Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
File: xRvfUzN6yxiydpUsNX6RmAvMWww.mft (raw, json)
Hash identifier: jRDzPf3GW2c8m7Lb5IAzbHEGEABmRxtc/f+ZxzmebX4=
Subject key identifier: 99:58:09:1E:51:AD:2E:D1:B0:E2:37:4A:6F:58:22:83:CF:F2:94:E5
Authority key identifier: C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
Certificate issuer: /CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Certificate serial: 01A177A7BAA48D2D25BEFECA0A6FC1467A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
Manifest number: 0ED1
Signing time: Mon 26 Oct 2026 10:00:43 +0000
Manifest this update: Mon 26 Oct 2026 10:00:43 +0000
Manifest next update: Tue 27 Oct 2026 10:00:43 +0000
Files and hashes: 1: xRvfUzN6yxiydpUsNX6RmAvMWww.crl (hash: OWAipSHSWI/kVjM0gudM+/z2Qsjm3U0TTV3cD96g36Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:ba:a4:8d:2d:25:be:fe:ca:0a:6f:c1:46:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Validity
Not Before: Oct 26 10:00:43 2026 GMT
Not After : Oct 27 10:00:43 2026 GMT
Subject: CN=9958091e51ad2ed1b0e2374a6f582283cff294e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:57:7b:fa:30:8f:dd:de:84:f9:66:19:01:
b9:d1:a4:b4:5e:fa:c8:71:9e:f1:85:4e:2d:30:9a:
84:9c:9d:fe:e9:24:81:2a:42:5c:97:f5:fa:3d:4b:
65:e5:2e:86:ca:86:50:6e:ee:d1:5c:ab:63:1a:93:
20:2f:fd:33:a9:81:2d:d5:27:f1:8a:8b:f0:c4:a1:
3d:47:45:60:03:ac:68:15:96:51:32:a8:ae:cd:ab:
b5:af:b3:de:05:d5:00:0b:a4:9a:6c:5f:d1:6a:b3:
a9:65:35:75:11:72:b0:df:eb:1b:49:5c:2b:65:11:
84:5e:26:fe:7f:d3:1f:93:66:7c:10:d6:8d:3d:7a:
68:46:09:c1:45:f8:29:e6:48:81:6a:4b:c4:25:75:
fc:65:b1:12:4e:b7:52:56:05:ed:01:45:b4:ab:92:
02:30:b3:ac:74:d6:c8:b6:94:19:49:7c:00:d1:51:
cb:1f:b3:ab:55:3e:9f:8c:63:f5:7b:07:14:94:88:
34:65:f8:30:67:7e:5d:24:a1:08:b5:01:eb:94:08:
3a:6d:95:b2:58:c5:c4:df:4d:24:6f:e6:db:83:3d:
92:4e:4a:91:7e:a0:29:0f:51:d6:be:16:03:9d:89:
5a:3c:34:6b:a9:5f:3d:56:a9:4f:8f:cd:8b:48:00:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:58:09:1E:51:AD:2E:D1:B0:E2:37:4A:6F:58:22:83:CF:F2:94:E5
X509v3 Authority Key Identifier:
keyid:C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:39:eb:bc:d3:29:3f:b4:04:1e:94:4c:6e:58:3e:7b:7c:7b:
88:86:8f:4b:e0:bb:17:80:3d:f0:71:79:80:da:78:3f:49:f4:
15:c2:6d:4d:80:82:e9:6f:b3:bd:0f:57:db:7a:c0:a7:3b:9d:
f1:63:f6:23:ab:66:0c:bd:a1:7c:18:2a:c4:ab:cf:64:56:8f:
0d:19:cd:96:10:15:dc:a1:64:00:58:62:fd:f8:3b:0b:fe:60:
2b:25:54:8d:53:d6:45:7d:d1:ba:9c:0a:03:bb:1b:43:53:b7:
7f:89:86:bd:9e:f2:fd:97:29:c8:a1:13:57:d9:b6:2f:aa:01:
c1:c4:c9:16:ba:db:6f:67:18:f8:de:35:d9:e2:8e:e6:d2:28:
21:8a:52:01:4c:9d:9b:c6:72:9c:aa:29:6b:38:be:6f:e9:ac:
6c:16:1f:de:a2:ec:05:42:2f:18:f8:b7:b8:a0:02:d6:20:c4:
37:c2:07:70:d2:0b:50:40:fc:cf:b4:85:df:7f:9b:94:b8:83:
82:3a:2b:00:e6:a5:d6:e7:07:39:06:10:4a:f0:d1:ec:6d:ea:
6e:86:01:4b:f2:2e:f8:1e:a9:3a:99:88:b2:78:e0:31:0d:7e:
42:dd:d8:de:86:db:90:5f:3b:34:13:04:5c:6d:02:ac:5c:6c:
05:d6:45:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3p7qkjS0lvv7KCm/BRnqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MWJkZjUzMzM3YWNiMThiMjc2OTUyYzM1N2U5MTk4MGJj
YzViMGMwHhcNMjYxMDI2MTAwMDQzWhcNMjYxMDI3MTAwMDQzWjAzMTEwLwYDVQQD
Eyg5OTU4MDkxZTUxYWQyZWQxYjBlMjM3NGE2ZjU4MjI4M2NmZjI5NGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB5Xe/owj93ehPlmGQG50aS0XvrI
cZ7xhU4tMJqEnJ3+6SSBKkJcl/X6PUtl5S6GyoZQbu7RXKtjGpMgL/0zqYEt1Sfx
iovwxKE9R0VgA6xoFZZRMqiuzau1r7PeBdUAC6SabF/RarOpZTV1EXKw3+sbSVwr
ZRGEXib+f9Mfk2Z8ENaNPXpoRgnBRfgp5kiBakvEJXX8ZbESTrdSVgXtAUW0q5IC
MLOsdNbItpQZSXwA0VHLH7OrVT6fjGP1ewcUlIg0ZfgwZ35dJKEItQHrlAg6bZWy
WMXE300kb+bbgz2STkqRfqApD1HWvhYDnYlaPDRrqV89VqlPj82LSABcRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlYCR5RrS7RsOI3Sm9YIoPP8pTlMB8GA1UdIwQY
MBaAFMUb31MzessYsnaVLDV+kZgLzFsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84M2U1ZWEtOWZlNC00ODE0LTgzYzYt
MWJiNDMwNjA2NTM1LzEveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84M2U1ZWEtOWZlNC00ODE0LTgzYzYtMWJiNDMwNjA2NTM1
LzEveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfznrvNMp
P7QEHpRMblg+e3x7iIaPS+C7F4A98HF5gNp4P0n0FcJtTYCC6W+zvQ9X23rApzud
8WP2I6tmDL2hfBgqxKvPZFaPDRnNlhAV3KFkAFhi/fg7C/5gKyVUjVPWRX3RupwK
A7sbQ1O3f4mGvZ7y/ZcpyKETV9m2L6oBwcTJFrrbb2cY+N412eKO5tIoIYpSAUyd
m8ZynKopazi+b+msbBYf3qLsBUIvGPi3uKAC1iDEN8IHcNILUED8z7SF33+blLiD
gjorAOal1ucHOQYQSvDR7G3qboYBS/Iu+B6pOpmIsnjgMQ1+Qt3Y3obbkF87NBME
XG0CrFxsBdZFJA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:18:36 2026 by rpki-client