Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: bUqw3BuSCboEccLXza2LavtU9PkZABW3W6N6mOAJlTU=
Subject key identifier: 05:A8:CA:80:6D:8D:84:C6:43:31:8B:64:9A:E7:08:5B:D6:38:8B:66
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 01A17B4D0B508B6D891978A88BC08B728617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0DF3
Signing time: Tue 27 Oct 2026 03:00:09 +0000
Manifest this update: Tue 27 Oct 2026 03:00:09 +0000
Manifest next update: Wed 28 Oct 2026 03:00:09 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: FsRkU+XexOJNDiT1oYIdcZRhpa8wnxI5gI9Ks2Ji9lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:0b:50:8b:6d:89:19:78:a8:8b:c0:8b:72:86:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Oct 27 03:00:09 2026 GMT
Not After : Oct 28 03:00:09 2026 GMT
Subject: CN=05a8ca806d8d84c643318b649ae7085bd6388b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:33:4a:49:8c:f1:da:88:32:ac:10:00:08:
ac:86:ec:c2:4f:50:5a:31:5a:da:c3:2a:09:fa:83:
e1:fe:b2:79:0f:fc:ca:a5:bb:29:cb:56:16:7d:df:
b1:3b:dc:64:d0:17:cd:3b:06:7d:87:72:38:73:78:
00:90:f4:28:f4:5a:5f:5e:88:db:39:e9:2c:1b:bd:
2c:72:8f:da:5f:88:ca:fc:cb:07:79:f7:35:bd:7f:
4a:4f:a5:1e:34:df:16:79:9d:fc:64:fb:ac:f2:4e:
50:6a:b4:f8:77:dc:7b:e0:44:01:aa:0d:36:14:07:
c3:2f:33:64:10:d6:65:ed:26:fb:d5:2d:14:b6:51:
be:c6:c6:9d:a5:6f:b3:fc:3f:d1:19:97:54:9b:46:
db:33:97:f6:47:1c:70:29:38:03:9d:60:54:69:a3:
bc:e8:39:43:e8:dd:f8:a0:69:1d:41:77:eb:e8:b1:
65:46:92:09:89:c5:dc:de:b2:a6:18:11:bc:22:be:
8a:11:85:06:ad:bc:a2:10:9d:ba:59:91:d8:29:4c:
8a:e2:f5:f1:64:fd:bf:b8:1f:56:56:17:e3:c9:6e:
34:64:76:61:cd:30:75:1b:75:3c:85:aa:6c:70:08:
9b:ef:71:2f:ab:70:e9:e7:50:79:f1:ea:77:6c:4f:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:CA:80:6D:8D:84:C6:43:31:8B:64:9A:E7:08:5B:D6:38:8B:66
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3e:9c:a8:6d:78:b3:7b:1b:c0:f2:ec:b6:e7:f5:1e:c1:71:
10:fa:63:30:cf:8b:1c:76:7d:6a:26:80:91:2c:e7:0e:be:e9:
e9:41:d8:bd:4a:da:fc:0c:46:37:17:f4:b9:67:97:9a:0f:c6:
7f:4d:5e:b3:d5:c8:d1:aa:3e:d2:e7:3a:fa:bb:5c:cc:71:9e:
c3:a2:cb:31:bd:12:7b:4a:a7:15:6c:cc:63:b9:4c:fb:03:0c:
95:65:96:c8:8d:67:c9:07:3e:2f:a6:c7:9a:78:e7:2e:01:4d:
68:66:9d:ec:a7:1f:ab:c6:ed:8e:46:79:bd:67:75:9c:4d:79:
49:2a:6a:9e:bf:47:70:52:c4:a1:da:b3:19:24:48:a8:85:9a:
3f:ad:73:d5:5d:37:99:60:68:31:6a:40:54:13:d0:92:d9:af:
49:5d:61:43:28:46:56:c7:2a:f7:91:a2:18:8c:ea:36:6b:a0:
7b:63:21:33:af:66:c5:aa:0f:f5:0a:33:84:26:51:3f:3a:bc:
ae:8f:51:1f:69:45:e1:6b:f2:1c:61:3c:32:c1:f4:2f:2f:37:
73:dc:fa:16:2a:c5:da:21:d6:1c:5d:5a:13:a1:db:bc:7b:01:
fc:94:f3:73:7d:38:be:43:4e:15:14:16:39:03:6e:41:1e:a5:
6c:f4:0f:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7TQtQi22JGXioi8CLcoYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3
MDFhNDgwHhcNMjYxMDI3MDMwMDA5WhcNMjYxMDI4MDMwMDA5WjAzMTEwLwYDVQQD
EygwNWE4Y2E4MDZkOGQ4NGM2NDMzMThiNjQ5YWU3MDg1YmQ2Mzg4YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06IzSkmM8dqIMqwQAAishuzCT1Ba
MVrawyoJ+oPh/rJ5D/zKpbspy1YWfd+xO9xk0BfNOwZ9h3I4c3gAkPQo9FpfXojb
OeksG70sco/aX4jK/MsHefc1vX9KT6UeNN8WeZ38ZPus8k5QarT4d9x74EQBqg02
FAfDLzNkENZl7Sb71S0UtlG+xsadpW+z/D/RGZdUm0bbM5f2RxxwKTgDnWBUaaO8
6DlD6N34oGkdQXfr6LFlRpIJicXc3rKmGBG8Ir6KEYUGrbyiEJ26WZHYKUyK4vXx
ZP2/uB9WVhfjyW40ZHZhzTB1G3U8hapscAib73Evq3Dp51B58ep3bE8gFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWoyoBtjYTGQzGLZJrnCFvWOItmMB8GA1UdIwQY
MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt
ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5
LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz6cqG14
s3sbwPLstuf1HsFxEPpjMM+LHHZ9aiaAkSznDr7p6UHYvUra/AxGNxf0uWeXmg/G
f01es9XI0ao+0uc6+rtczHGew6LLMb0Se0qnFWzMY7lM+wMMlWWWyI1nyQc+L6bH
mnjnLgFNaGad7Kcfq8btjkZ5vWd1nE15SSpqnr9HcFLEodqzGSRIqIWaP61z1V03
mWBoMWpAVBPQktmvSV1hQyhGVscq95GiGIzqNmuge2MhM69mxaoP9QozhCZRPzq8
ro9RH2lF4WvyHGE8MsH0Ly83c9z6FirF2iHWHF1aE6HbvHsB/JTzc304vkNOFRQW
OQNuQR6lbPQPaQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:49:49 2026 by rpki-client