Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: GY5XOvpjuOd2whyHuaso9tMy4dtYTj8YDfW8zv23aok=
Subject key identifier: 69:52:19:D5:53:4E:AC:B3:78:12:15:F7:F7:4B:C9:BE:D8:7F:62:ED
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 01A0BF1E634B7578677C94D939B918A98BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 19F6
Signing time: Sun 20 Sep 2026 14:00:34 +0000
Manifest this update: Sun 20 Sep 2026 14:00:34 +0000
Manifest next update: Mon 21 Sep 2026 14:00:34 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: gQuBeY0RZW6UqkWX0lFNlb1CgXWm/peEy6zOAtuPMws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:63:4b:75:78:67:7c:94:d9:39:b9:18:a9:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Sep 20 14:00:34 2026 GMT
Not After : Sep 21 14:00:34 2026 GMT
Subject: CN=695219d5534eacb3781215f7f74bc9bed87f62ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:9f:c4:c1:57:e4:06:33:07:3d:ee:bd:76:
01:41:3f:5b:7b:2d:a1:67:1f:1e:cf:90:6f:dc:d6:
8d:bb:b9:d0:f1:5d:69:af:5f:0e:bc:9b:69:d6:41:
55:31:cb:08:8b:d5:e4:3a:e0:f8:8a:5a:5c:1f:f2:
22:fe:9a:9a:30:22:17:d3:17:44:4c:ad:db:7a:b9:
b9:aa:7f:1a:89:19:46:4b:5d:8e:3b:6e:08:b3:54:
48:ac:55:04:9b:2c:e9:9e:84:03:41:f4:e5:be:7c:
3e:70:2d:66:62:3b:90:77:d6:68:7c:30:66:00:77:
95:29:ea:29:2a:36:19:a9:13:21:02:0b:3a:8f:87:
f0:9a:bc:a4:e6:27:57:45:c6:5c:2e:44:4b:ab:64:
d7:49:06:0f:b5:25:84:2e:82:fe:fb:17:9e:66:7a:
18:8b:2b:b1:c5:97:bc:b7:a5:7a:00:0b:71:f2:4d:
b9:ce:8a:72:9c:51:e0:c6:60:48:44:8c:21:86:1d:
b0:8c:98:d6:c0:11:21:3b:75:15:5b:6a:04:81:88:
7a:e8:47:49:28:cc:2e:42:5c:78:95:7e:d9:7a:1a:
78:ae:96:89:43:50:55:7d:72:51:01:68:f1:ea:1f:
d7:62:e5:56:2a:42:89:8c:a6:e1:ba:37:e4:1a:f3:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:52:19:D5:53:4E:AC:B3:78:12:15:F7:F7:4B:C9:BE:D8:7F:62:ED
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ce:b9:ee:f6:d4:17:ac:85:39:0d:19:7b:17:85:33:36:91:
92:95:8c:d3:04:18:5b:33:4a:a3:99:8a:8d:8c:1d:ac:d0:93:
06:65:f2:24:3f:d0:a9:2a:02:d2:d9:ce:88:87:c8:58:4e:87:
c6:3a:8c:42:0e:be:ce:18:2c:b5:b0:59:ff:33:24:5a:6b:ad:
6e:d8:c0:46:9e:b3:89:75:7e:ea:c4:7b:b1:af:d4:a0:61:00:
a1:6d:c7:5d:ab:7a:89:8b:7c:94:02:0c:0e:99:21:68:5e:0f:
d1:f3:31:75:8c:cb:b4:8f:ce:c8:c8:56:4c:09:f9:0e:e8:47:
7a:41:54:0a:a1:15:86:c3:c6:9e:62:3e:8c:c5:75:c0:c4:79:
20:ab:f7:ed:29:db:e4:47:12:0f:18:4a:de:20:0d:cc:69:36:
d2:a2:6e:52:aa:f1:04:50:81:d2:a1:26:5e:42:11:2d:d6:57:
7d:11:4f:f6:db:02:ab:0c:6d:5b:08:a6:09:14:07:a7:71:aa:
60:98:2c:5c:69:b1:e9:1e:7e:2e:e5:c3:84:70:73:8d:06:9d:
ef:87:c6:3c:9e:ee:c4:d1:f6:4e:0c:9f:14:7f:12:f6:75:7c:
b8:3d:e0:a9:04:a5:b8:b5:0f:8c:12:38:d3:81:b3:20:ea:05:
c7:67:4b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/HmNLdXhnfJTZObkYqYvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTAxOWNiNTRkNzAwYTFiMWM1MGU4ZjkwZWJlZTJhNWVl
YTU3YmIwHhcNMjYwOTIwMTQwMDM0WhcNMjYwOTIxMTQwMDM0WjAzMTEwLwYDVQQD
Eyg2OTUyMTlkNTUzNGVhY2IzNzgxMjE1ZjdmNzRiYzliZWQ4N2Y2MmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l+fxMFX5AYzBz3uvXYBQT9bey2h
Zx8ez5Bv3NaNu7nQ8V1pr18OvJtp1kFVMcsIi9XkOuD4ilpcH/Ii/pqaMCIX0xdE
TK3berm5qn8aiRlGS12OO24Is1RIrFUEmyzpnoQDQfTlvnw+cC1mYjuQd9ZofDBm
AHeVKeopKjYZqRMhAgs6j4fwmryk5idXRcZcLkRLq2TXSQYPtSWELoL++xeeZnoY
iyuxxZe8t6V6AAtx8k25zopynFHgxmBIRIwhhh2wjJjWwBEhO3UVW2oEgYh66EdJ
KMwuQlx4lX7Zehp4rpaJQ1BVfXJRAWjx6h/XYuVWKkKJjKbhujfkGvPeuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlSGdVTTqyzeBIV9/dLyb7Yf2LtMB8GA1UdIwQY
MBaAFMWgGctU1wChscUOj5Dr7ipe6le7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQt
MzFhM2VjZjFiZGI2LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQtMzFhM2VjZjFiZGI2
LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8657vbU
F6yFOQ0ZexeFMzaRkpWM0wQYWzNKo5mKjYwdrNCTBmXyJD/QqSoC0tnOiIfIWE6H
xjqMQg6+zhgstbBZ/zMkWmutbtjARp6ziXV+6sR7sa/UoGEAoW3HXat6iYt8lAIM
DpkhaF4P0fMxdYzLtI/OyMhWTAn5DuhHekFUCqEVhsPGnmI+jMV1wMR5IKv37Snb
5EcSDxhK3iANzGk20qJuUqrxBFCB0qEmXkIRLdZXfRFP9tsCqwxtWwimCRQHp3Gq
YJgsXGmx6R5+LuXDhHBzjQad74fGPJ7uxNH2TgyfFH8S9nV8uD3gqQSluLUPjBI4
04GzIOoFx2dL2w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:36:06 2026 by rpki-client