Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File: xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier: kIWUE0ytXfFxfF4tIlIxLNNMZLdkSvCrpmIbffzeDRc=
Subject key identifier: 7C:F4:2F:47:BF:CB:1D:72:D2:3F:F2:E7:9F:58:06:77:75:BA:11:E2
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer: /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial: 01A0E81C5CA1D221E488DAACF7C78F7CA98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number: 01BE
Signing time: Mon 28 Sep 2026 13:02:47 +0000
Manifest this update: Mon 28 Sep 2026 13:02:47 +0000
Manifest next update: Tue 29 Sep 2026 13:02:47 +0000
Files and hashes: 1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: s3sVSW+G0OpUgC5GMR1mY5HajZf0hQP4Iu4uMca90Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:5c:a1:d2:21:e4:88:da:ac:f7:c7:8f:7c:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Validity
Not Before: Sep 28 13:02:47 2026 GMT
Not After : Sep 29 13:02:47 2026 GMT
Subject: CN=7cf42f47bfcb1d72d23ff2e79f58067775ba11e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:0d:59:15:b2:79:08:dc:eb:62:74:7b:bb:
65:e0:97:84:7c:70:c5:da:85:6a:0c:80:97:4b:de:
28:9d:5c:a1:b5:fe:8b:80:98:e7:6e:aa:c3:28:97:
7b:2c:04:86:e3:12:52:8b:f7:78:ac:b8:a6:dc:3e:
32:37:d7:bc:71:c6:ed:18:ba:d9:9a:82:6b:ff:db:
51:ea:68:e6:96:bd:a6:2a:59:11:3e:16:f7:2d:b3:
a4:a2:4e:fa:cd:cf:1e:6b:08:31:02:66:24:e8:21:
0a:73:0d:a9:51:ae:e1:0c:cd:49:e0:a4:66:44:e3:
28:f0:ec:e8:70:75:ae:6c:01:cc:12:47:7c:5b:c0:
8f:a0:00:a5:56:e2:29:bc:17:92:e7:32:9f:98:d8:
7a:dd:8c:bd:b7:15:eb:9c:c2:0d:a1:0e:69:0c:8a:
cf:0e:a1:f4:7a:1f:ae:9a:dd:4a:43:c9:81:37:b7:
31:51:48:b3:d1:f2:de:f0:de:1c:47:b3:7d:c6:8a:
52:7c:98:9e:81:86:b2:89:7b:15:63:31:9a:79:64:
fb:59:35:fd:1c:73:94:40:54:9c:e6:d6:c2:e1:1c:
da:63:57:eb:45:25:28:c3:d6:11:ab:d7:15:cf:0f:
6b:7e:6b:93:b1:d6:78:e7:6c:83:ce:49:e5:4b:fc:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F4:2F:47:BF:CB:1D:72:D2:3F:F2:E7:9F:58:06:77:75:BA:11:E2
X509v3 Authority Key Identifier:
keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b3:24:86:0b:23:c1:cf:b3:4c:89:63:4c:d9:03:f1:e3:48:
67:b5:06:0a:ee:0b:ea:56:0b:f4:c1:30:0d:c5:f9:27:67:f8:
f4:34:58:9f:7b:53:bc:c5:c8:b6:ee:0f:9d:b4:7c:84:fa:1a:
cf:64:dd:2d:52:82:3b:66:86:44:06:f9:be:86:8a:b2:bd:02:
f8:16:22:2a:99:62:6f:d8:f8:7f:b2:9e:96:0a:ec:99:6c:ff:
fe:44:7e:60:6b:2f:ac:aa:9f:56:54:6d:b0:65:c2:ed:78:b9:
e2:ca:48:59:38:38:5b:40:c0:2c:0d:bd:67:8b:65:5e:4b:c9:
33:98:3c:9f:83:78:65:6f:84:a1:33:06:3d:c6:9b:c9:25:5e:
09:40:c1:eb:79:57:78:3e:b8:ca:34:ef:35:36:2c:85:5a:4a:
77:7b:73:1e:9e:0d:72:05:67:b0:b6:4f:df:88:ce:d7:06:e9:
2d:c2:20:46:5a:9d:04:88:e2:66:e0:ff:62:c8:dc:97:d1:5f:
a7:bd:15:1e:20:17:a2:45:7a:61:63:da:84:4b:4c:4c:0a:93:
13:e0:3c:18:12:3d:21:21:7f:86:e9:9a:f3:1b:39:18:ec:54:
a1:36:35:7b:42:f6:01:08:90:67:90:57:7e:84:1b:bb:aa:09:
85:b3:4e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHFyh0iHkiNqs98ePfKmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NjhlZjc4YzNjZmU5ODVlMDFlNzUzZDVmNDVlYTY3NTEx
YjllNDIwHhcNMjYwOTI4MTMwMjQ3WhcNMjYwOTI5MTMwMjQ3WjAzMTEwLwYDVQQD
Eyg3Y2Y0MmY0N2JmY2IxZDcyZDIzZmYyZTc5ZjU4MDY3Nzc1YmExMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbgNWRWyeQjc62J0e7tl4JeEfHDF
2oVqDICXS94onVyhtf6LgJjnbqrDKJd7LASG4xJSi/d4rLim3D4yN9e8ccbtGLrZ
moJr/9tR6mjmlr2mKlkRPhb3LbOkok76zc8eawgxAmYk6CEKcw2pUa7hDM1J4KRm
ROMo8OzocHWubAHMEkd8W8CPoAClVuIpvBeS5zKfmNh63Yy9txXrnMINoQ5pDIrP
DqH0eh+umt1KQ8mBN7cxUUiz0fLe8N4cR7N9xopSfJiegYayiXsVYzGaeWT7WTX9
HHOUQFSc5tbC4RzaY1frRSUow9YRq9cVzw9rfmuTsdZ452yDzknlS/y2OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz0L0e/yx1y0j/y559YBnd1uhHiMB8GA1UdIwQY
MBaAFMVo73jDz+mF4B51PV9F6mdRG55CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hZjA2MjAtZGQ5ZS00N2U2LWE4NzQt
MjY1MDExZjEwNGQ2LzEveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hZjA2MjAtZGQ5ZS00N2U2LWE4NzQtMjY1MDExZjEwNGQ2
LzEveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLMkhgsj
wc+zTIljTNkD8eNIZ7UGCu4L6lYL9MEwDcX5J2f49DRYn3tTvMXItu4PnbR8hPoa
z2TdLVKCO2aGRAb5voaKsr0C+BYiKplib9j4f7KelgrsmWz//kR+YGsvrKqfVlRt
sGXC7Xi54spIWTg4W0DALA29Z4tlXkvJM5g8n4N4ZW+EoTMGPcabySVeCUDB63lX
eD64yjTvNTYshVpKd3tzHp4NcgVnsLZP34jO1wbpLcIgRlqdBIjiZuD/Ysjcl9Ff
p70VHiAXokV6YWPahEtMTAqTE+A8GBI9ISF/huma8xs5GOxUoTY1e0L2AQiQZ5BX
foQbu6oJhbNOPw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:34:40 2026 by rpki-client