Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: HLaB2P6/dk/t3Di6QpC+ksCwoTFLUI1SY7Q7GO0iwS0=
Subject key identifier: 0A:6D:7C:9E:EE:CF:3F:83:2E:6D:68:72:CC:37:5A:EC:07:3F:13:80
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 01A12B448CF04577F37D1A1DA2A0CCB2A4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 18F0
Signing time: Sun 11 Oct 2026 14:01:14 +0000
Manifest this update: Sun 11 Oct 2026 14:01:14 +0000
Manifest next update: Mon 12 Oct 2026 14:01:14 +0000
Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: E3rGMEVvPg5x2Jfn2ecIf79p2gv6HNOH8/5VKCSHua4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:8c:f0:45:77:f3:7d:1a:1d:a2:a0:cc:b2:a4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Oct 11 14:01:14 2026 GMT
Not After : Oct 12 14:01:14 2026 GMT
Subject: CN=0a6d7c9eeecf3f832e6d6872cc375aec073f1380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:23:f6:13:4f:00:59:49:1b:41:74:33:65:
e3:f5:63:fc:67:fb:aa:28:43:69:2f:eb:f7:64:92:
ad:5b:4a:07:13:4e:80:1e:2f:18:7f:25:c4:0f:50:
87:f3:58:eb:ae:15:32:40:ea:0d:b9:51:f0:39:bc:
80:b6:0f:e4:25:cb:bf:af:a9:8e:da:18:43:a6:21:
7a:d5:d6:af:2c:bc:f0:9a:6a:9e:59:c5:43:da:92:
67:74:f0:41:8c:7b:86:69:93:cd:49:42:e9:f8:1a:
bf:a2:18:3d:1b:91:f0:4d:60:46:ea:09:70:6a:aa:
50:45:2a:0b:8f:b2:de:35:9d:eb:2d:04:09:fd:d0:
00:e1:1c:5f:a9:06:5d:fe:92:f1:67:05:2e:1e:20:
84:1d:c5:a3:74:73:ec:87:71:38:8c:8b:02:4a:40:
6f:bf:cb:b8:52:7e:96:5c:28:75:8c:d1:38:c1:0b:
62:c3:ec:5c:bd:c6:e6:31:20:55:94:4c:39:f6:e5:
b8:ea:a7:79:e7:20:79:6f:53:74:d8:d1:8c:2f:a3:
70:d4:e8:05:08:ad:13:41:45:b5:ff:18:d4:4d:ce:
9d:53:cc:28:61:aa:aa:7f:da:37:1c:44:9d:a7:16:
c4:af:17:cb:bc:52:b4:5f:bb:14:7b:58:7a:8f:aa:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6D:7C:9E:EE:CF:3F:83:2E:6D:68:72:CC:37:5A:EC:07:3F:13:80
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:19:35:d1:ac:2f:67:df:c5:e9:a5:94:72:67:9f:92:1c:f4:
2f:47:17:06:0b:39:f1:15:61:fb:6f:a4:7f:0a:8c:c6:31:d0:
22:ae:5c:f3:52:a5:44:8d:00:e2:7c:d7:0e:17:42:af:fc:8f:
1f:81:46:e3:37:03:d6:7b:3e:dc:3d:27:c8:41:a9:be:b1:8e:
19:47:94:66:a5:bc:ea:3c:f2:66:dc:c7:af:9a:05:2a:75:dc:
c9:fe:25:ce:4d:f6:be:18:c9:cd:46:14:5e:7f:60:1b:3d:f1:
72:10:9e:4b:70:bd:a1:5c:60:48:7e:b9:d8:9a:80:27:f8:ba:
1d:e7:2f:b4:c6:f2:b6:3e:e2:13:4d:6e:b5:0d:6c:a7:85:3c:
d1:82:1f:73:d7:4d:7e:00:d4:df:b1:c0:c5:be:6b:c8:18:46:
b1:02:00:34:9d:be:31:db:ab:04:f1:d7:9a:5f:42:85:84:b6:
49:e4:04:ad:9e:04:01:13:56:9e:4f:cb:c1:97:b1:d1:c1:50:
ab:c9:1b:6d:1b:1b:b6:89:53:76:dd:ef:dd:f5:34:ea:ff:d8:
d4:e6:ef:b0:15:1f:8b:d6:2c:04:a1:35:09:da:a8:91:ad:a3:
85:40:4e:95:37:f9:77:8a:27:e2:78:16:d2:93:2d:96:47:0c:
7f:53:9b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRIzwRXfzfRodoqDMsqTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MTljYWQ5OTIyMTE1YmNmYTc0NTJiYTBhNmU0M2E2YWY0
ZTRjMjQwHhcNMjYxMDExMTQwMTE0WhcNMjYxMDEyMTQwMTE0WjAzMTEwLwYDVQQD
EygwYTZkN2M5ZWVlY2YzZjgzMmU2ZDY4NzJjYzM3NWFlYzA3M2YxMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcAj9hNPAFlJG0F0M2Xj9WP8Z/uq
KENpL+v3ZJKtW0oHE06AHi8YfyXED1CH81jrrhUyQOoNuVHwObyAtg/kJcu/r6mO
2hhDpiF61davLLzwmmqeWcVD2pJndPBBjHuGaZPNSULp+Bq/ohg9G5HwTWBG6glw
aqpQRSoLj7LeNZ3rLQQJ/dAA4RxfqQZd/pLxZwUuHiCEHcWjdHPsh3E4jIsCSkBv
v8u4Un6WXCh1jNE4wQtiw+xcvcbmMSBVlEw59uW46qd55yB5b1N02NGML6Nw1OgF
CK0TQUW1/xjUTc6dU8woYaqqf9o3HESdpxbErxfLvFK0X7sUe1h6j6qArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAptfJ7uzz+DLm1ocsw3WuwHPxOAMB8GA1UdIwQY
MBaAFMcZytmSIRW8+nRSugpuQ6avTkwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEt
N2MyYzA4YjVlZTQ5LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEtN2MyYzA4YjVlZTQ5
LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxk10awv
Z9/F6aWUcmefkhz0L0cXBgs58RVh+2+kfwqMxjHQIq5c81KlRI0A4nzXDhdCr/yP
H4FG4zcD1ns+3D0nyEGpvrGOGUeUZqW86jzyZtzHr5oFKnXcyf4lzk32vhjJzUYU
Xn9gGz3xchCeS3C9oVxgSH652JqAJ/i6HecvtMbytj7iE01utQ1sp4U80YIfc9dN
fgDU37HAxb5ryBhGsQIANJ2+MdurBPHXml9ChYS2SeQErZ4EARNWnk/LwZex0cFQ
q8kbbRsbtolTdt3v3fU06v/Y1ObvsBUfi9YsBKE1Cdqoka2jhUBOlTf5d4on4ngW
0pMtlkcMf1ObLA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:03:33 2026 by rpki-client