Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File: XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier: bSE0f4KXbFLecJFcximP0UEsXh4GGiHKI/7PrPZylHw=
Subject key identifier: FB:B2:74:EE:29:EA:71:A6:F1:23:E8:0C:BD:E2:B3:5D:3D:B9:85:9A
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 01A0F4FB704CE91E3C8038A2C5A60CB5DE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number: 1A8E
Signing time: Thu 01 Oct 2026 01:01:54 +0000
Manifest this update: Thu 01 Oct 2026 01:01:54 +0000
Manifest next update: Fri 02 Oct 2026 01:01:54 +0000
Files and hashes: 1: 3t8az_xmWCwRgwYdF8ntbUiTIo4.asa (hash: OYtFSUrUtQCeFSpMmkc6CELhcO6KgL/e+r+O7ChwoMw=)
2: 98276ywNR3GWE3eA4GBIWlMqClE.asa (hash: QZoO0A1vljWFvsSQFCIsfrovq51qQKECKf/LpyJyKgc=)
3: PRbbcfFVNFIHvCLuBhm9svvvFeY.asa (hash: TTKXbBMADa8jzEvKjCjU8NuDyyjAgBi2zrMscCgrZ3o=)
4: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: HknLGQVoihv1WPYDxqpt8xGM9APCZMIYTtEHwa7ouDw=)
5: fsfsFG6c-uDOrtkFycj7XUTrSFs.roa (hash: /2iuoJT/Z9P4V0/09Vme7KEMEVlGA2pEZglck+m/U0E=)
6: obrcupVsssO_agB28qMpvHAxeW4.roa (hash: GS+FF6yB/em6e/eXYvpbII2ejEv9rt1t/93lekFQ52Y=)
7: otlDwitKEaIJU2uBA1kA4FQjaiM.roa (hash: PnlNyi9JuqZEzROpx8dqkQn2kawiLgt6YWBA0/7GyGs=)
8: royOJADOHC1NNGIUFUSG8i3BLQ0.roa (hash: 2PUXEpyjrcM46Q23bjPi20e6P3M7C3MjAxYWgm68WVY=)
9: xE39Ruj0m92ceMsS3LNfFTVLuDk.roa (hash: X8+e4gKAkSWFlzWGvgEu09Paqpm627rMwTZHilH3gFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:fb:70:4c:e9:1e:3c:80:38:a2:c5:a6:0c:b5:de:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Oct 1 01:01:54 2026 GMT
Not After : Oct 2 01:01:54 2026 GMT
Subject: CN=fbb274ee29ea71a6f123e80cbde2b35d3db9859a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:89:57:b6:a2:a5:7e:14:bb:c3:92:0d:63:
84:db:05:69:6c:ad:4f:60:9d:94:91:c9:f1:33:eb:
10:c3:d9:46:0d:2b:c7:2e:44:25:ff:98:ca:4b:ef:
f2:b8:20:38:92:48:e2:9f:9b:67:18:28:69:a1:ea:
5f:c0:bf:31:fa:39:8c:ba:a3:19:ea:ae:eb:29:b0:
e5:e9:8f:8b:d0:7a:fd:36:47:e2:ae:46:bb:ba:d8:
09:ea:7d:a6:a5:b3:26:a0:d0:4b:d5:01:ba:72:d9:
9b:15:3e:08:44:1b:73:c9:08:97:97:b9:96:e2:18:
e2:71:79:45:69:89:51:2b:04:0f:d6:21:62:ce:bc:
66:a5:65:7c:d3:78:4c:b3:06:f0:7d:37:71:d4:14:
b3:fd:84:7f:a3:25:5b:12:1c:1b:d9:93:f4:a4:61:
eb:f2:1e:81:2e:a5:36:ee:e9:b7:eb:35:de:21:ab:
62:78:47:e9:bd:8d:88:64:69:c0:a2:5c:20:91:f6:
d5:fb:6a:3d:28:7e:42:89:2f:e3:2c:d7:b3:84:bd:
05:0e:c1:2e:b6:3f:e5:90:a5:c2:f4:e1:c3:8e:bb:
96:17:8c:c3:94:f5:e5:07:bd:af:5a:ca:f6:5c:a9:
