Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: 8+4Eo0jg6U6DMBHVZ/c2X7Ri0YsY31UDdPAbZB6TU/Y=
Subject key identifier: CA:6B:E9:9A:E9:9A:BD:42:5B:1A:E6:DC:F4:6D:E4:89:19:52:F4:AD
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 01A177A7FE7D5A1A99E766C6C6975DD6F30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 0B21
Signing time: Mon 26 Oct 2026 10:01:00 +0000
Manifest this update: Mon 26 Oct 2026 10:01:00 +0000
Manifest next update: Tue 27 Oct 2026 10:01:00 +0000
Files and hashes: 1: F30FN8U3Xj87k2Z9DAG1GB_A31Q.roa (hash: pnPZQBEXHi+ImRZ6WCYxFeNcDY9y0/l3lR4zkQuuaVQ=)
2: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: W8DzwOl5cnKrakE1OzXkNj1LiymfTpxR3YuYWqBQAC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:fe:7d:5a:1a:99:e7:66:c6:c6:97:5d:d6:f3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Oct 26 10:01:00 2026 GMT
Not After : Oct 27 10:01:00 2026 GMT
Subject: CN=ca6be99ae99abd425b1ae6dcf46de4891952f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:c9:b2:f8:d0:0d:3d:45:09:bc:f2:b9:9b:
40:b9:40:fe:85:3c:8d:f4:c6:3d:e1:d3:84:5f:aa:
e6:a9:dd:29:bb:7d:9c:f5:8e:db:c3:e6:c4:b3:0d:
d8:5a:e4:4c:30:39:d0:be:91:b4:9a:dc:5c:52:0e:
01:42:51:99:dd:5e:55:a1:80:67:b1:49:94:07:0f:
b0:60:79:43:3d:1a:53:da:8c:bf:da:fe:c8:6b:80:
c5:8d:59:41:ca:3c:7f:2d:2c:1b:e6:7d:10:ab:d6:
b9:ba:a0:c8:b1:db:c8:42:e8:6e:ad:36:99:51:a1:
89:eb:f8:cf:75:91:50:c9:1a:cc:86:cc:8b:19:51:
be:16:6e:65:91:72:74:a1:22:5e:e3:31:bc:ec:96:
33:31:90:9e:3e:a1:26:26:e6:fb:2a:1a:85:e1:07:
a4:62:07:ed:30:00:f5:77:96:f5:de:ce:46:84:d4:
ed:1a:b8:c9:8d:e0:39:0a:8b:0c:8f:e8:bd:7e:83:
26:f9:12:39:35:7d:36:62:39:23:9a:6d:52:98:1b:
1b:86:a3:3e:54:52:5e:16:e7:97:83:2d:6c:75:d8:
27:eb:dd:76:5a:61:24:4f:f8:d7:52:7e:e0:c3:52:
7d:97:da:85:ba:e2:95:f9:a0:43:c3:e3:77:56:13:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:E9:9A:E9:9A:BD:42:5B:1A:E6:DC:F4:6D:E4:89:19:52:F4:AD
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1f:4f:58:71:d6:17:0e:31:c4:e1:17:fb:6e:94:c8:46:24:
91:da:16:f9:af:d2:df:02:ef:ea:75:82:b3:cc:9e:44:dc:c2:
9f:69:94:c7:86:92:73:eb:ce:bf:2e:26:31:f3:3b:19:96:a9:
41:96:08:29:b2:75:75:9c:62:3f:c4:e8:87:32:a5:4d:cf:5d:
0b:08:f4:68:75:d6:7e:f1:89:a8:56:21:9d:87:a9:b7:37:9a:
67:73:e5:e4:a3:c5:17:3e:7b:8c:f7:26:7f:96:f6:57:e4:b3:
8f:bb:9d:8a:6c:0c:7e:8d:16:a3:b1:77:89:89:00:c1:39:ca:
2a:8b:57:1e:59:3b:a4:c5:37:f5:48:d6:e0:28:f1:f7:86:f9:
e2:67:a1:8a:f7:d2:d3:bf:ff:e2:f2:e3:88:33:69:2c:bf:56:
05:84:2e:09:87:2f:90:b6:00:f6:12:92:f9:ac:26:9a:08:f5:
1a:48:c9:d0:65:47:32:62:98:d1:61:1b:68:2b:12:1e:01:e9:
bd:63:5c:d3:a2:90:52:ef:91:cc:fb:d0:e4:0f:be:f0:0e:8f:
20:ba:16:0c:b3:b2:49:33:95:5d:1e:9c:3c:b3:f4:c1:39:ed:
27:f5:60:ab:c3:71:e9:a9:af:a3:d1:04:ff:e0:f9:3d:58:78:
a8:2d:8c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3p/59WhqZ52bGxpdd1vMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm
MmJmYzcwHhcNMjYxMDI2MTAwMTAwWhcNMjYxMDI3MTAwMTAwWjAzMTEwLwYDVQQD
EyhjYTZiZTk5YWU5OWFiZDQyNWIxYWU2ZGNmNDZkZTQ4OTE5NTJmNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+LJsvjQDT1FCbzyuZtAuUD+hTyN
9MY94dOEX6rmqd0pu32c9Y7bw+bEsw3YWuRMMDnQvpG0mtxcUg4BQlGZ3V5VoYBn
sUmUBw+wYHlDPRpT2oy/2v7Ia4DFjVlByjx/LSwb5n0Qq9a5uqDIsdvIQuhurTaZ
UaGJ6/jPdZFQyRrMhsyLGVG+Fm5lkXJ0oSJe4zG87JYzMZCePqEmJub7KhqF4Qek
YgftMAD1d5b13s5GhNTtGrjJjeA5CosMj+i9foMm+RI5NX02Yjkjmm1SmBsbhqM+
VFJeFueXgy1sddgn6912WmEkT/jXUn7gw1J9l9qFuuKV+aBDw+N3VhPnXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpr6Zrpmr1CWxrm3PRt5IkZUvStMB8GA1UdIwQY
MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt
N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh
LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFB9PWHHW
Fw4xxOEX+26UyEYkkdoW+a/S3wLv6nWCs8yeRNzCn2mUx4aSc+vOvy4mMfM7GZap
QZYIKbJ1dZxiP8TohzKlTc9dCwj0aHXWfvGJqFYhnYeptzeaZ3Pl5KPFFz57jPcm
f5b2V+Szj7udimwMfo0Wo7F3iYkAwTnKKotXHlk7pMU39UjW4Cjx94b54mehivfS
07//4vLjiDNpLL9WBYQuCYcvkLYA9hKS+awmmgj1GkjJ0GVHMmKY0WEbaCsSHgHp
vWNc06KQUu+RzPvQ5A++8A6PILoWDLOySTOVXR6cPLP0wTntJ/Vgq8Nx6amvo9EE
/+D5PVh4qC2McQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:57:16 2026 by rpki-client