Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: I+BjdnRTqOwgC1e1Fp0PMjC2C+EZ8OZWcOTdqSJ73DM=
Subject key identifier: AB:A7:E9:97:C6:5F:D6:2B:DB:06:D9:42:36:69:C4:F5:85:8A:72:87
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A06EA7C8265127B455CACC5FD4A46A7CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 082E
Signing time: Fri 04 Sep 2026 23:01:24 +0000
Manifest this update: Fri 04 Sep 2026 23:01:24 +0000
Manifest next update: Sat 05 Sep 2026 23:01:24 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: LwHP5JJ0LI7xYCM76F1kESiZVmRIlhd7A+VnqM7o/80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:c8:26:51:27:b4:55:ca:cc:5f:d4:a4:6a:7c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Sep 4 23:01:24 2026 GMT
Not After : Sep 5 23:01:24 2026 GMT
Subject: CN=aba7e997c65fd62bdb06d9423669c4f5858a7287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:f0:df:5c:c8:ed:89:f4:ef:ab:41:a9:09:
02:8e:d4:84:c6:a8:e1:4d:eb:ad:0f:a9:de:b9:90:
99:42:73:df:95:d1:55:40:ef:54:ab:78:e9:93:5a:
fe:07:2a:64:31:80:24:c9:c1:b5:bd:f9:c3:c3:38:
14:41:38:24:cf:81:65:5b:5e:d7:12:b3:4a:09:d0:
19:98:08:ac:15:54:47:44:c2:5c:95:39:04:21:82:
26:02:d6:66:5d:e5:19:9a:eb:16:f4:fe:7c:26:9c:
ca:f4:a7:1e:25:86:72:77:dc:c5:8a:ff:b1:76:d4:
ba:68:80:9c:66:3d:62:b6:4e:73:0d:93:36:ee:4c:
d0:18:9c:4a:31:51:8b:d8:e2:8b:72:11:0c:2f:15:
db:83:85:6a:c0:86:42:56:56:c4:43:fc:b8:d6:51:
59:86:52:7a:31:16:bd:2a:7a:9e:5f:b4:84:9e:72:
b4:61:df:19:54:46:f6:a6:59:88:0f:c8:08:9a:fc:
a6:89:97:b3:b4:2b:fb:7c:db:ad:2e:aa:f7:3e:04:
6b:30:37:9f:24:c6:ad:33:a4:47:0c:09:ce:ab:17:
4c:b1:1e:d8:9a:6c:71:df:6e:4b:ec:c0:c1:1d:af:
95:34:0a:ed:a3:93:92:e3:ac:ec:ad:b5:c6:a7:44:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A7:E9:97:C6:5F:D6:2B:DB:06:D9:42:36:69:C4:F5:85:8A:72:87
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4a:81:f2:37:ab:d0:d2:ea:dd:e5:bc:18:bf:bc:39:c9:2a:
31:65:29:de:72:f4:a5:44:ed:ee:6d:a7:02:8a:9b:1b:25:d4:
95:32:e8:cd:fd:f2:09:e1:7d:10:af:24:e3:f0:18:04:f6:da:
a5:91:b5:12:6b:a6:da:30:bb:b9:7b:e6:b1:d4:7c:63:13:3f:
92:f9:a4:8f:ab:d9:82:41:d8:aa:b4:54:d5:68:d5:d7:54:d3:
72:0f:55:f2:6c:33:83:e0:f4:e9:cf:68:42:32:9a:86:10:b3:
0e:52:eb:22:71:99:db:f3:71:90:12:48:52:e4:94:0b:11:fd:
ab:f5:1e:b3:67:12:c8:95:be:44:b8:ae:6f:8e:c9:ac:b6:5c:
34:f5:89:8b:30:19:9c:86:ba:31:8e:1f:9c:14:3f:20:ea:7e:
dd:d7:2c:38:49:9d:b1:50:25:7e:30:b3:98:0e:4b:f3:15:a1:
0c:ff:7d:35:b1:4e:24:cf:86:8f:c1:46:27:ff:1f:7c:4b:24:
56:81:e3:ef:70:9a:ba:cb:0c:f9:9f:08:ef:75:56:0d:38:fd:
e7:e1:2a:32:3d:e1:b6:af:25:63:45:9d:4f:47:40:74:ca:2c:
66:82:aa:c4:68:98:86:b5:a1:a9:6a:e9:37:92:d5:69:09:01:
c9:ec:64:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup8gmUSe0VcrMX9Skanz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjYwOTA0MjMwMTI0WhcNMjYwOTA1MjMwMTI0WjAzMTEwLwYDVQQD
EyhhYmE3ZTk5N2M2NWZkNjJiZGIwNmQ5NDIzNjY5YzRmNTg1OGE3Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqvw31zI7Yn076tBqQkCjtSExqjh
TeutD6neuZCZQnPfldFVQO9Uq3jpk1r+BypkMYAkycG1vfnDwzgUQTgkz4FlW17X
ErNKCdAZmAisFVRHRMJclTkEIYImAtZmXeUZmusW9P58JpzK9KceJYZyd9zFiv+x
dtS6aICcZj1itk5zDZM27kzQGJxKMVGL2OKLchEMLxXbg4VqwIZCVlbEQ/y41lFZ
hlJ6MRa9KnqeX7SEnnK0Yd8ZVEb2plmID8gImvymiZeztCv7fNutLqr3PgRrMDef
JMatM6RHDAnOqxdMsR7Ymmxx325L7MDBHa+VNArto5OS46zsrbXGp0REFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKun6ZfGX9Yr2wbZQjZpxPWFinKHMB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkqB8jer
0NLq3eW8GL+8OckqMWUp3nL0pUTt7m2nAoqbGyXUlTLozf3yCeF9EK8k4/AYBPba
pZG1Emum2jC7uXvmsdR8YxM/kvmkj6vZgkHYqrRU1WjV11TTcg9V8mwzg+D06c9o
QjKahhCzDlLrInGZ2/NxkBJIUuSUCxH9q/Ues2cSyJW+RLiub47JrLZcNPWJizAZ
nIa6MY4fnBQ/IOp+3dcsOEmdsVAlfjCzmA5L8xWhDP99NbFOJM+Gj8FGJ/8ffEsk
VoHj73CaussM+Z8I73VWDTj95+EqMj3htq8lY0WdT0dAdMosZoKqxGiYhrWhqWrp
N5LVaQkByexkYA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:35 2026 by rpki-client