04:67:34:35:42:ce:0b:b0:82:6c:2a:64:b8:02:d8:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:74:EE:29:EA:71:A6:F1:23:E8:0C:BD:E2:B3:5D:3D:B9:85:9A
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f5:06:14:33:bc:27:4e:95:1b:54:dc:e3:c9:78:95:35:69:
51:af:0d:4d:84:f9:82:0c:db:87:21:82:55:59:91:7a:53:99:
90:22:54:4b:0b:3f:38:4b:8c:7b:d7:58:7a:26:da:6c:32:0c:
e4:b1:78:59:47:f0:68:c2:7a:0a:9d:72:36:55:f8:80:35:ed:
e7:f0:8a:64:6c:7c:bf:3c:14:74:14:a5:7d:ff:63:c6:bb:f2:
ba:43:c8:8f:13:34:15:37:65:f6:69:ad:12:98:ee:69:21:4e:
19:06:17:b8:5e:d5:ed:7a:51:d5:ac:8b:dd:75:f2:c0:92:15:
81:bf:54:6b:e3:fa:83:7a:3e:c1:35:dc:51:96:65:48:07:7d:
5f:be:e2:94:d4:f4:b7:11:a7:34:2d:55:54:44:0c:a3:2e:dc:
78:9d:da:97:90:5d:9e:61:28:a7:58:59:e4:48:a5:55:19:b6:
e8:6e:dd:e2:aa:1f:61:b0:f1:4d:77:47:07:71:a0:6d:c7:c9:
e8:6b:24:2a:3a:3e:a3:71:be:90:e9:fa:14:b7:e5:7c:fa:eb:
23:85:54:f4:e0:62:fc:5e:43:66:a3:80:0c:01:0f:6a:56:a9:
48:7c:f7:ea:9b:7c:7c:eb:17:93:cf:fb:f2:bb:38:69:37:cf:
2b:4a:2e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD0+3BM6R48gDiixaYMtd5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmMxNWNhOTAzZDdkMjU0NTNlYWViNWY3MjRhMDRlM2Fh
NjU5MDgwHhcNMjYxMDAxMDEwMTU0WhcNMjYxMDAyMDEwMTU0WjAzMTEwLwYDVQQD
EyhmYmIyNzRlZTI5ZWE3MWE2ZjEyM2U4MGNiZGUyYjM1ZDNkYjk4NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2WJV7aipX4Uu8OSDWOE2wVpbK1P
YJ2UkcnxM+sQw9lGDSvHLkQl/5jKS+/yuCA4kkjin5tnGChpoepfwL8x+jmMuqMZ
6q7rKbDl6Y+L0Hr9Nkfirka7utgJ6n2mpbMmoNBL1QG6ctmbFT4IRBtzyQiXl7mW
4hjicXlFaYlRKwQP1iFizrxmpWV803hMswbwfTdx1BSz/YR/oyVbEhwb2ZP0pGHr
8h6BLqU27um36zXeIatieEfpvY2IZGnAolwgkfbV+2o9KH5CiS/jLNezhL0FDsEu
tj/lkKXC9OHDjruWF4zDlPXlB72vWsr2XKkEZzQ1Qs4LsIJsKmS4AtgHqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuydO4p6nGm8SPoDL3is109uYWaMB8GA1UdIwQY
MBaAFF1sFcqQPX0lRT6utfckoE46plkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQt
M2IzNGMyM2I5YzVhLzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQtM2IzNGMyM2I5YzVh
LzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvUGFDO8
J06VG1Tc48l4lTVpUa8NTYT5ggzbhyGCVVmRelOZkCJUSws/OEuMe9dYeibabDIM
5LF4WUfwaMJ6Cp1yNlX4gDXt5/CKZGx8vzwUdBSlff9jxrvyukPIjxM0FTdl9mmt
EpjuaSFOGQYXuF7V7XpR1ayL3XXywJIVgb9Ua+P6g3o+wTXcUZZlSAd9X77ilNT0
txGnNC1VVEQMoy7ceJ3al5BdnmEop1hZ5EilVRm26G7d4qofYbDxTXdHB3GgbcfJ
6GskKjo+o3G+kOn6FLflfPrrI4VU9OBi/F5DZqOADAEPalapSHz36pt8fOsXk8/7
8rs4aTfPK0ou9g==
-----END CERTIFICATE-----
Generated at Thu Oct 1 12:34:50 2026 by rpki-client