Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft
File: xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft (raw, json)
Hash identifier: iI3bZLWVZ3I0XxY8eGLE5KmU6KEhToxpY3wRKllFViM=
Subject key identifier: C2:60:A2:90:55:DE:00:EE:F3:3A:70:81:5D:02:BA:43:AA:6D:6C:0D
Authority key identifier: C6:A4:CE:AB:7B:D7:A4:E6:31:8E:85:64:BC:19:1F:EF:22:45:5D:DA
Certificate issuer: /CN=c6a4ceab7bd7a4e6318e8564bc191fef22455dda
Certificate serial: 01A0F9B3B4DF98C9D411926AAEC10D73CCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft
Manifest number: FB
Signing time: Thu 01 Oct 2026 23:01:39 +0000
Manifest this update: Thu 01 Oct 2026 23:01:39 +0000
Manifest next update: Fri 02 Oct 2026 23:01:39 +0000
Files and hashes: 1: WxabxzYs8lEjcktho61-N4OXFPY.asa (hash: IAH/fNWx3Y9CLAxWDWwgpeJ290bY2vuouSfmn1a8ZB0=)
2: ctAXjj0Li_yon5mxcrFJF9P0J9c.roa (hash: 61WBzGlddF31EQO7Rkzar1M7/fMyfdBYeN6+LONTBvs=)
3: xqTOq3vXpOYxjoVkvBkf7yJFXdo.crl (hash: 6RJfNcVzb5VPWFE+vvkgIulGW9gt1od7I2cx3NdvbkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:b3:b4:df:98:c9:d4:11:92:6a:ae:c1:0d:73:cc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a4ceab7bd7a4e6318e8564bc191fef22455dda
Validity
Not Before: Oct 1 23:01:39 2026 GMT
Not After : Oct 2 23:01:39 2026 GMT
Subject: CN=c260a29055de00eef33a70815d02ba43aa6d6c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:10:34:ef:49:5b:4e:b2:1b:ee:1a:e3:c1:
f2:5b:fd:b1:0b:66:9b:61:54:14:65:ed:f7:fa:69:
2a:57:9c:bd:e6:02:92:c3:6a:55:4d:c4:cc:2b:99:
59:7a:a5:93:54:0f:c1:cd:5c:66:76:4a:11:a7:5e:
ea:23:cb:24:02:8f:7e:d3:24:5d:d0:b5:6f:09:30:
d2:96:d8:5c:4e:a0:84:44:24:d0:2a:f9:43:9f:4f:
23:bc:64:ef:ac:f6:7a:3e:e9:9d:da:16:7e:42:db:
d7:36:4b:c2:34:9b:f7:11:13:ee:1f:d1:f7:65:f3:
0f:ce:31:eb:4c:53:07:17:7e:9b:84:41:13:1f:48:
d2:53:1e:f3:31:d5:53:d5:ec:ef:98:f2:30:f4:a6:
af:84:db:91:6e:4c:24:67:87:5b:91:ca:b3:8d:f8:
e8:74:f3:ac:7c:33:69:ef:08:45:ac:bf:9f:40:18:
c1:88:c8:7b:8e:e5:58:6e:3b:48:4b:11:57:17:3d:
e7:e7:ee:18:00:6d:22:62:1b:3e:0d:45:7f:9f:f2:
e5:2e:d5:76:2d:9a:cd:49:4a:73:77:c2:1d:e1:75:
ae:29:b3:b9:c0:2e:f3:b7:87:81:96:d6:bd:ea:0b:
59:43:79:f2:a9:d3:b9:98:5f:53:a9:0e:0b:ba:21:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:60:A2:90:55:DE:00:EE:F3:3A:70:81:5D:02:BA:43:AA:6D:6C:0D
X509v3 Authority Key Identifier:
keyid:C6:A4:CE:AB:7B:D7:A4:E6:31:8E:85:64:BC:19:1F:EF:22:45:5D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d3:71:9a:54:58:56:e1:94:7e:66:cb:86:16:1e:7e:80:e7:
