Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: 7Qd/a6L8C/+5dHYVgIgiJV+41TKF6s+SCFf3oyZ4ZDE=
Subject key identifier: B2:91:D5:21:FA:14:0C:8D:6D:CD:8E:A8:48:42:5D:16:F4:3D:EF:75
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 01A08C43E732518F334BA6973532B1EF83A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 17:00:55 +0000
Manifest this update: Thu 10 Sep 2026 17:00:55 +0000
Manifest next update: Fri 11 Sep 2026 17:00:55 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: 6Y04ZsHwklW8uiV/Te6m68WhNcDgGGomBBT+3Kiyi6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:e7:32:51:8f:33:4b:a6:97:35:32:b1:ef:83:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Sep 10 17:00:55 2026 GMT
Not After : Sep 11 17:00:55 2026 GMT
Subject: CN=b291d521fa140c8d6dcd8ea848425d16f43def75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:36:c1:5e:6d:80:e3:ad:e7:f0:50:6b:83:
8f:cd:e7:b0:e6:cc:9d:e6:5a:47:0f:7f:66:ef:f5:
d4:0a:43:f3:f9:26:ef:34:79:86:aa:b8:71:05:4e:
a9:d5:23:46:1b:fa:09:f3:1d:c4:62:1a:be:96:f5:
8e:83:13:ce:29:c4:f6:27:05:70:c8:40:76:42:71:
9a:9a:7e:29:2d:7f:1e:12:03:37:4e:eb:04:6b:ae:
ef:e2:6e:86:b8:3c:4c:34:89:c3:c2:7c:6d:05:83:
af:9c:e7:3d:b0:81:f6:9a:78:02:53:f7:b7:fb:88:
2e:64:f5:63:85:62:4a:54:43:e4:c9:a0:0d:58:b7:
ca:d4:18:f5:f9:89:cf:0b:45:ff:f3:f1:4b:5f:5c:
99:78:31:a7:b0:ac:65:61:aa:dd:fd:ae:9d:c5:df:
13:de:d6:55:42:06:72:ca:34:14:19:fe:b5:4e:9f:
61:ce:e0:44:9e:fb:15:7d:3c:bd:8d:9c:ac:07:78:
66:1c:e0:82:e1:e3:9a:9c:e5:14:63:5e:6d:c8:4e:
0c:5b:cf:e5:ad:f2:16:59:9e:7a:b3:81:9d:1c:e7:
e2:eb:c1:12:eb:f4:6c:bb:d6:34:bd:87:8c:9a:21:
cd:33:ec:15:d9:99:50:ca:75:73:a6:b0:c5:35:59:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:91:D5:21:FA:14:0C:8D:6D:CD:8E:A8:48:42:5D:16:F4:3D:EF:75
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:eb:52:77:0a:1f:a3:d3:ab:18:6e:de:5b:af:1e:8e:64:50:
07:b2:40:0d:a0:7d:37:39:54:7a:18:0e:77:0e:66:04:42:52:
a8:36:39:9b:ba:ee:f7:27:c1:24:79:36:ea:0c:c1:0b:52:60:
4d:83:ed:9e:e4:01:23:4c:0a:34:ba:10:9e:d7:5c:3a:af:cd:
40:f6:cf:77:3b:44:06:d1:bb:8c:db:94:1a:c0:b2:67:5f:67:
b3:31:77:65:f1:50:8c:05:94:f3:33:d4:99:ff:f1:80:9e:cb:
e1:a2:a9:66:cf:49:e3:3d:36:71:61:74:32:1e:84:21:36:bc:
4a:6c:87:0b:7b:93:a5:81:0b:7a:e5:ac:0c:de:11:6c:57:b9:
ea:c7:35:cb:df:9e:c1:d2:c7:ed:aa:b4:f3:87:2f:18:0c:fc:
5d:b2:75:87:66:e4:65:73:12:50:c6:e6:25:8c:36:04:69:b2:
df:da:bc:d6:05:d9:a4:d3:77:df:6c:5e:3e:3a:6e:9a:07:87:
a7:bd:cb:32:47:65:0d:50:ba:7e:7d:05:ab:89:9c:95:52:5c:
e5:b3:f6:2a:ef:bf:9e:e4:ea:36:7e:6b:bf:02:be:0f:a2:1b:
7f:fc:f6:b8:0e:80:ed:0d:71:f8:ba:7d:6e:9f:26:19:23:f5:
6b:c9:36:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ+cyUY8zS6aXNTKx74OpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0
Y2M4ZWQwHhcNMjYwOTEwMTcwMDU1WhcNMjYwOTExMTcwMDU1WjAzMTEwLwYDVQQD
EyhiMjkxZDUyMWZhMTQwYzhkNmRjZDhlYTg0ODQyNWQxNmY0M2RlZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t82wV5tgOOt5/BQa4OPzeew5syd
5lpHD39m7/XUCkPz+SbvNHmGqrhxBU6p1SNGG/oJ8x3EYhq+lvWOgxPOKcT2JwVw
yEB2QnGamn4pLX8eEgM3TusEa67v4m6GuDxMNInDwnxtBYOvnOc9sIH2mngCU/e3
+4guZPVjhWJKVEPkyaANWLfK1Bj1+YnPC0X/8/FLX1yZeDGnsKxlYard/a6dxd8T
3tZVQgZyyjQUGf61Tp9hzuBEnvsVfTy9jZysB3hmHOCC4eOanOUUY15tyE4MW8/l
rfIWWZ56s4GdHOfi68ES6/Rsu9Y0vYeMmiHNM+wV2ZlQynVzprDFNVnNoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKR1SH6FAyNbc2OqEhCXRb0Pe91MB8GA1UdIwQY
MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt
YWQ5ZDVkYjBmMDk5LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5
LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACutSdwof
o9OrGG7eW68ejmRQB7JADaB9NzlUehgOdw5mBEJSqDY5m7ru9yfBJHk26gzBC1Jg
TYPtnuQBI0wKNLoQntdcOq/NQPbPdztEBtG7jNuUGsCyZ19nszF3ZfFQjAWU8zPU
mf/xgJ7L4aKpZs9J4z02cWF0Mh6EITa8SmyHC3uTpYELeuWsDN4RbFe56sc1y9+e
wdLH7aq084cvGAz8XbJ1h2bkZXMSUMbmJYw2BGmy39q81gXZpNN332xePjpumgeH
p73LMkdlDVC6fn0Fq4mclVJc5bP2Ku+/nuTqNn5rvwK+D6Ibf/z2uA6A7Q1x+Lp9
bp8mGSP1a8k2Zg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:57:47 2026 by rpki-client