Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: LwtqObQIFzx8qDHG5YBdu+mbXcS4hKrdmSlwGEKPki0=
Subject key identifier: 74:AE:6C:C0:AA:32:DF:EB:B1:5C:D0:DC:FB:26:F7:DB:A9:C0:AD:90
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 01A1521B0FF849B5FA7839332519A651022B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 1AAB
Signing time: Mon 19 Oct 2026 03:01:07 +0000
Manifest this update: Mon 19 Oct 2026 03:01:07 +0000
Manifest next update: Tue 20 Oct 2026 03:01:07 +0000
Files and hashes: 1: sesfpS4vflQUJ0zHNMlqdR_eVFI.roa (hash: EeKCakHwf9lALKZ5zNCtLbT5f2osgE69W3ufAPv/OQY=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: XPFguzuopZmUxcRiIaSGN3neoQkp+yMWNNeF6l83DAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:1b:0f:f8:49:b5:fa:78:39:33:25:19:a6:51:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Oct 19 03:01:07 2026 GMT
Not After : Oct 20 03:01:07 2026 GMT
Subject: CN=74ae6cc0aa32dfebb15cd0dcfb26f7dba9c0ad90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:67:3b:4e:4f:ba:25:17:63:74:6c:fe:be:
fd:48:ae:d3:8d:99:f5:96:0e:df:ce:0e:65:ae:fb:
0e:8f:11:d8:5f:4b:ad:64:a7:3b:fe:fa:04:bb:0e:
68:ee:fb:a4:08:29:08:68:35:e7:96:e1:04:9e:d2:
cd:5f:91:66:4f:83:87:4e:7c:c6:37:0a:33:75:08:
b5:7a:d6:79:04:55:ce:3b:7c:bd:77:e8:82:c0:7d:
d2:47:b1:ce:58:3b:9e:ef:2a:e9:89:b2:f6:7b:d3:
a5:de:08:87:91:28:be:6c:a2:b5:8e:0b:3e:74:2f:
5b:29:ce:c3:1c:0d:bb:6b:28:48:3d:1a:60:98:cc:
be:eb:eb:46:62:81:ad:f0:5e:7f:85:d1:2c:de:32:
95:ea:34:97:df:a9:53:c8:9e:bd:be:65:16:9d:97:
eb:eb:9c:a7:a5:9c:e6:99:93:7d:71:05:ad:ce:3e:
a2:b3:38:d3:d3:e4:9d:65:83:d3:4b:5e:23:56:f0:
98:78:21:56:5e:f7:4b:52:5b:b0:3a:0f:90:4a:cd:
5a:98:31:eb:d1:26:d3:62:f0:d4:3d:20:c3:24:64:
a5:89:f9:e4:6d:87:e7:05:a5:1d:72:dc:c5:86:88:
08:c3:dc:25:03:30:e8:31:10:20:7e:6f:bd:87:1a:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AE:6C:C0:AA:32:DF:EB:B1:5C:D0:DC:FB:26:F7:DB:A9:C0:AD:90
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7e:b1:ea:b9:1a:35:2f:78:ad:1f:f2:ef:6d:33:35:9b:5e:
f6:1f:74:de:55:79:2e:22:0e:4f:51:6a:ae:ca:b9:9b:dc:48:
fa:53:46:28:08:f4:b6:10:ed:a7:55:35:73:43:85:33:d6:23:
45:0a:ef:6c:73:cf:75:b5:45:65:8e:cf:72:24:2c:ef:44:c1:
0a:4d:bf:ac:54:a8:23:27:a3:95:42:d7:51:84:6f:5a:0b:d1:
76:81:24:e3:07:36:62:83:a6:30:fb:e0:28:0d:f9:ac:50:8e:
a2:45:e1:48:ad:1e:6c:0b:d1:61:ca:f4:db:ed:3f:28:f6:72:
fd:ba:c0:02:af:bf:e9:fb:3b:38:70:7a:5a:45:58:79:ac:20:
27:c3:ff:5c:1f:cd:d6:b3:73:7b:88:37:f4:41:19:4e:30:ad:
4b:a1:1f:d3:d2:cf:cd:e2:ea:3d:a1:06:9d:c3:44:7f:27:69:
24:f8:4f:f2:87:54:75:1d:d9:a2:7e:f7:bb:1c:70:4c:09:41:
de:cc:cf:36:fe:c1:67:2f:91:a0:e4:d9:9b:69:31:5a:36:6e:
e0:6a:ab:c4:73:41:e5:14:ec:1a:7b:ba:68:4f:2d:77:55:34:
a7:17:23:4e:b6:ab:ba:16:b4:94:cf:44:89:23:0d:a8:c8:2d:
c2:7e:b7:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSGw/4SbX6eDkzJRmmUQIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTJiYjNkYTY1Y2FhYjUyNDg1MWVmODZjZTliYWE2MjA3
NGUxZWQwHhcNMjYxMDE5MDMwMTA3WhcNMjYxMDIwMDMwMTA3WjAzMTEwLwYDVQQD
Eyg3NGFlNmNjMGFhMzJkZmViYjE1Y2QwZGNmYjI2ZjdkYmE5YzBhZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NtnO05PuiUXY3Rs/r79SK7TjZn1
lg7fzg5lrvsOjxHYX0utZKc7/voEuw5o7vukCCkIaDXnluEEntLNX5FmT4OHTnzG
NwozdQi1etZ5BFXOO3y9d+iCwH3SR7HOWDue7yrpibL2e9Ol3giHkSi+bKK1jgs+
dC9bKc7DHA27ayhIPRpgmMy+6+tGYoGt8F5/hdEs3jKV6jSX36lTyJ69vmUWnZfr
65ynpZzmmZN9cQWtzj6iszjT0+SdZYPTS14jVvCYeCFWXvdLUluwOg+QSs1amDHr
0SbTYvDUPSDDJGSlifnkbYfnBaUdctzFhogIw9wlAzDoMRAgfm+9hxr1MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSubMCqMt/rsVzQ3Psm99upwK2QMB8GA1UdIwQY
MBaAFMQSuz2mXKq1JIUe+GzpuqYgdOHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgt
OWI5MzJlY2QyZWNjLzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgtOWI5MzJlY2QyZWNj
LzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH6x6rka
NS94rR/y720zNZte9h903lV5LiIOT1Fqrsq5m9xI+lNGKAj0thDtp1U1c0OFM9Yj
RQrvbHPPdbVFZY7PciQs70TBCk2/rFSoIyejlULXUYRvWgvRdoEk4wc2YoOmMPvg
KA35rFCOokXhSK0ebAvRYcr02+0/KPZy/brAAq+/6fs7OHB6WkVYeawgJ8P/XB/N
1rNze4g39EEZTjCtS6Ef09LPzeLqPaEGncNEfydpJPhP8odUdR3Zon73uxxwTAlB
3szPNv7BZy+RoOTZm2kxWjZu4GqrxHNB5RTsGnu6aE8td1U0pxcjTraruha0lM9E
iSMNqMgtwn63zQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 08:26:43 2026 by rpki-client