Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: 5HED2h9Q1RnUJ48Cl/qTHKA8d4Oz/2x3KZDusjPfxJA=
Subject key identifier: 1E:FC:21:CE:26:54:55:61:16:9C:5C:02:40:E0:93:14:38:D3:29:24
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 01A1182AACB2C53010D7B708C9BA834B3675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1924
Signing time: Wed 07 Oct 2026 21:00:12 +0000
Manifest this update: Wed 07 Oct 2026 21:00:12 +0000
Manifest next update: Thu 08 Oct 2026 21:00:12 +0000
Files and hashes: 1: 0dcnrV30Gn7pa5jEvj5KgP9qiO0.roa (hash: A5Y7w1IBePH5KEnAB3b2HcWOuDVZjoYUDuccSlddMpw=)
2: 5MxSZvQXl_H2-veNhxP8C7tXJSw.roa (hash: lKmWvBuQPVEzVHQHwfilpfDCux8I/gMUbPsFOeqhDzc=)
3: XA8IG6QRQrLsbNV64R-2HjyZbEg.roa (hash: MAJTuBGRkQWXta5nAROoMjVqytepn5bG0MlABDfwKjU=)
4: aWsqsB-3ZQbTjL04fbv9sSIRYy0.roa (hash: vl5kdDZvNA0PjdTAUC5bWcnSAFTCIQHILHRouPyxeN4=)
5: dZHf2iv05pM1Ai9ZjfS07lKZDts.roa (hash: JTU5yNETth/ASXwQ5ks41TuKzhbLmsaZI7F7bPnX1jA=)
6: f2BPZyQde6jaqQYuQ_ioMN5Ij5Y.roa (hash: 0aTUB0kvzyHMFA+2BAuaiQsa5BczcOQneLtjd/+Wa8k=)
7: x2-bHgYNNe9EO0e71Kbdkn4WCUs.roa (hash: Dca0K3UX+EGLfg7iHsshpljIoglUEEQdeXIYfckXkFA=)
8: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: ZMz/P5CGvvEeF03HUpv1qhdmFjUGtcIZ9/pfKo6+7AQ=)
9: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (hash: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:2a:ac:b2:c5:30:10:d7:b7:08:c9:ba:83:4b:36:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Oct 7 21:00:12 2026 GMT
Not After : Oct 8 21:00:12 2026 GMT
Subject: CN=1efc21ce26545561169c5c0240e0931438d32924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:8d:97:0b:f9:60:8d:b5:b4:8c:60:5e:b5:
18:31:59:c6:83:8e:fe:77:22:42:40:12:8f:9f:96:
71:da:3a:46:60:13:5d:a1:a5:44:35:34:77:71:fb:
5d:fd:2b:3c:e5:e8:77:29:bc:21:5e:f1:20:21:ae:
6a:8b:aa:57:9c:7b:20:74:2c:8d:01:8d:3a:37:37:
66:f3:2d:7c:67:f8:d6:c2:da:9f:18:58:0c:28:88:
d8:1d:af:1a:ae:6c:71:ec:34:c6:ad:fc:39:65:b7:
fb:31:09:24:b9:ee:19:35:33:95:d8:e8:ea:bf:8d:
b3:b8:92:f3:99:8f:a4:02:13:82:6f:68:38:ff:07:
78:67:8f:03:40:94:37:78:ab:e9:9e:1c:19:cf:55:
df:ec:f8:db:4c:83:d8:ae:af:32:82:11:b2:42:ff:
44:e5:7a:4f:6b:de:78:e2:33:ba:21:b1:c7:af:50:
16:83:4c:81:62:c3:cd:00:5b:69:89:8e:3b:f4:cb:
e5:0a:fa:30:c7:27:61:bb:0d:18:8b:47:92:a7:8b:
f9:d9:c0:65:3a:fc:64:dc:85:8c:f7:62:aa:08:14:
dd:ba:12:ea:9e:e8:71:26:0d:50:02:cb:06:24:3b:
55:59:b3:20:4c:94:d2:2b:9a:3a:eb:92:69:fa:7d:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:21:CE:26:54:55:61:16:9C:5C:02:40:E0:93:14:38:D3:29:24
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b4:42:fd:a7:d2:9d:9a:26:89:d2:cc:8f:f3:5a:05:0d:02:
fb:dd:13:75:be:7a:bc:2f:e5:c3:28:da:d6:ff:71:52:3f:07:
6b:63:c2:bd:fc:32:21:37:25:61:08:46:cd:4c:a9:61:7b:fa:
0e:c4:08:6b:bc:11:3e:65:a8:f9:54:98:64:4b:5a:58:3a:c3:
a4:f5:18:84:ce:1d:43:3e:30:64:14:f7:96:c1:c2:fd:fe:13:
49:17:a5:bd:6f:47:b4:2c:5d:d2:25:2d:b3:f5:06:96:7f:70:
b8:97:de:be:b8:b7:39:1b:93:ef:0e:9f:f7:52:9c:d3:3b:e1:
85:44:91:b6:2a:4f:b5:80:c1:e1:ca:13:d6:f7:40:e8:4e:b4:
8c:3d:c4:18:ab:5b:01:8d:3a:12:7b:35:de:94:e1:aa:40:b1:
ac:84:93:e8:7f:4c:f3:4b:f2:31:d0:92:20:9c:b0:a0:c5:8a:
83:82:af:eb:b9:1f:06:cb:91:32:e6:34:aa:5b:e0:11:f2:0b:
a2:28:59:89:ab:d7:c7:b1:68:f4:bb:dd:32:2c:95:32:d5:d5:
3c:5d:37:4b:fc:e9:57:52:65:89:95:e1:b8:6d:ee:05:a4:08:
bb:94:44:f7:eb:fc:b1:1c:4b:4a:a8:7b:ac:19:02:49:a5:7c:
ba:6c:b9:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYKqyyxTAQ17cIybqDSzZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4
Y2NkNjcwHhcNMjYxMDA3MjEwMDEyWhcNMjYxMDA4MjEwMDEyWjAzMTEwLwYDVQQD
EygxZWZjMjFjZTI2NTQ1NTYxMTY5YzVjMDI0MGUwOTMxNDM4ZDMyOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1iNlwv5YI21tIxgXrUYMVnGg47+
dyJCQBKPn5Zx2jpGYBNdoaVENTR3cftd/Ss85eh3KbwhXvEgIa5qi6pXnHsgdCyN
AY06Nzdm8y18Z/jWwtqfGFgMKIjYHa8armxx7DTGrfw5Zbf7MQkkue4ZNTOV2Ojq
v42zuJLzmY+kAhOCb2g4/wd4Z48DQJQ3eKvpnhwZz1Xf7PjbTIPYrq8yghGyQv9E
5XpPa9544jO6IbHHr1AWg0yBYsPNAFtpiY479MvlCvowxydhuw0Yi0eSp4v52cBl
Ovxk3IWM92KqCBTduhLqnuhxJg1QAssGJDtVWbMgTJTSK5o665Jp+n2kIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB78Ic4mVFVhFpxcAkDgkxQ40ykkMB8GA1UdIwQY
MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt
MTA5NTlhYWE4YjNlLzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl
LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbRC/afS
nZomidLMj/NaBQ0C+90Tdb56vC/lwyja1v9xUj8Ha2PCvfwyITclYQhGzUypYXv6
DsQIa7wRPmWo+VSYZEtaWDrDpPUYhM4dQz4wZBT3lsHC/f4TSRelvW9HtCxd0iUt
s/UGln9wuJfevri3ORuT7w6f91Kc0zvhhUSRtipPtYDB4coT1vdA6E60jD3EGKtb
AY06Ens13pThqkCxrIST6H9M80vyMdCSIJywoMWKg4Kv67kfBsuRMuY0qlvgEfIL
oihZiavXx7Fo9LvdMiyVMtXVPF03S/zpV1JliZXhuG3uBaQIu5RE9+v8sRxLSqh7
rBkCSaV8umy5Rw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:53:58 2026 by rpki-client