78:fb:d9:6c:c1:29:ce:b1:9f:2b:3d:03:76:7d:68:24:3f:48:
5f:e8:10:dc:18:1f:38:6d:06:c3:35:6c:34:61:34:74:3c:0d:
1f:15:2e:aa:f5:b4:c0:91:19:96:2f:de:80:be:4f:31:b4:66:
de:57:d5:ba:c8:8d:78:d9:b2:f3:a6:34:da:b9:e5:2a:46:43:
08:42:a4:c6:10:7e:f5:40:64:8d:fe:d9:43:73:d4:1d:24:61:
ed:4f:87:aa:a0:19:51:f5:7e:51:55:fd:0c:c1:26:93:c3:a5:
d8:fb:c7:c8:9c:5e:68:81:cb:5f:31:ba:b8:e6:59:7a:dc:5c:
e9:6c:d2:78:0f:d6:53:40:05:6d:e1:76:9a:25:b7:9d:57:bd:
12:92:27:68:59:54:e7:70:f6:5e:15:67:cb:b2:c3:2e:1e:e0:
c6:87:13:1d:3b:0f:7c:95:ad:ba:42:1b:1d:cb:90:5d:90:ac:
f2:39:02:a0:6f:39:3e:9c:3e:13:2e:77:af:d8:e5:40:e3:48:
db:1e:c1:ac:1a:c6:8f:a2:17:ed:eb:a3:b2:f0:aa:97:38:28:
30:88:71:fc:51:aa:39:c9:6b:f7:3b:36:d8:c8:58:d7:18:62:
90:bd:5a:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD5s7TfmMnUEZJqrsENc8zIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTRjZWFiN2JkN2E0ZTYzMThlODU2NGJjMTkxZmVmMjI0
NTVkZGEwHhcNMjYxMDAxMjMwMTM5WhcNMjYxMDAyMjMwMTM5WjAzMTEwLwYDVQQD
EyhjMjYwYTI5MDU1ZGUwMGVlZjMzYTcwODE1ZDAyYmE0M2FhNmQ2YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDkQNO9JW06yG+4a48HyW/2xC2ab
YVQUZe33+mkqV5y95gKSw2pVTcTMK5lZeqWTVA/BzVxmdkoRp17qI8skAo9+0yRd
0LVvCTDSlthcTqCERCTQKvlDn08jvGTvrPZ6Pumd2hZ+QtvXNkvCNJv3ERPuH9H3
ZfMPzjHrTFMHF36bhEETH0jSUx7zMdVT1ezvmPIw9KavhNuRbkwkZ4dbkcqzjfjo
dPOsfDNp7whFrL+fQBjBiMh7juVYbjtISxFXFz3n5+4YAG0iYhs+DUV/n/LlLtV2
LZrNSUpzd8Id4XWuKbO5wC7zt4eBlta96gtZQ3nyqdO5mF9TqQ4LuiFL1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJgopBV3gDu8zpwgV0CukOqbWwNMB8GA1UdIwQY
MBaAFMakzqt716TmMY6FZLwZH+8iRV3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFUT3EzdlhwT1l4am9Wa3ZCa2Y3eUpGWGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQt
NmMyZmZiNGI2MWU2LzEveHFUT3EzdlhwT1l4am9Wa3ZCa2Y3eUpGWGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQtNmMyZmZiNGI2MWU2
LzEveHFUT3EzdlhwT1l4am9Wa3ZCa2Y3eUpGWGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9NxmlRY
VuGUfmbLhhYefoDnePvZbMEpzrGfKz0Ddn1oJD9IX+gQ3BgfOG0GwzVsNGE0dDwN
HxUuqvW0wJEZli/egL5PMbRm3lfVusiNeNmy86Y02rnlKkZDCEKkxhB+9UBkjf7Z
Q3PUHSRh7U+HqqAZUfV+UVX9DMEmk8Ol2PvHyJxeaIHLXzG6uOZZetxc6WzSeA/W
U0AFbeF2miW3nVe9EpInaFlU53D2XhVny7LDLh7gxocTHTsPfJWtukIbHcuQXZCs
8jkCoG85Ppw+Ey53r9jlQONI2x7BrBrGj6IX7eujsvCqlzgoMIhx/FGqOclr9zs2
2MhY1xhikL1aqg==
-----END CERTIFICATE-----
Generated at Fri Oct 2 12:28:58 2026 by rpki-client