Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: wpxRVSUkhFEOw+bPZy6cHRAzfvK4thveqLTKcqsCNNQ=
Subject key identifier: 84:35:54:B2:0D:2F:55:33:DE:39:BF:DC:79:91:D5:76:12:68:62:F8
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 01A08C0D1FBDD12DE608E9E1C77AAC9F1257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1A58
Signing time: Thu 10 Sep 2026 16:01:05 +0000
Manifest this update: Thu 10 Sep 2026 16:01:05 +0000
Manifest next update: Fri 11 Sep 2026 16:01:05 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: b2OvrwS5fdlnhd8jiScteBrMJzo.roa (hash: 2y9dXhwloiTIsuknPn5cIK/PWnisQw1xqs5MGBYxLGI=)
3: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
4: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: SXj3bHj4CwiTPFUfKLtz1HztgB6ZyxdbSZxD6YOpvcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:1f:bd:d1:2d:e6:08:e9:e1:c7:7a:ac:9f:12:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Sep 10 16:01:05 2026 GMT
Not After : Sep 11 16:01:05 2026 GMT
Subject: CN=843554b20d2f5533de39bfdc7991d576126862f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:8f:ee:03:a3:35:0d:92:d9:b8:82:b7:fe:
85:83:e9:c2:3c:43:d7:0f:08:26:7b:d4:93:9a:13:
4b:ab:2e:73:f2:d5:f7:b5:fd:95:a5:79:57:7a:0c:
22:57:61:54:05:89:be:56:c9:38:75:28:4e:7c:ee:
cd:ba:6e:ab:fc:41:17:d3:7b:dc:e9:55:88:22:7e:
77:a5:1a:57:d2:e6:52:79:6e:33:ab:b4:e4:6d:eb:
a3:2a:dd:52:0b:2e:3b:ac:60:fc:ea:9a:44:35:89:
0d:8f:a8:24:28:0d:fe:f5:29:b8:12:d6:24:66:bd:
d0:a5:6d:69:69:ca:71:09:a9:aa:9e:51:81:dd:e9:
c8:99:8b:11:0b:ba:07:e3:6e:ed:d8:66:e3:d1:93:
d8:25:6e:9e:f7:82:1d:77:4b:23:ac:4c:c7:ba:06:
b0:7b:42:d5:33:f8:98:47:50:c8:33:33:59:b5:ae:
5f:57:bd:60:3e:4b:0d:b6:a7:b5:ba:16:1d:df:98:
fe:22:66:33:20:55:5c:71:ea:8f:a8:6b:b2:bd:8f:
e7:53:8c:78:5f:d2:fd:40:52:50:16:88:7c:56:e6:
c4:4b:89:6d:5b:98:c9:39:0a:e1:61:e3:f6:a9:b6:
82:d0:26:a0:f9:bb:76:40:5d:86:ec:d0:69:8e:e3:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:35:54:B2:0D:2F:55:33:DE:39:BF:DC:79:91:D5:76:12:68:62:F8
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:96:dd:b5:a4:12:25:5e:fd:60:21:80:53:2f:92:ab:de:cc:
5a:bf:f9:47:df:9a:66:fa:82:67:27:e0:74:d2:56:b0:5d:63:
d9:5d:7d:88:87:06:ce:61:5e:fa:b4:94:a5:9d:05:30:da:5c:
81:1b:65:c7:ca:4c:1e:98:6d:e7:20:eb:3a:33:24:cd:81:a5:
50:8c:ec:a7:bf:f3:e8:1c:8d:50:b2:aa:e9:bc:7c:52:0b:95:
bc:5e:7a:cc:49:38:f6:9f:4e:4f:b9:3d:81:ec:00:74:e0:98:
fa:46:9a:15:c7:b8:ff:05:aa:06:ce:5b:57:7e:f3:74:66:3b:
2b:d9:e0:90:c8:ed:d2:e5:be:e1:a4:e4:fa:01:b8:fc:92:e8:
62:92:12:f1:79:d2:57:e2:6c:dc:92:04:47:cc:38:0a:ae:09:
12:1f:80:75:be:c6:67:0e:3a:10:8e:7e:7a:c3:24:3b:4e:a9:
80:af:0a:4d:7b:d9:c2:ab:51:26:c1:a7:62:44:06:c4:f1:dc:
cc:23:52:c7:35:94:7b:aa:b8:b0:ef:b6:aa:ee:82:31:bb:24:
5a:6f:38:12:a4:f7:89:38:57:4a:43:76:e3:25:33:04:f7:c7:
a0:9c:3b:db:6f:6d:d8:5c:51:21:9f:fc:ce:77:61:a1:b0:5f:
62:ed:c2:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDR+90S3mCOnhx3qsnxJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjYwOTEwMTYwMTA1WhcNMjYwOTExMTYwMTA1WjAzMTEwLwYDVQQD
Eyg4NDM1NTRiMjBkMmY1NTMzZGUzOWJmZGM3OTkxZDU3NjEyNjg2MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wSP7gOjNQ2S2biCt/6Fg+nCPEPX
Dwgme9STmhNLqy5z8tX3tf2VpXlXegwiV2FUBYm+Vsk4dShOfO7Num6r/EEX03vc
6VWIIn53pRpX0uZSeW4zq7TkbeujKt1SCy47rGD86ppENYkNj6gkKA3+9Sm4EtYk
Zr3QpW1pacpxCamqnlGB3enImYsRC7oH427t2Gbj0ZPYJW6e94Idd0sjrEzHugaw
e0LVM/iYR1DIMzNZta5fV71gPksNtqe1uhYd35j+ImYzIFVcceqPqGuyvY/nU4x4
X9L9QFJQFoh8VubES4ltW5jJOQrhYeP2qbaC0Cag+bt2QF2G7NBpjuMJrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ1VLINL1Uz3jm/3HmR1XYSaGL4MB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpbdtaQS
JV79YCGAUy+Sq97MWr/5R9+aZvqCZyfgdNJWsF1j2V19iIcGzmFe+rSUpZ0FMNpc
gRtlx8pMHpht5yDrOjMkzYGlUIzsp7/z6ByNULKq6bx8UguVvF56zEk49p9OT7k9
gewAdOCY+kaaFce4/wWqBs5bV37zdGY7K9ngkMjt0uW+4aTk+gG4/JLoYpIS8XnS
V+Js3JIER8w4Cq4JEh+Adb7GZw46EI5+esMkO06pgK8KTXvZwqtRJsGnYkQGxPHc
zCNSxzWUe6q4sO+2qu6CMbskWm84EqT3iThXSkN24yUzBPfHoJw7229t2FxRIZ/8
zndhobBfYu3CiA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:30:50 2026 by rpki-client