Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: HB1TwOVPebZIr3+/mrFmqEdEXcrngBjiLrCJzOwEWqE=
Subject key identifier: 87:F8:32:0B:FD:E4:D5:B7:85:AD:77:C4:2E:F5:A6:09:94:DA:A0:0E
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 01A08E31E9146752CD0BD3F6407D11FB0A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 12B1
Signing time: Fri 11 Sep 2026 02:00:30 +0000
Manifest this update: Fri 11 Sep 2026 02:00:30 +0000
Manifest next update: Sat 12 Sep 2026 02:00:30 +0000
Files and hashes: 1: 6MOGH8oGvh6IYApLtSaZowTuqtk.roa (hash: HJrHUPLTq5etSutfssfFpw4hmCz6YgNXH+NQPFP+7uM=)
2: U2uOljUf-48wSNUQgF-2wsauE-g.roa (hash: 2YVcDn6Ax9cXhQHx8fyaxNd0XJvsq3/OJmSqm70WvIg=)
3: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: ZpP5Qh0ChEY62u45dSI9rY3u+8+KmTOszZmLgRbHvfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:31:e9:14:67:52:cd:0b:d3:f6:40:7d:11:fb:0a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Sep 11 02:00:30 2026 GMT
Not After : Sep 12 02:00:30 2026 GMT
Subject: CN=87f8320bfde4d5b785ad77c42ef5a60994daa00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:35:f4:cd:ea:41:0b:d0:38:28:ec:e7:1b:
61:47:96:66:16:29:76:23:a2:4a:f3:a8:48:8e:2e:
c9:82:b5:7b:9e:30:37:02:f3:cd:12:83:07:89:bf:
90:b0:36:20:a1:9a:bb:67:44:63:12:9c:9e:5b:1a:
69:92:7c:3a:ed:10:33:a6:84:dc:9e:26:5a:2d:73:
a3:44:f2:7b:c2:39:5c:3f:40:f1:39:0d:8e:db:0c:
71:9d:af:b4:7d:43:8f:fd:35:d8:cd:08:7d:10:bc:
e3:0a:11:ab:86:fe:c1:21:4a:18:bd:2c:36:06:26:
68:0d:72:c9:02:5b:0a:4c:b1:c0:de:00:72:d7:3b:
ed:87:97:a9:f4:0b:4a:48:9c:01:02:9d:45:fd:b3:
e5:ed:41:d7:5f:ca:6e:bd:cd:45:db:81:76:7d:a0:
64:45:2e:74:eb:eb:09:c5:db:bc:29:af:42:74:67:
61:04:7c:f6:7a:6e:ad:8e:77:96:e8:dc:2f:35:39:
1c:e6:6a:3a:01:e3:6b:c2:b7:7e:b8:f8:6a:d3:43:
58:fc:ec:ce:ed:a5:09:81:38:d6:f5:2c:2c:2b:86:
dc:be:00:df:e6:91:ca:b5:8f:83:7f:bb:03:e4:7d:
05:ea:4b:d0:9f:c0:c6:35:b1:cd:5d:1b:0d:60:d5:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F8:32:0B:FD:E4:D5:B7:85:AD:77:C4:2E:F5:A6:09:94:DA:A0:0E
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8b:d6:1f:97:08:30:21:a5:97:8d:49:2e:6c:b6:96:ba:85:
38:f6:d8:8e:5a:30:ed:3b:49:50:47:ce:9d:eb:80:99:3a:56:
ce:ed:45:31:73:68:99:1f:d0:25:ef:83:30:3e:fe:9e:01:2b:
4f:df:6a:f7:21:fd:c6:36:67:5b:2a:1d:96:d5:a4:11:e2:3b:
f3:50:8a:83:94:2c:e7:87:ba:db:08:29:57:36:ee:b0:5d:43:
5f:51:f3:fa:5a:f8:e7:f9:1d:7f:42:b9:0f:33:28:c0:62:8f:
8a:0a:ef:0e:bb:19:5a:fd:1e:6b:f7:7d:33:60:b5:ad:3e:9e:
73:85:a3:19:4b:8f:4e:51:77:b2:b3:d0:9d:e3:9b:59:df:3e:
41:74:ec:f7:90:ca:76:b8:1d:a2:b6:1c:92:c1:f8:86:f5:ea:
9b:7e:4d:02:b2:0e:05:9c:19:e0:92:4d:99:56:56:c4:48:31:
e9:97:79:bd:8a:13:e5:11:52:5b:cf:09:9c:8b:c8:d7:0a:ea:
96:0b:42:c0:00:fb:62:13:80:cc:4c:60:3f:7d:2b:79:55:70:
8f:5e:f9:67:5d:5c:5c:24:d5:e9:b2:4c:a1:ac:8a:14:61:d4:
06:74:0f:77:8a:ee:bd:9a:82:8f:d1:e1:e5:be:42:a9:c2:00:
a4:bd:f9:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOMekUZ1LNC9P2QH0R+wpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MmE1MjRmOWIxYjM4MDFkYmQ3Yzg5YTE2MGFlYzA3NmI1
N2U3MjkwHhcNMjYwOTExMDIwMDMwWhcNMjYwOTEyMDIwMDMwWjAzMTEwLwYDVQQD
Eyg4N2Y4MzIwYmZkZTRkNWI3ODVhZDc3YzQyZWY1YTYwOTk0ZGFhMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfo19M3qQQvQOCjs5xthR5ZmFil2
I6JK86hIji7JgrV7njA3AvPNEoMHib+QsDYgoZq7Z0RjEpyeWxppknw67RAzpoTc
niZaLXOjRPJ7wjlcP0DxOQ2O2wxxna+0fUOP/TXYzQh9ELzjChGrhv7BIUoYvSw2
BiZoDXLJAlsKTLHA3gBy1zvth5ep9AtKSJwBAp1F/bPl7UHXX8puvc1F24F2faBk
RS506+sJxdu8Ka9CdGdhBHz2em6tjneW6NwvNTkc5mo6AeNrwrd+uPhq00NY/OzO
7aUJgTjW9SwsK4bcvgDf5pHKtY+Df7sD5H0F6kvQn8DGNbHNXRsNYNWDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf4Mgv95NW3ha13xC71pgmU2qAOMB8GA1UdIwQY
MBaAFMcqUk+bGzgB29fImhYK7AdrV+cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYt
ZDdhNjg0YTU3YjE5LzEveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYtZDdhNjg0YTU3YjE5
LzEveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXovWH5cI
MCGll41JLmy2lrqFOPbYjlow7TtJUEfOneuAmTpWzu1FMXNomR/QJe+DMD7+ngEr
T99q9yH9xjZnWyodltWkEeI781CKg5Qs54e62wgpVzbusF1DX1Hz+lr45/kdf0K5
DzMowGKPigrvDrsZWv0ea/d9M2C1rT6ec4WjGUuPTlF3srPQneObWd8+QXTs95DK
drgdorYcksH4hvXqm35NArIOBZwZ4JJNmVZWxEgx6Zd5vYoT5RFSW88JnIvI1wrq
lgtCwAD7YhOAzExgP30reVVwj175Z11cXCTV6bJMoayKFGHUBnQPd4ruvZqCj9Hh
5b5CqcIApL35gg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:28 2026 by rpki-client