Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: lDuuJ2VV52vebztfWUdagCxbANvaHiNNnvtuwCRbTKo=
Subject key identifier: BD:56:A2:A7:93:7A:AF:FD:C6:81:5C:20:BF:12:A9:94:02:03:6C:00
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 01A0016F7E8E276445896BFAA588131B915A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1892
Signing time: Fri 14 Aug 2026 18:01:19 +0000
Manifest this update: Fri 14 Aug 2026 18:01:19 +0000
Manifest next update: Sat 15 Aug 2026 18:01:19 +0000
Files and hashes: 1: 0dcnrV30Gn7pa5jEvj5KgP9qiO0.roa (hash: A5Y7w1IBePH5KEnAB3b2HcWOuDVZjoYUDuccSlddMpw=)
2: XA8IG6QRQrLsbNV64R-2HjyZbEg.roa (hash: MAJTuBGRkQWXta5nAROoMjVqytepn5bG0MlABDfwKjU=)
3: kReZeiKYeK227CwdOt2peWbzn6o.roa (hash: vijDgPLigLiF+q+U/7SVmc/WWIgze2Hy8w525GeqVG8=)
4: l7CfLnkZArXswZfoQeoUIu_AgpA.roa (hash: RNWlpQMRGNEnmwW1gZu/IBscvvbH2tY8tCACNrgrNfA=)
5: mVQ9FPpVueUhksm65G9KzIV5UC8.roa (hash: aeiYkQy+Q1DkLgKvsKV+KpeuzrUpSXnXOD5PPgZsPjM=)
6: x2-bHgYNNe9EO0e71Kbdkn4WCUs.roa (hash: Dca0K3UX+EGLfg7iHsshpljIoglUEEQdeXIYfckXkFA=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: oL9YS+JGsNuAEWIxmDvQjeOvYs+9ZgRa8+mL1BYX2aA=)
8: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (hash: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:7e:8e:27:64:45:89:6b:fa:a5:88:13:1b:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Aug 14 18:01:19 2026 GMT
Not After : Aug 15 18:01:19 2026 GMT
Subject: CN=bd56a2a7937aaffdc6815c20bf12a99402036c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:79:2d:60:32:e9:9f:87:b1:e0:ae:b7:f3:
83:63:2d:9e:1e:49:ba:88:a6:a4:5f:7b:22:f6:11:
f6:12:6a:86:73:56:d4:de:86:99:39:64:4a:23:50:
3e:1f:5f:09:8c:f1:67:8f:32:23:39:f8:b5:bf:49:
e8:bd:f3:99:ab:2a:c8:38:dd:53:17:c6:93:68:e7:
18:8d:dc:93:28:ed:6d:54:92:98:c7:47:65:63:b3:
34:74:94:3a:c8:f1:11:31:4f:94:fd:04:38:43:f4:
9b:b4:60:c9:bc:cc:9f:4a:7e:a2:2c:4a:f0:60:4a:
43:b7:55:b9:34:06:e6:f9:38:3f:7c:f3:0d:ee:7a:
d8:1d:60:fb:85:30:02:79:64:8e:9e:c0:8d:9b:23:
ee:4c:c1:12:30:98:02:64:e3:06:80:30:5d:60:67:
93:0e:3e:57:cf:b9:93:18:c1:79:7b:0d:07:28:53:
e8:55:d6:8a:86:b6:67:a5:a2:5b:fc:32:ea:e6:3e:
5a:ba:25:03:ba:79:eb:e0:42:7f:d2:ae:4b:24:d2:
b5:a8:b1:01:ee:7e:35:ef:4d:04:17:f0:d0:48:57:
25:6b:19:bd:1e:92:d0:71:f1:38:21:d2:b1:76:8b:
