Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: 1l+xk5rTUXsGzjrSRH28cw2uSuhwf2lg/AxtucenFCs=
Subject key identifier: AA:DA:B5:57:87:4B:ED:46:4E:1B:9B:05:EC:42:5F:36:C0:5F:CD:0D
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 01A08BD5EC6E0419984ED8E23450B7D46256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0D77
Signing time: Thu 10 Sep 2026 15:00:47 +0000
Manifest this update: Thu 10 Sep 2026 15:00:47 +0000
Manifest next update: Fri 11 Sep 2026 15:00:47 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: JwTccBVlyg4Q6loVvO8EldfKiOERxioTSeTQzEFc3Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:ec:6e:04:19:98:4e:d8:e2:34:50:b7:d4:62:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Sep 10 15:00:47 2026 GMT
Not After : Sep 11 15:00:47 2026 GMT
Subject: CN=aadab557874bed464e1b9b05ec425f36c05fcd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:78:b9:4b:91:4c:92:78:6d:48:d4:65:29:
e2:dd:5e:f7:cc:a0:a0:81:b7:64:62:3c:1f:d8:f7:
c0:72:36:a3:3e:27:30:76:09:10:a7:63:83:d7:05:
7f:86:53:6b:18:f6:dd:ac:9d:6e:db:b5:cc:af:2b:
b1:64:3d:53:23:72:52:86:fb:a5:8d:71:88:15:b2:
f4:e8:f0:d8:f5:e9:80:6b:44:b4:ae:cd:a3:c3:90:
02:44:67:ad:bd:c8:9c:ac:19:ac:a5:2f:1c:a6:b4:
4c:04:d7:92:72:43:7e:a7:c6:54:de:98:c1:f9:56:
68:07:0e:c0:a3:9b:a2:49:81:98:ab:ce:ba:c3:69:
3d:14:b4:63:ff:dd:42:b4:d1:92:2d:26:1c:9f:bc:
6a:1e:22:e3:e5:a9:d1:73:f4:60:ff:7f:75:e3:76:
c7:f1:fb:20:f6:ee:e4:95:6c:1d:d7:85:4d:5a:22:
3d:3d:6b:81:9e:8e:77:57:96:9b:b1:60:a6:77:72:
9f:8b:17:63:ea:9c:0a:a7:e1:60:0e:1f:95:cd:34:
94:02:e8:be:ae:5d:c5:a7:0f:d2:25:f3:0f:d0:70:
93:41:74:3e:5d:97:8a:22:2e:3b:6e:3f:9e:26:b1:
7f:62:09:e5:ef:44:5f:41:cc:d5:8b:1b:08:f7:a0:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:B5:57:87:4B:ED:46:4E:1B:9B:05:EC:42:5F:36:C0:5F:CD:0D
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:9a:ff:c7:c1:82:b5:b1:80:41:e4:33:71:58:09:e6:81:
a1:b5:d3:4b:e4:1b:35:9e:a9:5f:e1:46:01:02:71:34:0a:91:
da:77:a2:68:c5:39:2c:a5:cc:f6:24:f3:f6:d1:4f:3b:eb:21:
02:60:43:5c:a3:df:9c:96:e0:0e:0a:68:0a:ab:aa:48:7d:20:
94:c0:6a:07:38:cc:b7:ec:f1:1c:40:b1:42:3b:fb:ec:47:07:
ff:9d:e2:09:fa:8c:d1:e6:9f:b0:26:f3:5a:03:2b:30:27:16:
85:bb:03:ef:31:78:ee:2e:bd:cf:a5:c2:2f:d9:63:70:bc:a3:
75:58:a2:d6:69:dc:d4:e0:b9:fc:59:12:11:ba:e8:e3:52:a5:
6e:ca:c7:11:e1:91:2f:29:98:67:81:cb:2f:a3:28:c2:f6:53:
fa:d7:a5:e4:05:ca:f3:60:b3:e0:d0:19:79:57:76:a2:b7:cf:
44:e9:91:32:ce:05:65:d2:8f:be:66:06:1d:83:41:19:96:99:
60:53:91:19:12:4e:2e:a7:20:b4:fd:87:8e:a5:e8:11:2b:3b:
df:36:92:1b:9e:02:0c:35:fe:c6:96:ea:eb:13:33:25:67:e4:
de:c7:c4:7a:83:cf:40:40:49:47:19:09:c2:e3:31:ca:e0:de:
16:5e:48:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1exuBBmYTtjiNFC31GJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3
MDFhNDgwHhcNMjYwOTEwMTUwMDQ3WhcNMjYwOTExMTUwMDQ3WjAzMTEwLwYDVQQD
EyhhYWRhYjU1Nzg3NGJlZDQ2NGUxYjliMDVlYzQyNWYzNmMwNWZjZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nt4uUuRTJJ4bUjUZSni3V73zKCg
gbdkYjwf2PfAcjajPicwdgkQp2OD1wV/hlNrGPbdrJ1u27XMryuxZD1TI3JShvul
jXGIFbL06PDY9emAa0S0rs2jw5ACRGetvcicrBmspS8cprRMBNeSckN+p8ZU3pjB
+VZoBw7Ao5uiSYGYq866w2k9FLRj/91CtNGSLSYcn7xqHiLj5anRc/Rg/39143bH
8fsg9u7klWwd14VNWiI9PWuBno53V5absWCmd3Kfixdj6pwKp+FgDh+VzTSUAui+
rl3Fpw/SJfMP0HCTQXQ+XZeKIi47bj+eJrF/Ygnl70RfQczVixsI96AAuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKratVeHS+1GThubBexCXzbAX80NMB8GA1UdIwQY
MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt
ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5
LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3Wa/8fB
grWxgEHkM3FYCeaBobXTS+QbNZ6pX+FGAQJxNAqR2neiaMU5LKXM9iTz9tFPO+sh
AmBDXKPfnJbgDgpoCquqSH0glMBqBzjMt+zxHECxQjv77EcH/53iCfqM0eafsCbz
WgMrMCcWhbsD7zF47i69z6XCL9ljcLyjdVii1mnc1OC5/FkSEbro41KlbsrHEeGR
LymYZ4HLL6MowvZT+tel5AXK82Cz4NAZeVd2orfPROmRMs4FZdKPvmYGHYNBGZaZ
YFORGRJOLqcgtP2HjqXoESs73zaSG54CDDX+xpbq6xMzJWfk3sfEeoPPQEBJRxkJ
wuMxyuDeFl5Iwg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:31:37 2026 by rpki-client