Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: dp/r3ZLzRUqxCOYaRzmTx5wrC6rjYccjuOVBlaIoJqk=
Subject key identifier: B3:6F:3F:3D:BC:64:03:B0:23:04:E5:60:03:ED:AF:4E:C8:7A:7D:AE
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 01A08C0DA0AF8091A5FECA053EA62B6D658F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0FA1
Signing time: Thu 10 Sep 2026 16:01:38 +0000
Manifest this update: Thu 10 Sep 2026 16:01:38 +0000
Manifest next update: Fri 11 Sep 2026 16:01:38 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: FIo+KNrijnb2J/aDLVES9tCqcHr9FxBm0OS94r9NdWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:a0:af:80:91:a5:fe:ca:05:3e:a6:2b:6d:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Sep 10 16:01:38 2026 GMT
Not After : Sep 11 16:01:38 2026 GMT
Subject: CN=b36f3f3dbc6403b02304e56003edaf4ec87a7dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:8b:25:23:cd:75:27:cb:60:0c:16:41:53:
09:5a:fa:e9:44:8d:62:40:42:89:7d:c3:75:57:f5:
ca:89:2d:ab:9b:a9:75:a2:f9:74:98:09:33:13:2f:
ce:00:fc:81:1e:af:d5:75:3a:e6:2e:bc:43:f2:04:
41:55:08:0c:ef:88:f8:ac:b6:37:f1:a2:70:c6:72:
05:27:fc:55:86:99:01:aa:2c:33:d1:7b:8a:6f:1d:
6d:7f:d0:0b:f6:1c:90:43:7c:7b:48:2f:7c:6c:67:
7e:36:45:9c:38:b6:72:ae:43:9e:5c:90:69:bb:0c:
9e:a7:58:87:75:56:ba:3b:fb:5d:60:54:0e:73:66:
46:2d:a8:fc:8d:2a:c9:44:93:41:ce:c2:47:da:2f:
af:79:dd:8d:da:83:63:a8:6b:94:eb:b6:70:b7:5d:
b9:f4:30:90:63:8c:a2:ce:6e:09:31:21:8c:50:3f:
da:33:5c:11:b7:5f:72:ec:c5:04:1c:0d:b6:64:fa:
ed:20:61:ba:3f:2b:ef:53:93:f0:bf:d1:61:6a:ed:
0a:85:24:e8:59:10:d2:e8:0f:75:01:5a:76:21:fb:
e5:25:98:25:3f:70:b0:af:d6:a4:38:47:8e:b9:10:
20:f9:46:df:31:da:76:72:ec:b4:12:47:4f:64:36:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6F:3F:3D:BC:64:03:B0:23:04:E5:60:03:ED:AF:4E:C8:7A:7D:AE
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:0e:53:95:22:4f:2b:cf:74:c4:24:6e:7c:97:57:30:f5:
06:cb:e2:82:bd:47:1a:c9:da:e1:f6:cf:2d:54:aa:86:08:cf:
30:f9:75:00:4c:48:fd:ad:2c:95:0f:a5:21:f7:2e:b5:dd:6d:
f3:1f:b7:47:bf:14:a7:78:0a:f2:61:18:12:d7:71:98:46:5f:
d6:a3:db:f5:32:94:fb:46:68:e4:6d:a7:da:aa:f7:f4:40:cd:
b8:94:bc:db:ed:7e:7b:76:9c:29:c7:f3:98:84:88:a8:7c:de:
aa:f9:10:4d:ba:65:56:bf:65:66:87:9a:7d:f1:87:72:97:38:
8f:55:ec:ec:8e:68:35:25:84:c5:cc:aa:56:8d:c9:52:9d:69:
b9:a4:5f:34:8b:fe:c9:84:03:05:99:ce:ef:3e:d9:6e:56:8b:
3f:a8:21:25:d1:e8:8c:e3:b8:a0:e9:08:53:d7:d6:bf:31:37:
b2:04:ab:68:2a:37:c7:4b:db:ed:ec:f1:7f:35:d5:20:be:b0:
8a:e6:89:da:a4:48:5d:43:f1:61:48:7b:5b:c2:ec:d4:32:5e:
4a:fe:73:af:38:6c:c0:28:fa:f4:86:31:38:9a:00:3d:d2:64:
41:64:c6:a9:94:39:b4:e2:7f:3e:94:57:de:cd:a2:9b:fc:38:
39:d3:58:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDaCvgJGl/soFPqYrbWWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNzhmMTNmZmE5MmYwNzRlYmU1NTdkMmEyZDI5YWQwZGEz
M2U1ZDgwHhcNMjYwOTEwMTYwMTM4WhcNMjYwOTExMTYwMTM4WjAzMTEwLwYDVQQD
EyhiMzZmM2YzZGJjNjQwM2IwMjMwNGU1NjAwM2VkYWY0ZWM4N2E3ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhuLJSPNdSfLYAwWQVMJWvrpRI1i
QEKJfcN1V/XKiS2rm6l1ovl0mAkzEy/OAPyBHq/VdTrmLrxD8gRBVQgM74j4rLY3
8aJwxnIFJ/xVhpkBqiwz0XuKbx1tf9AL9hyQQ3x7SC98bGd+NkWcOLZyrkOeXJBp
uwyep1iHdVa6O/tdYFQOc2ZGLaj8jSrJRJNBzsJH2i+ved2N2oNjqGuU67Zwt125
9DCQY4yizm4JMSGMUD/aM1wRt19y7MUEHA22ZPrtIGG6PyvvU5Pwv9Fhau0KhSTo
WRDS6A91AVp2IfvlJZglP3Cwr9akOEeOuRAg+UbfMdp2cuy0EkdPZDY3DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNvPz28ZAOwIwTlYAPtr07Ien2uMB8GA1UdIwQY
MBaAFP148T/6kvB06+VX0qLSmtDaM+XYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1hqeFBfcVM4SFRyNVZmU290S2EwTm96NWRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lNDFjMzQtMDI1Mi00NzE4LTlmM2Qt
ZmRmMDExOGNjMDE2LzEvX1hqeFBfcVM4SFRyNVZmU290S2EwTm96NWRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lNDFjMzQtMDI1Mi00NzE4LTlmM2QtZmRmMDExOGNjMDE2
LzEvX1hqeFBfcVM4SFRyNVZmU290S2EwTm96NWRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhIOU5Ui
TyvPdMQkbnyXVzD1Bsvigr1HGsna4fbPLVSqhgjPMPl1AExI/a0slQ+lIfcutd1t
8x+3R78Up3gK8mEYEtdxmEZf1qPb9TKU+0Zo5G2n2qr39EDNuJS82+1+e3acKcfz
mISIqHzeqvkQTbplVr9lZoeaffGHcpc4j1Xs7I5oNSWExcyqVo3JUp1puaRfNIv+
yYQDBZnO7z7ZblaLP6ghJdHojOO4oOkIU9fWvzE3sgSraCo3x0vb7ezxfzXVIL6w
iuaJ2qRIXUPxYUh7W8Ls1DJeSv5zrzhswCj69IYxOJoAPdJkQWTGqZQ5tOJ/PpRX
3s2im/w4OdNYKw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:39:01 2026 by rpki-client