Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: v6RnpPFl32/GeW0qT6v6eor/E7ttQ5M7lyLXPPSx6EI=
Subject key identifier: 4E:58:E1:22:A6:E1:41:11:D5:F1:59:C4:8F:38:02:D7:D5:4C:D5:12
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 01A0B5E4B9E367B242FCCF870739DBE00327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 19F1
Signing time: Fri 18 Sep 2026 19:01:00 +0000
Manifest this update: Fri 18 Sep 2026 19:01:00 +0000
Manifest next update: Sat 19 Sep 2026 19:01:00 +0000
Files and hashes: 1: 8cS6Qj5MYE4B8boPnbZ2kcXbU-k.roa (hash: AKR29eJxFVsOMPaiI3uGdOD049mIqIl+nuPgud2mgtc=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: 7AdhOgMCFLlMACVe3fOuZI4mEVNkql5bpR+ZQiTLmRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:e4:b9:e3:67:b2:42:fc:cf:87:07:39:db:e0:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Sep 18 19:01:00 2026 GMT
Not After : Sep 19 19:01:00 2026 GMT
Subject: CN=4e58e122a6e14111d5f159c48f3802d7d54cd512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:00:c3:0c:51:9c:11:c0:e2:bb:bd:3f:19:
e9:8b:61:a5:47:c3:ea:0a:8c:f3:64:ce:ad:f4:2d:
85:02:82:05:f0:c2:5c:ee:c6:2a:b2:7e:66:c9:8e:
ec:ff:fc:2b:5d:0f:5e:2b:04:4a:9a:77:8c:be:28:
23:31:ed:26:4e:b0:05:9c:61:c6:02:4e:5a:8a:de:
9d:f7:8d:e2:62:c2:80:bd:81:0c:92:78:82:8b:7e:
bd:a4:38:ae:2d:0b:36:7c:f0:bb:2e:25:82:ae:59:
f7:95:dc:d5:a8:bb:d8:01:77:22:6c:e5:12:2b:60:
93:7b:78:a8:78:c3:0d:02:ce:cf:7b:72:61:18:d9:
47:dc:b9:f6:de:83:4c:dc:7c:d4:4a:7f:c6:da:cb:
e2:d4:ff:a0:75:1c:5e:f7:41:57:46:61:f6:44:01:
f0:a6:44:5a:3b:01:f3:a1:c3:4e:37:b7:db:8d:0e:
e9:83:c7:db:21:07:65:e8:7b:a8:ae:95:6d:74:0d:
20:b2:da:80:9e:e8:0c:3c:4b:fd:e8:57:c9:d5:c1:
9f:9c:e2:eb:5c:a9:ab:c5:7e:e0:d7:83:45:c1:2a:
db:7b:33:a1:98:c6:22:a3:ee:09:ae:7a:aa:1e:25:
d5:bc:b2:0c:25:d5:68:7a:2f:34:07:8a:da:b5:95:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:58:E1:22:A6:E1:41:11:D5:F1:59:C4:8F:38:02:D7:D5:4C:D5:12
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:83:85:dd:e6:7e:e7:de:9c:86:f8:31:13:b4:56:be:89:6b:
cc:97:f8:49:d5:90:78:10:57:5d:34:4c:12:3f:41:aa:e3:be:
bd:4a:53:a7:a3:47:62:45:74:7d:50:b9:61:11:94:c5:35:ea:
87:ff:bb:cc:b0:09:2d:aa:95:46:7d:b3:c9:62:8e:55:19:81:
d5:45:8a:0f:91:66:1b:85:36:63:c7:fd:02:6d:60:13:cd:eb:
4d:8d:14:d8:1c:e3:25:b7:6d:8d:6b:c9:88:3d:3d:09:8c:0c:
3f:0b:cf:0c:2a:78:eb:bc:76:57:3a:cf:f4:da:5d:fe:e2:56:
11:a1:4e:5b:40:47:73:7f:e9:8a:4b:4a:46:70:57:34:2c:fb:
a9:d9:10:fd:44:56:a4:0e:79:71:a6:fa:24:5a:01:c7:9d:22:
68:66:e6:8b:06:03:21:46:02:f5:3f:8d:03:14:5f:e8:5e:1b:
45:2d:7f:50:25:cb:df:43:67:d4:c6:49:19:7e:bb:ba:86:32:
29:f2:67:10:f4:16:8e:70:3d:d1:c0:53:80:00:ba:8f:32:b3:
e9:db:d9:f8:5c:53:af:39:fb:59:3d:e6:d1:4d:2a:f8:f3:82:
4e:54:39:f8:cf:81:d9:52:89:a7:d4:81:46:ea:f5:ea:2a:29:
70:58:d8:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC15LnjZ7JC/M+HBznb4AMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWM0MWRhZjAwOTJiNzAzYmMwNTliYTEzNTNmMDcxZWQx
MjE5OWIwHhcNMjYwOTE4MTkwMTAwWhcNMjYwOTE5MTkwMTAwWjAzMTEwLwYDVQQD
Eyg0ZTU4ZTEyMmE2ZTE0MTExZDVmMTU5YzQ4ZjM4MDJkN2Q1NGNkNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+EAwwxRnBHA4ru9Pxnpi2GlR8Pq
CozzZM6t9C2FAoIF8MJc7sYqsn5myY7s//wrXQ9eKwRKmneMvigjMe0mTrAFnGHG
Ak5ait6d943iYsKAvYEMkniCi369pDiuLQs2fPC7LiWCrln3ldzVqLvYAXcibOUS
K2CTe3ioeMMNAs7Pe3JhGNlH3Ln23oNM3HzUSn/G2svi1P+gdRxe90FXRmH2RAHw
pkRaOwHzocNON7fbjQ7pg8fbIQdl6HuorpVtdA0gstqAnugMPEv96FfJ1cGfnOLr
XKmrxX7g14NFwSrbezOhmMYio+4JrnqqHiXVvLIMJdVoei80B4ratZV4AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Y4SKm4UER1fFZxI84AtfVTNUSMB8GA1UdIwQY
MBaAFMWcQdrwCStwO8BZuhNT8HHtEhmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQt
YzU0OTNmZTgyZTI2LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQtYzU0OTNmZTgyZTI2
LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIOF3eZ+
596chvgxE7RWvolrzJf4SdWQeBBXXTRMEj9BquO+vUpTp6NHYkV0fVC5YRGUxTXq
h/+7zLAJLaqVRn2zyWKOVRmB1UWKD5FmG4U2Y8f9Am1gE83rTY0U2BzjJbdtjWvJ
iD09CYwMPwvPDCp467x2VzrP9Npd/uJWEaFOW0BHc3/piktKRnBXNCz7qdkQ/URW
pA55cab6JFoBx50iaGbmiwYDIUYC9T+NAxRf6F4bRS1/UCXL30Nn1MZJGX67uoYy
KfJnEPQWjnA90cBTgAC6jzKz6dvZ+FxTrzn7WT3m0U0q+POCTlQ5+M+B2VKJp9SB
Rur16iopcFjYDw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:03:51 2026 by rpki-client