Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: Zzyjka3YQwgsGCstjPvrMPjLRJGOP/2JEyYmzoFcKXw=
Subject key identifier: EE:79:F3:64:3A:CB:FE:46:41:42:C5:5D:AC:50:B5:6E:0C:C7:0F:3D
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 01A174DDF4F7A600A1E8027604315A4100A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 0B64
Signing time: Sun 25 Oct 2026 21:01:05 +0000
Manifest this update: Sun 25 Oct 2026 21:01:05 +0000
Manifest next update: Mon 26 Oct 2026 21:01:05 +0000
Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=)
2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: xVeSfZLK6OBga1uik/2oFXDAJraniVXdHAj7xXvN7jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:f4:f7:a6:00:a1:e8:02:76:04:31:5a:41:00:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Oct 25 21:01:05 2026 GMT
Not After : Oct 26 21:01:05 2026 GMT
Subject: CN=ee79f3643acbfe464142c55dac50b56e0cc70f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:b9:61:ad:58:90:c7:36:33:52:9b:ae:0b:
f4:03:59:a1:be:8f:11:41:2c:0b:e1:5c:e4:e3:87:
83:d3:75:34:a0:3a:f8:d6:03:14:81:05:9e:aa:d2:
e8:93:c7:9b:bb:4d:57:16:1c:cf:cf:54:a7:a7:0f:
3c:17:5a:d4:47:85:f7:1f:77:1e:9a:12:d8:02:79:
02:19:b6:8b:c1:45:60:68:1d:65:e6:28:f8:bc:44:
75:6d:99:56:dd:d8:e3:bf:bc:22:b0:b5:5b:0d:36:
d6:b3:86:d0:6f:76:29:7d:03:ca:16:7e:04:cd:01:
6f:ff:c1:94:34:7f:cf:19:86:eb:08:29:e6:8d:9c:
92:38:24:8a:97:37:f9:2e:e4:1c:00:fe:4f:dc:9c:
f1:74:cf:b5:33:cc:91:13:64:28:40:52:4f:8d:cd:
e6:b8:e7:15:85:0c:35:8e:8a:7c:74:df:55:39:3c:
d5:ab:36:e7:38:ea:88:05:58:71:26:60:c8:00:b4:
f9:96:aa:1f:92:d5:4e:ca:4b:28:3a:b3:dd:57:0e:
48:4b:b7:c0:9e:2b:44:6d:b9:88:b8:94:79:1b:4c:
20:60:f3:d1:42:bc:c3:15:72:af:ca:60:77:c8:d2:
3a:ea:86:d9:2e:a3:57:70:c3:6b:ce:de:92:54:83:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:F3:64:3A:CB:FE:46:41:42:C5:5D:AC:50:B5:6E:0C:C7:0F:3D
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e7:3c:c9:47:9b:ae:fa:9f:77:e4:ee:be:d4:22:39:89:0e:
d0:e2:9f:47:05:ca:84:28:99:dc:4c:20:b2:0d:02:c9:fc:7d:
ae:03:d5:13:71:cb:21:64:26:f1:06:9f:34:50:bd:b6:12:45:
88:94:64:95:56:44:46:8f:a6:c5:61:f6:83:3a:02:ea:f8:6d:
db:1e:8e:d2:af:af:77:28:79:a4:35:11:e7:06:e4:c1:7d:24:
2a:65:95:24:ab:a0:44:35:d4:d7:17:2f:d4:4e:84:36:10:0b:
4b:65:c7:b8:da:21:3d:fb:26:e6:0e:2a:4b:17:1d:e8:9b:5a:
eb:c3:3f:2e:4a:68:bb:39:3d:e0:fe:e9:69:78:ac:08:77:ec:
0e:06:c1:23:09:78:68:f9:00:da:b7:52:ca:5d:8f:f5:61:42:
e8:e3:e0:14:4d:9f:a5:ac:2d:2e:32:2f:c3:fe:d0:e9:fe:95:
93:09:5c:0d:59:b8:c5:4e:7b:cf:45:c0:d2:de:6d:52:05:f5:
5f:2b:2a:1a:b6:01:e7:6f:f6:65:4b:35:16:0e:c5:06:ae:d6:
11:b5:54:78:4c:5b:5f:79:37:8d:bc:1d:18:14:c3:43:05:e8:
81:be:ec:a8:e9:8c:c3:12:ab:9d:7c:43:d3:1b:5a:6e:fa:44:
89:dd:34:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF03fT3pgCh6AJ2BDFaQQChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmE1MWMwNzE0ODg0M2Q0MDA4MDViNDAzMzVlNzJkMzI0
MjY1ZjEwHhcNMjYxMDI1MjEwMTA1WhcNMjYxMDI2MjEwMTA1WjAzMTEwLwYDVQQD
EyhlZTc5ZjM2NDNhY2JmZTQ2NDE0MmM1NWRhYzUwYjU2ZTBjYzcwZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY25Ya1YkMc2M1Kbrgv0A1mhvo8R
QSwL4Vzk44eD03U0oDr41gMUgQWeqtLok8ebu01XFhzPz1Snpw88F1rUR4X3H3ce
mhLYAnkCGbaLwUVgaB1l5ij4vER1bZlW3djjv7wisLVbDTbWs4bQb3YpfQPKFn4E
zQFv/8GUNH/PGYbrCCnmjZySOCSKlzf5LuQcAP5P3JzxdM+1M8yRE2QoQFJPjc3m
uOcVhQw1jop8dN9VOTzVqzbnOOqIBVhxJmDIALT5lqofktVOyksoOrPdVw5IS7fA
nitEbbmIuJR5G0wgYPPRQrzDFXKvymB3yNI66obZLqNXcMNrzt6SVIO1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5582Q6y/5GQULFXaxQtW4Mxw89MB8GA1UdIwQY
MBaAFMW6UcBxSIQ9QAgFtAM15y0yQmXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEt
OWZmNWMxYTNiMGUwLzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEtOWZmNWMxYTNiMGUw
LzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+c8yUeb
rvqfd+TuvtQiOYkO0OKfRwXKhCiZ3Ewgsg0Cyfx9rgPVE3HLIWQm8QafNFC9thJF
iJRklVZERo+mxWH2gzoC6vht2x6O0q+vdyh5pDUR5wbkwX0kKmWVJKugRDXU1xcv
1E6ENhALS2XHuNohPfsm5g4qSxcd6Jta68M/Lkpouzk94P7paXisCHfsDgbBIwl4
aPkA2rdSyl2P9WFC6OPgFE2fpawtLjIvw/7Q6f6VkwlcDVm4xU57z0XA0t5tUgX1
XysqGrYB52/2ZUs1Fg7FBq7WEbVUeExbX3k3jbwdGBTDQwXogb7sqOmMwxKrnXxD
0xtabvpEid00iw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:21:23 2026 by rpki-client