Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: mqyWlGHMo6ZPQDtzJklffFzgSGetnYRthV+wqIX9i6c=
Subject key identifier: 33:CD:7E:18:84:DF:7B:E5:22:0D:96:D9:E2:F1:05:9B:EA:B7:C3:12
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01A098B5C1620749EE209119E0482E99E6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1A53
Signing time: Sun 13 Sep 2026 03:00:43 +0000
Manifest this update: Sun 13 Sep 2026 03:00:43 +0000
Manifest next update: Mon 14 Sep 2026 03:00:43 +0000
Files and hashes: 1: 0GfPX1iH-4jrdeocNq_6rEuAOsw.roa (hash: ZXWqDRXmQQYRidDZbFeir8xCY/Br5x9u3HuJDCrOxDI=)
2: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: QGA+eeCDOmb850VPjGjWH+oFhjdxvWAaVfgP+eubmPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:98:b5:c1:62:07:49:ee:20:91:19:e0:48:2e:99:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Sep 13 03:00:43 2026 GMT
Not After : Sep 14 03:00:43 2026 GMT
Subject: CN=33cd7e1884df7be5220d96d9e2f1059beab7c312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:67:36:3d:0b:f6:cf:e2:a5:4d:8b:31:a9:
dd:b6:9d:53:02:16:b5:2d:f5:eb:ec:fb:8a:ff:65:
b8:b1:b7:e5:7e:13:b5:80:b5:5a:2f:16:c8:e7:b2:
69:3f:61:be:cf:e0:49:8f:9c:4d:10:eb:db:26:73:
38:6f:fa:07:a9:96:ea:1a:0a:f6:16:94:56:8d:ce:
fb:6d:cb:e0:2f:17:50:15:c7:20:b4:d9:e6:64:3f:
57:41:aa:ce:32:45:e4:4c:8d:5a:a9:90:2e:65:a8:
39:2d:b1:4f:1a:bd:95:d5:50:cc:58:c5:e5:1e:58:
43:17:01:0a:14:f2:d0:d7:aa:0a:4a:8c:2a:69:b1:
bb:e0:04:66:b4:59:24:d6:eb:79:e6:e0:f1:66:59:
e3:dc:5c:5f:47:8d:f1:ff:c9:24:2c:63:2d:75:99:
02:c3:c4:75:bc:18:e1:05:f2:5b:aa:9f:d9:ff:3e:
7c:a9:87:1a:53:fe:90:65:36:5f:13:41:73:19:c6:
db:8b:61:a8:69:af:c2:aa:1a:db:63:dd:f8:d1:05:
6e:cc:b9:cd:b0:de:7c:4f:c0:5f:2c:21:3b:7b:d6:
51:e8:b3:05:dc:45:08:21:2d:da:27:ff:e7:d3:12:
66:d2:76:8d:b1:54:5e:69:3d:72:51:f3:01:d9:71:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CD:7E:18:84:DF:7B:E5:22:0D:96:D9:E2:F1:05:9B:EA:B7:C3:12
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d7:6f:39:09:35:40:f4:b9:3d:14:eb:3a:a5:21:f4:39:13:
03:41:25:35:c8:02:9f:53:07:0d:1b:67:95:de:27:cf:80:f5:
3a:7d:6e:f2:80:2c:d5:b2:51:0f:19:69:9c:f5:7a:14:88:38:
dc:4a:52:e8:1c:09:33:24:e0:c6:47:d7:4c:21:78:f0:6f:85:
7b:42:9e:2b:d4:a0:bb:03:4b:5b:02:d9:b9:e3:14:0b:23:7b:
eb:93:20:22:ad:ef:da:0f:3a:aa:81:7f:d1:91:da:3b:09:9f:
ab:16:21:1d:7f:fb:32:8f:80:37:f7:65:87:ae:db:d9:db:96:
1c:08:a7:b5:2c:d7:f1:96:69:75:37:af:0b:d9:93:75:7d:73:
ae:a1:89:d7:60:74:5d:4d:21:84:3c:65:33:70:4c:e2:cf:f9:
51:e1:89:3d:a4:63:0a:47:2e:f4:5f:ee:6f:be:2e:a4:3e:cd:
4f:18:18:16:16:16:cc:6f:ad:7b:48:e9:bb:b8:62:07:02:64:
cc:ad:60:ae:0c:0d:84:7e:2d:76:38:f1:57:d2:93:4b:8f:4e:
f9:81:1d:10:22:c2:e0:d3:0a:c2:79:f3:cc:43:ee:5c:c3:af:
cc:2c:53:58:73:b8:94:ed:18:f0:2e:e8:6f:fa:f2:8a:b0:a7:
fb:51:43:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCYtcFiB0nuIJEZ4EgumebSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YmZiZWYyNzliZjlkZWQ2ZTM2NTFlMDYyOGQzOWJhNzky
OTRmNzgwHhcNMjYwOTEzMDMwMDQzWhcNMjYwOTE0MDMwMDQzWjAzMTEwLwYDVQQD
EygzM2NkN2UxODg0ZGY3YmU1MjIwZDk2ZDllMmYxMDU5YmVhYjdjMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX1nNj0L9s/ipU2LMandtp1TAha1
LfXr7PuK/2W4sbflfhO1gLVaLxbI57JpP2G+z+BJj5xNEOvbJnM4b/oHqZbqGgr2
FpRWjc77bcvgLxdQFccgtNnmZD9XQarOMkXkTI1aqZAuZag5LbFPGr2V1VDMWMXl
HlhDFwEKFPLQ16oKSowqabG74ARmtFkk1ut55uDxZlnj3FxfR43x/8kkLGMtdZkC
w8R1vBjhBfJbqp/Z/z58qYcaU/6QZTZfE0FzGcbbi2Goaa/CqhrbY9340QVuzLnN
sN58T8BfLCE7e9ZR6LMF3EUIIS3aJ//n0xJm0naNsVReaT1yUfMB2XEA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPNfhiE33vlIg2W2eLxBZvqt8MSMB8GA1UdIwQY
MBaAFMa/vvJ5v53tbjZR4GKNObp5KU94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQt
YWRlNTMwZDdjNDFiLzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQtYWRlNTMwZDdjNDFi
LzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9dvOQk1
QPS5PRTrOqUh9DkTA0ElNcgCn1MHDRtnld4nz4D1On1u8oAs1bJRDxlpnPV6FIg4
3EpS6BwJMyTgxkfXTCF48G+Fe0KeK9SguwNLWwLZueMUCyN765MgIq3v2g86qoF/
0ZHaOwmfqxYhHX/7Mo+AN/dlh67b2duWHAintSzX8ZZpdTevC9mTdX1zrqGJ12B0
XU0hhDxlM3BM4s/5UeGJPaRjCkcu9F/ub74upD7NTxgYFhYWzG+te0jpu7hiBwJk
zK1grgwNhH4tdjjxV9KTS49O+YEdECLC4NMKwnnzzEPuXMOvzCxTWHO4lO0Y8C7o
b/ryirCn+1FDhg==
-----END CERTIFICATE-----
Generated at Sun Sep 13 13:21:50 2026 by rpki-client