Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
File: _X5IAbAS8bGZsv0RqqxS13VjRzk.mft (raw, json)
Hash identifier: Dfopn3AHt/eyxGbS3Be5XT5rJ1Dse+vB7zisf2Ufhdk=
Subject key identifier: 6A:43:24:F1:1E:E0:FB:F0:C5:F1:D3:31:66:46:44:85:8F:F5:CF:E8
Authority key identifier: FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
Certificate issuer: /CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Certificate serial: 01A168A25A88E080A521213D3DB83DD22ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
Manifest number: 0134
Signing time: Fri 23 Oct 2026 12:00:32 +0000
Manifest this update: Fri 23 Oct 2026 12:00:32 +0000
Manifest next update: Sat 24 Oct 2026 12:00:32 +0000
Files and hashes: 1: YDVKQbfRYIpm7hR70cFm_r3Bozk.roa (hash: aF7PQA8hwmlUZMld6dK9hesrrO56Rkyyowsvq4iO504=)
2: _X5IAbAS8bGZsv0RqqxS13VjRzk.crl (hash: /hnbGvvGwMnJH7axJHNWC4lzkLKvUl57kcklzTdkMaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:a2:5a:88:e0:80:a5:21:21:3d:3d:b8:3d:d2:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Validity
Not Before: Oct 23 12:00:32 2026 GMT
Not After : Oct 24 12:00:32 2026 GMT
Subject: CN=6a4324f11ee0fbf0c5f1d331664644858ff5cfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:9a:bf:49:ff:a4:af:20:d4:ad:13:1c:83:
2a:cd:65:ba:45:c2:1f:b9:44:ac:87:21:dc:e0:ee:
c5:0c:b8:ca:d5:22:27:8e:54:e8:74:4e:5a:41:9f:
18:af:43:10:56:98:fb:b3:b6:69:5a:d6:2c:9a:1c:
8b:5f:6d:1a:5f:66:dd:90:57:1a:eb:64:dc:ff:a8:
27:33:d2:f6:ad:d5:63:f5:38:4a:8e:3b:73:ff:f4:
e5:92:bf:4d:47:79:82:5f:8b:0e:ae:e0:17:48:06:
b0:78:f8:dd:b1:92:e3:b2:4a:e4:c8:78:5d:8e:7f:
e0:9f:5b:43:3f:71:ae:3a:73:ac:70:3b:f6:64:7b:
14:32:72:71:8a:af:6a:e8:b3:84:0d:7a:e7:2f:96:
f6:bc:a7:de:48:7c:7f:99:60:36:ab:94:41:23:3a:
3c:e4:3e:e3:34:29:54:66:98:ba:2c:a2:7a:04:7a:
db:fe:43:19:4a:be:42:de:17:e2:e0:2a:82:92:b6:
bf:d0:7a:0c:ca:43:a0:5a:00:23:67:95:a7:3a:8a:
59:ea:4c:4f:17:29:48:0f:73:3e:33:02:59:a2:39:
cd:5b:c0:28:9c:c4:ea:e5:ef:9a:dd:af:a2:2e:1a:
20:64:ff:37:cb:b6:a3:8b:6a:3c:7b:5a:b0:e8:77:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:24:F1:1E:E0:FB:F0:C5:F1:D3:31:66:46:44:85:8F:F5:CF:E8
X509v3 Authority Key Identifier:
keyid:FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:88:98:0b:6f:d4:de:21:c6:10:d8:e0:7d:a5:b4:be:44:4d:
68:e1:d9:a1:d2:c5:10:51:eb:ed:3e:40:8c:65:ba:6f:c0:a0:
5c:fd:79:02:da:a0:de:bc:0a:e2:d3:f5:22:71:4d:03:bf:81:
df:78:91:75:b5:35:b7:13:75:35:8d:75:35:f5:fa:06:1a:5a:
40:93:fa:7d:03:a5:dd:a9:68:90:2e:4f:15:f2:33:99:48:62:
c7:44:5b:15:ad:8d:92:8d:48:54:e7:36:a8:12:81:21:0b:16:
48:72:ea:31:a6:3f:bc:12:12:99:4e:5a:d9:92:ca:9c:a0:33:
2d:d6:4e:a9:ca:1d:67:7f:b4:70:c5:c5:df:d9:60:58:11:5f:
97:8d:00:1a:f2:31:ca:ac:05:fb:d7:85:b1:e2:3a:21:8f:37:
38:b2:32:1d:78:4e:2d:ee:53:dd:2e:0f:86:58:bd:5a:8c:c6:
d1:5b:a0:c4:d2:e7:c0:69:5a:14:3b:d8:d1:47:13:3d:16:62:
6e:fd:9e:1b:03:12:8b:98:1a:2d:a0:c4:55:ff:ed:09:35:03:
62:eb:f9:28:87:57:44:d4:37:24:24:fb:f3:59:b2:92:be:2c:
02:9c:3a:2b:6e:f5:09:86:34:cf:2c:33:0b:04:a4:69:79:83:
75:15:fa:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFoolqI4IClISE9Pbg90iq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkN2U0ODAxYjAxMmYxYjE5OWIyZmQxMWFhYWM1MmQ3NzU2
MzQ3MzkwHhcNMjYxMDIzMTIwMDMyWhcNMjYxMDI0MTIwMDMyWjAzMTEwLwYDVQQD
Eyg2YTQzMjRmMTFlZTBmYmYwYzVmMWQzMzE2NjQ2NDQ4NThmZjVjZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Kav0n/pK8g1K0THIMqzWW6RcIf
uUSshyHc4O7FDLjK1SInjlTodE5aQZ8Yr0MQVpj7s7ZpWtYsmhyLX20aX2bdkFca
62Tc/6gnM9L2rdVj9ThKjjtz//Tlkr9NR3mCX4sOruAXSAawePjdsZLjskrkyHhd
jn/gn1tDP3GuOnOscDv2ZHsUMnJxiq9q6LOEDXrnL5b2vKfeSHx/mWA2q5RBIzo8
5D7jNClUZpi6LKJ6BHrb/kMZSr5C3hfi4CqCkra/0HoMykOgWgAjZ5WnOopZ6kxP
FylID3M+MwJZojnNW8AonMTq5e+a3a+iLhogZP83y7aji2o8e1qw6HfmpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpDJPEe4PvwxfHTMWZGRIWP9c/oMB8GA1UdIwQY
MBaAFP1+SAGwEvGxmbL9EaqsUtd1Y0c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1g1SUFiQVM4Ykdac3YwUnFxeFMxM1ZqUnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvX1g1SUFiQVM4Ykdac3YwUnFxeFMxM1ZqUnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvX1g1SUFiQVM4Ykdac3YwUnFxeFMxM1ZqUnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4iYC2/U
3iHGENjgfaW0vkRNaOHZodLFEFHr7T5AjGW6b8CgXP15Atqg3rwK4tP1InFNA7+B
33iRdbU1txN1NY11NfX6BhpaQJP6fQOl3alokC5PFfIzmUhix0RbFa2Nko1IVOc2
qBKBIQsWSHLqMaY/vBISmU5a2ZLKnKAzLdZOqcodZ3+0cMXF39lgWBFfl40AGvIx
yqwF+9eFseI6IY83OLIyHXhOLe5T3S4Phli9WozG0VugxNLnwGlaFDvY0UcTPRZi
bv2eGwMSi5gaLaDEVf/tCTUDYuv5KIdXRNQ3JCT781mykr4sApw6K271CYY0zywz
CwSkaXmDdRX6bQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 16:42:49 2026 by rpki-client