
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: hfEzW+8bueHE1XQtFPWts55dJP4ylZZwzU/Tzaxd1fU=
Subject key identifier: 6A:12:85:1D:57:AC:34:6E:31:7B:76:F9:57:79:F6:EF:E7:57:46:31
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 01A03B27F79673F1D91D33B7EDE30B9E6AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 07A8
Signing time: Tue 25 Aug 2026 23:01:10 +0000
Manifest this update: Tue 25 Aug 2026 23:01:10 +0000
Manifest next update: Wed 26 Aug 2026 23:01:10 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: 1YSyXtCcE84W//8sa3cSBfgQaJL83j6JpydkMEDgIXQ=)
2: zzi8zjGe28pTyTWtNNeVC8-_dWE.asa (hash: QeR+Juy6P7hMJ8A5+I8ru+6te5JuUSLSPP0C9C3wehI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:27:f7:96:73:f1:d9:1d:33:b7:ed:e3:0b:9e:6a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Aug 25 23:01:10 2026 GMT
Not After : Aug 26 23:01:10 2026 GMT
Subject: CN=6a12851d57ac346e317b76f95779f6efe7574631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:a6:5d:6f:86:87:48:34:8f:70:62:cc:05:
bf:38:2a:95:ca:2b:82:27:1f:02:92:cf:ea:8f:bc:
2a:e3:f4:87:48:62:ca:4e:d0:8d:90:05:e7:57:f9:
4a:25:c5:ca:e1:18:c8:e0:57:70:48:15:6d:9f:8d:
fe:dc:84:b8:ca:c7:2c:91:35:12:a3:c7:a2:17:db:
a1:17:35:bc:9b:77:76:52:60:44:51:f4:8c:23:79:
3e:3e:12:d6:1d:8e:b1:f4:70:5d:de:b2:a6:53:97:
21:68:1c:18:75:32:44:ed:ce:3e:df:28:e5:14:db:
00:51:e2:a4:a3:15:c9:cb:bc:d2:42:b2:8a:e7:95:
3d:56:45:55:2e:4f:7b:43:4e:df:0d:fd:2d:a9:e9:
ef:e7:5d:6c:f1:4f:9b:26:df:dd:81:6e:7c:d9:4c:
10:b4:2c:2a:3b:94:db:c7:aa:62:56:1a:c8:ea:24:
11:5a:0a:3c:46:52:24:71:d8:d1:02:96:47:ff:96:
f4:68:9e:15:65:98:b1:bf:22:65:be:64:48:ea:22:
9a:0f:b1:75:3b:a9:61:64:9a:a9:68:51:a4:e4:b8:
08:d0:6c:ff:62:9d:fc:a3:c4:d4:e5:19:87:f9:25:
61:62:43:a3:2f:ce:a5:99:d0:ce:be:c2:a7:05:25:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:12:85:1D:57:AC:34:6E:31:7B:76:F9:57:79:F6:EF:E7:57:46:31
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9f:13:e5:c6:bd:02:e0:5b:39:42:ed:c0:00:6a:a7:4d:b6:
cb:b4:8c:55:1c:46:62:39:ed:a0:f4:82:d2:54:d0:c4:ce:21:
6f:e5:a7:5b:d5:d1:22:6a:07:9a:8c:1d:ef:33:f8:95:15:f1:
27:9b:c7:a9:d8:5a:6d:8c:97:8b:40:32:ce:97:2a:33:d9:72:
a7:25:a3:dc:20:63:16:27:f5:93:7b:7f:65:34:51:86:62:ec:
2e:ee:95:43:cf:b9:65:15:47:1c:c6:84:00:8c:6f:4c:4c:cc:
9d:3c:60:6d:6e:b8:52:b4:7a:76:b0:a5:9a:15:31:e0:a3:17:
16:be:31:4b:6a:32:6c:fc:d5:22:f5:8c:05:66:e0:10:7d:c9:
e8:c5:ef:bc:eb:d2:c0:47:a1:88:bb:93:55:86:fa:eb:b5:69:
0b:a4:de:6c:08:56:e6:d2:32:2e:db:57:33:6b:ef:52:f2:23:
94:22:b9:4d:2e:b7:31:ef:51:38:f9:b1:98:ea:39:e4:1b:ab:
ad:92:1b:74:85:46:cc:b9:dc:17:07:24:a3:3c:18:d4:43:bb:
6f:d6:0b:1f:01:c3:f7:17:32:7f:25:16:31:e6:00:1b:80:25:
2e:a7:8f:b9:06:ad:96:c1:d9:cd:db:1b:23:3b:d3:90:2f:3c:
ea:6e:54:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA7J/eWc/HZHTO37eMLnmr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3
NTExNmUwHhcNMjYwODI1MjMwMTEwWhcNMjYwODI2MjMwMTEwWjAzMTEwLwYDVQQD
Eyg2YTEyODUxZDU3YWMzNDZlMzE3Yjc2Zjk1Nzc5ZjZlZmU3NTc0NjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvSmXW+Gh0g0j3BizAW/OCqVyiuC
Jx8Cks/qj7wq4/SHSGLKTtCNkAXnV/lKJcXK4RjI4FdwSBVtn43+3IS4yscskTUS
o8eiF9uhFzW8m3d2UmBEUfSMI3k+PhLWHY6x9HBd3rKmU5chaBwYdTJE7c4+3yjl
FNsAUeKkoxXJy7zSQrKK55U9VkVVLk97Q07fDf0tqenv511s8U+bJt/dgW582UwQ
tCwqO5Tbx6piVhrI6iQRWgo8RlIkcdjRApZH/5b0aJ4VZZixvyJlvmRI6iKaD7F1
O6lhZJqpaFGk5LgI0Gz/Yp38o8TU5RmH+SVhYkOjL86lmdDOvsKnBSXegwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoShR1XrDRuMXt2+Vd59u/nV0YxMB8GA1UdIwQY
MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt
YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz
LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABp8T5ca9
AuBbOULtwABqp022y7SMVRxGYjntoPSC0lTQxM4hb+WnW9XRImoHmowd7zP4lRXx
J5vHqdhabYyXi0AyzpcqM9lypyWj3CBjFif1k3t/ZTRRhmLsLu6VQ8+5ZRVHHMaE
AIxvTEzMnTxgbW64UrR6drClmhUx4KMXFr4xS2oybPzVIvWMBWbgEH3J6MXvvOvS
wEehiLuTVYb667VpC6TebAhW5tIyLttXM2vvUvIjlCK5TS63Me9ROPmxmOo55Bur
rZIbdIVGzLncFwckozwY1EO7b9YLHwHD9xcyfyUWMeYAG4AlLqePuQatlsHZzdsb
IzvTkC886m5UDg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 08:06:49 2026 by rpki-client