Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: wv6pkiZu8iwl6BzqVmwr6rUVCyG6Ps2QndOA4OIeJ00=
Subject key identifier: FA:E7:FD:86:9E:F0:BE:56:06:F0:3C:C0:1B:2C:41:F2:21:48:41:17
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 01A03036B78005AA7769DCA9F650CCCCDAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 19AC
Signing time: Sun 23 Aug 2026 20:01:27 +0000
Manifest this update: Sun 23 Aug 2026 20:01:27 +0000
Manifest next update: Mon 24 Aug 2026 20:01:27 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: 8nGB6mgmEPGabphxJNthvs/ZMAoawpipsbxORz8h5Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:30:36:b7:80:05:aa:77:69:dc:a9:f6:50:cc:cc:da:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Aug 23 20:01:27 2026 GMT
Not After : Aug 24 20:01:27 2026 GMT
Subject: CN=fae7fd869ef0be5606f03cc01b2c41f221484117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ae:af:58:7c:11:20:ab:ef:de:43:f2:da:72:
88:a7:7e:2b:b5:c3:72:45:ba:c0:17:cd:b1:83:9e:
23:d9:15:22:86:96:d2:e1:c5:22:8c:ad:51:eb:ab:
c7:f5:be:eb:a5:54:91:bb:ca:8c:26:a0:36:79:b1:
13:8d:c2:5a:11:94:42:a3:d0:2e:32:6c:e8:e3:e9:
a7:a1:dd:5d:80:66:7e:05:0e:d5:87:a6:d7:6b:ad:
73:7b:cf:68:24:aa:3d:fa:b1:37:ae:4a:fa:5d:30:
bb:36:c5:9a:b8:61:78:37:bb:65:1f:4d:0f:96:4f:
10:5b:2c:7b:b5:92:e8:a0:cd:d2:94:c9:54:d0:e7:
6e:be:e9:94:f5:0a:17:34:62:fe:7f:ae:8f:83:5e:
d8:2b:d5:e8:e7:d0:a9:64:66:d4:f0:94:f6:dd:e2:
53:de:71:fe:51:51:00:38:ca:ad:49:bd:0c:2d:44:
0f:48:e2:53:18:8a:53:52:a8:33:ac:3c:43:d6:ae:
4d:5d:20:82:1a:1d:ca:fe:db:18:a6:1b:78:6a:7f:
63:d0:6f:0f:1d:72:07:55:d8:1d:53:20:7b:fd:e1:
8f:52:9b:4c:81:a4:39:de:62:98:de:0d:15:e3:df:
a7:f9:0b:65:08:08:8f:44:9a:b0:aa:7d:e5:db:bd:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E7:FD:86:9E:F0:BE:56:06:F0:3C:C0:1B:2C:41:F2:21:48:41:17
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4c:e8:be:1a:9b:75:04:36:ed:6e:25:29:ea:4b:71:9e:70:
11:de:9f:4f:10:4b:61:97:16:df:7b:2c:f0:a5:b7:9a:07:f2:
c6:44:7c:67:86:e3:e7:4b:b4:5a:35:83:83:f6:5f:c8:9e:e7:
14:4c:7d:f5:5d:38:62:dd:52:31:85:55:79:be:ed:f1:20:0a:
17:ed:6f:03:97:b8:c2:ac:ad:0f:f3:ce:a6:8e:b7:d0:01:f9:
35:bc:9f:33:64:1e:d4:c0:ef:07:8e:ea:5a:76:6f:86:dc:1f:
de:80:e1:45:c0:4a:77:6d:9a:ae:04:85:40:4d:67:a4:cc:db:
90:5a:ad:ba:47:45:a2:ff:27:32:96:da:07:c5:ee:2e:c7:06:
e4:13:26:c8:29:3c:3c:8b:15:05:8b:16:2c:4b:a1:ce:53:51:
50:d3:ac:9a:b1:85:d8:94:74:74:95:76:2b:e4:30:4d:68:47:
82:60:4f:ee:0a:61:c8:2c:f4:1d:30:d5:3b:c5:36:a1:23:98:
ae:42:53:3b:e1:b1:3d:e5:43:6b:42:2c:2f:d4:a5:b8:76:12:
9c:7b:30:93:92:c2:c5:17:cf:43:7e:65:23:33:4f:0c:d7:1f:
9f:ba:e4:44:ed:55:7f:b5:59:8c:d3:7f:9b:26:a1:67:6a:f0:
b0:93:6b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAwNreABap3adyp9lDMzNr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTAxOWNiNTRkNzAwYTFiMWM1MGU4ZjkwZWJlZTJhNWVl
YTU3YmIwHhcNMjYwODIzMjAwMTI3WhcNMjYwODI0MjAwMTI3WjAzMTEwLwYDVQQD
EyhmYWU3ZmQ4NjllZjBiZTU2MDZmMDNjYzAxYjJjNDFmMjIxNDg0MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA866vWHwRIKvv3kPy2nKIp34rtcNy
RbrAF82xg54j2RUihpbS4cUijK1R66vH9b7rpVSRu8qMJqA2ebETjcJaEZRCo9Au
Mmzo4+mnod1dgGZ+BQ7Vh6bXa61ze89oJKo9+rE3rkr6XTC7NsWauGF4N7tlH00P
lk8QWyx7tZLooM3SlMlU0OduvumU9QoXNGL+f66Pg17YK9Xo59CpZGbU8JT23eJT
3nH+UVEAOMqtSb0MLUQPSOJTGIpTUqgzrDxD1q5NXSCCGh3K/tsYpht4an9j0G8P
HXIHVdgdUyB7/eGPUptMgaQ53mKY3g0V49+n+QtlCAiPRJqwqn3l271orwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrn/Yae8L5WBvA8wBssQfIhSEEXMB8GA1UdIwQY
MBaAFMWgGctU1wChscUOj5Dr7ipe6le7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQt
MzFhM2VjZjFiZGI2LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQtMzFhM2VjZjFiZGI2
LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEzovhqb
dQQ27W4lKepLcZ5wEd6fTxBLYZcW33ss8KW3mgfyxkR8Z4bj50u0WjWDg/ZfyJ7n
FEx99V04Yt1SMYVVeb7t8SAKF+1vA5e4wqytD/POpo630AH5NbyfM2Qe1MDvB47q
WnZvhtwf3oDhRcBKd22argSFQE1npMzbkFqtukdFov8nMpbaB8XuLscG5BMmyCk8
PIsVBYsWLEuhzlNRUNOsmrGF2JR0dJV2K+QwTWhHgmBP7gphyCz0HTDVO8U2oSOY
rkJTO+GxPeVDa0IsL9SluHYSnHswk5LCxRfPQ35lIzNPDNcfn7rkRO1Vf7VZjNN/
myahZ2rwsJNrXQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 22:37:47 2026 by rpki-client