A06D94B24D8FE214E764441BDFF408280C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:00:56 +0000
Manifest this update: Fri 04 Sep 2026 18:00:56 +0000
Manifest next update: Sat 05 Sep 2026 18:00:56 +0000
Files and hashes: 1: a7niK7itDYSAcUcCWKLaVdepvNQ.roa (hash: zEoozmz189Usv1lYQlwpIyRkVXe/3xP6YFoEE3AiyZQ=)
2: rxxaicQTkD_UwrlE07xJezIZYsY.crl (hash: tTuv4OvMQA5ea8cWeKv3dK6z26sgSc/7fR54uds6WYE=)
3: tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa (hash: U6b+qcJDlZitVxi4VTwdzLaOqGFdF5aocVEDkGTIcVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:b2:4d:8f:e2:14:e7:64:44:1b:df:f4:08:28:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Validity
Not Before: Sep 4 18:00:56 2026 GMT
Not After : Sep 5 18:00:56 2026 GMT
Subject: CN=ace6f55f02ab3aced50e56da8913d1346d09cfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:c8:ea:f7:27:1c:fb:13:d6:25:88:00:21:
ce:ba:77:fc:9e:3c:ed:2c:93:c2:dc:7b:bc:78:e7:
dd:5f:e5:63:c5:7e:81:cb:21:a1:29:20:83:7a:d3:
9b:b7:47:62:26:6e:04:23:d1:fb:ae:6d:af:ed:c4:
86:eb:91:b1:2d:c7:1d:13:29:65:9f:07:d2:b1:c5:
7d:87:f6:2f:d4:61:35:97:cc:8f:41:0c:32:c5:81:
7b:a7:45:ec:7b:69:43:b3:b3:54:d1:48:23:c5:b2:
04:b7:49:95:0f:f7:55:18:8a:15:f8:cc:ae:30:da:
57:3c:21:d6:dc:47:d5:f6:a6:a3:fc:26:ad:c0:54:
a0:1a:08:6f:f2:20:03:bb:f3:df:6f:14:d8:d7:8e:
20:0c:d9:76:06:0d:f2:3e:15:45:8f:41:33:77:cd:
5a:d0:47:df:d2:f6:b5:09:bb:f3:14:03:a6:78:2b:
a6:31:53:51:51:f5:14:a9:55:14:47:33:79:f7:90:
fb:a1:7d:85:03:47:02:55:57:47:94:9d:54:b7:be:
2e:be:f6:e7:d9:7e:20:28:20:3b:6f:2b:9c:94:d8:
6d:59:e3:f1:a5:e4:a0:b4:30:2f:6d:d9:4d:38:8a:
89:b9:52:d3:e1:76:9e:d1:93:e9:54:a5:26:b4:98:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:F5:5F:02:AB:3A:CE:D5:0E:56:DA:89:13:D1:34:6D:09:CF:BC
X509v3 Authority Key Identifier:
keyid:AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:70:21:a2:f6:88:7e:ef:82:af:a1:2f:89:7d:65:4c:a4:a5:
41:b1:df:9b:0e:71:d3:63:a3:c2:65:08:7e:a4:5a:a1:56:09:
1a:01:6b:89:91:48:13:11:65:b4:af:03:1c:f6:49:95:c0:2f:
01:45:b2:38:30:27:41:eb:1b:2c:e5:e5:25:2f:1e:7b:ea:d1:
d7:06:22:d0:49:45:29:81:85:b0:ef:75:a5:bf:c4:95:9b:4c:
b2:36:2f:10:e1:d9:97:3c:f1:8e:e0:1c:6e:77:f4:62:38:24:
35:f1:85:34:ee:07:b5:ca:c8:d7:5c:94:66:12:e1:92:d5:a6:
71:90:93:a4:58:c6:79:b4:27:32:6d:33:fa:a4:de:b0:15:61:
f4:77:a6:c4:f8:72:a6:c0:91:b3:bc:f2:3d:50:66:be:6b:c9:
86:9b:af:dd:57:62:1f:24:a8:3c:a6:97:77:8c:27:e4:b1:b7:
54:07:59:91:7c:f5:a1:1b:34:e1:6d:08:0e:7d:34:d6:45:dc:
98:17:e9:ff:b0:c0:6f:60:04:de:16:41:33:1a:68:72:ba:eb:
eb:c9:a1:38:04:59:15:9f:56:1d:ba:83:27:66:d2:7c:79:ca:
fc:bd:e3:41:e5:16:e4:a0:74:ff:80:31:b2:9c:b7:09:bb:6c:
4f:bc:f5:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlLJNj+IU52REG9/0CCgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWM1YTg5YzQxMzkwM2ZkNGMyYjk0NGQzYmM0OTdiMzIx
OTYyYzYwHhcNMjYwOTA0MTgwMDU2WhcNMjYwOTA1MTgwMDU2WjAzMTEwLwYDVQQD
EyhhY2U2ZjU1ZjAyYWIzYWNlZDUwZTU2ZGE4OTEzZDEzNDZkMDljZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnavI6vcnHPsT1iWIACHOunf8njzt
LJPC3Hu8eOfdX+VjxX6ByyGhKSCDetObt0diJm4EI9H7rm2v7cSG65GxLccdEyll
nwfSscV9h/Yv1GE1l8yPQQwyxYF7p0Xse2lDs7NU0UgjxbIEt0mVD/dVGIoV+Myu
MNpXPCHW3EfV9qaj/CatwFSgGghv8iADu/PfbxTY144gDNl2Bg3yPhVFj0Ezd81a
0Eff0va1CbvzFAOmeCumMVNRUfUUqVUURzN595D7oX2FA0cCVVdHlJ1Ut74uvvbn
2X4gKCA7byuclNhtWePxpeSgtDAvbdlNOIqJuVLT4Xae0ZPpVKUmtJg9vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzm9V8CqzrO1Q5W2okT0TRtCc+8MB8GA1UdIwQY
MBaAFK8cWonEE5A/1MK5RNO8SXsyGWLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnh4YWljUVRrRF9Vd3JsRTA3eEpleklaWXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQt
YzFjNGQ4Y2JmNDU5LzEvcnh4YWljUVRrRF9Vd3JsRTA3eEpleklaWXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQtYzFjNGQ4Y2JmNDU5
LzEvcnh4YWljUVRrRF9Vd3JsRTA3eEpleklaWXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3AhovaI
fu+Cr6EviX1lTKSlQbHfmw5x02OjwmUIfqRaoVYJGgFriZFIExFltK8DHPZJlcAv
AUWyODAnQesbLOXlJS8ee+rR1wYi0ElFKYGFsO91pb/ElZtMsjYvEOHZlzzxjuAc
bnf0YjgkNfGFNO4HtcrI11yUZhLhktWmcZCTpFjGebQnMm0z+qTesBVh9HemxPhy
psCRs7zyPVBmvmvJhpuv3VdiHySoPKaXd4wn5LG3VAdZkXz1oRs04W0IDn001kXc
mBfp/7DAb2AE3hZBMxpocrrr68mhOARZFZ9WHbqDJ2bSfHnK/L3jQeUW5KB0/4Ax
spy3CbtsT7z1aA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:56:07 2026 by rpki-client