ac:57:00:70:ae:85:3d:71:39:d2:b8:fa:12:1d:29:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:56:A2:A7:93:7A:AF:FD:C6:81:5C:20:BF:12:A9:94:02:03:6C:00
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:55:77:6b:84:10:2a:f7:93:42:6c:b4:ec:05:6c:1b:51:98:
f5:4f:ab:7d:8c:38:47:30:7e:a7:ba:0c:51:c0:09:1f:e2:45:
32:41:8d:48:cd:98:a2:3e:ee:b1:a3:2f:90:38:bf:4c:b9:e5:
9e:68:b3:ee:d0:65:d9:37:e1:06:6a:78:55:eb:0f:2b:46:b4:
61:b7:90:9d:19:12:f6:9d:4c:05:ba:a0:fe:24:18:3a:da:cf:
62:7a:c6:24:24:1d:bd:fb:7b:dc:30:4a:9a:da:f0:5b:74:df:
83:87:42:3d:0e:62:cc:41:0b:cb:6d:14:8d:4c:51:45:91:f1:
15:58:3f:4e:1d:98:2f:f9:76:b2:41:9e:e7:4f:61:4f:ea:6d:
4a:85:5e:96:7a:25:d3:6c:a5:52:73:07:9a:9d:d7:69:62:63:
42:1c:de:10:72:1c:44:18:33:c1:b1:9f:59:68:3b:31:50:7b:
00:ac:48:5a:8f:54:5a:86:10:f5:ce:82:46:46:d0:d3:bf:91:
0f:ca:27:4e:eb:3e:68:39:90:d6:84:61:db:60:fc:70:2e:5a:
d8:98:6b:a3:9f:c3:5c:76:52:d2:a4:9e:9f:26:a1:66:0d:f9:
67:33:e9:e9:c8:9b:19:db:4b:7d:ad:f1:51:c6:d9:36:11:a6:
5b:14:e1:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb36OJ2RFiWv6pYgTG5FaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4
Y2NkNjcwHhcNMjYwODE0MTgwMTE5WhcNMjYwODE1MTgwMTE5WjAzMTEwLwYDVQQD
EyhiZDU2YTJhNzkzN2FhZmZkYzY4MTVjMjBiZjEyYTk5NDAyMDM2YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQd5LWAy6Z+HseCut/ODYy2eHkm6
iKakX3si9hH2EmqGc1bU3oaZOWRKI1A+H18JjPFnjzIjOfi1v0novfOZqyrION1T
F8aTaOcYjdyTKO1tVJKYx0dlY7M0dJQ6yPERMU+U/QQ4Q/SbtGDJvMyfSn6iLErw
YEpDt1W5NAbm+Tg/fPMN7nrYHWD7hTACeWSOnsCNmyPuTMESMJgCZOMGgDBdYGeT
Dj5Xz7mTGMF5ew0HKFPoVdaKhrZnpaJb/DLq5j5auiUDunnr4EJ/0q5LJNK1qLEB
7n41700EF/DQSFclaxm9HpLQcfE4IdKxdousVwBwroU9cTnSuPoSHSm2nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1WoqeTeq/9xoFcIL8SqZQCA2wAMB8GA1UdIwQY
MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt
MTA5NTlhYWE4YjNlLzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl
LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVV3a4QQ
KveTQmy07AVsG1GY9U+rfYw4RzB+p7oMUcAJH+JFMkGNSM2Yoj7usaMvkDi/TLnl
nmiz7tBl2TfhBmp4VesPK0a0YbeQnRkS9p1MBbqg/iQYOtrPYnrGJCQdvft73DBK
mtrwW3Tfg4dCPQ5izEELy20UjUxRRZHxFVg/Th2YL/l2skGe509hT+ptSoVelnol
02ylUnMHmp3XaWJjQhzeEHIcRBgzwbGfWWg7MVB7AKxIWo9UWoYQ9c6CRkbQ07+R
D8onTus+aDmQ1oRh22D8cC5a2Jhro5/DXHZS0qSenyahZg35ZzPp6cibGdtLfa3x
UcbZNhGmWxTh4w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:36 2026 by rpki-client