Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: Run5nbLprYMbaw0clPSFffVaXE12BZaDfcP5UzHcp/8=
Subject key identifier: 9E:DC:98:75:D7:18:17:A2:18:82:1E:02:58:4A:CD:79:8C:DE:27:34
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 01A1950D292490BEEA2C05258F9A99151AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 1AD6
Signing time: Sun 01 Nov 2026 03:00:29 +0000
Manifest this update: Sun 01 Nov 2026 03:00:29 +0000
Manifest next update: Mon 02 Nov 2026 03:00:29 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: SPvETmsxV/rUykl/ncp4mtBzh96v1Lug+TG9uuiGRBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0d:29:24:90:be:ea:2c:05:25:8f:9a:99:15:1a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Nov 1 03:00:29 2026 GMT
Not After : Nov 2 03:00:29 2026 GMT
Subject: CN=9edc9875d71817a218821e02584acd798cde2734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:47:68:e7:2a:38:af:f3:01:1f:e2:84:4b:
19:6e:49:6b:0e:cc:d0:2f:78:72:bb:8e:e3:44:34:
93:7f:c8:2e:ee:1e:b2:a8:27:ed:52:8e:13:fe:e6:
80:00:c3:ec:91:b1:dd:93:bf:bd:7b:ac:ca:d9:39:
c9:6f:ac:97:e4:95:a7:b1:25:e3:31:da:43:64:8d:
d8:e8:fa:68:45:2e:01:ba:a1:37:14:ae:dd:6d:33:
fe:0c:9e:fe:0c:82:11:f8:e7:eb:18:69:e3:89:74:
8a:25:fe:32:f5:aa:bc:24:7f:10:4d:6e:98:22:4c:
c5:3d:89:cc:f7:1c:8d:56:a3:4c:2d:b9:30:70:b3:
00:b9:8c:8e:8d:4e:c7:07:ee:28:bc:f6:5a:9a:cb:
4e:c4:67:5c:77:0a:40:0a:cb:d5:b4:90:e6:21:08:
50:d7:a8:52:b2:2d:46:76:8a:13:36:2b:89:08:90:
b5:a0:f7:7b:8e:c8:fc:9f:d8:57:6d:8d:b1:1d:e3:
57:71:46:ec:6d:36:37:91:a8:3c:fa:09:d4:f8:fe:
14:2b:74:7c:74:5f:e2:22:94:28:c3:ad:ba:0e:19:
d3:8b:21:29:7b:fd:03:76:f8:92:48:49:11:69:ef:
09:cc:93:7d:44:85:aa:bc:31:46:b4:db:2a:d4:8b:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DC:98:75:D7:18:17:A2:18:82:1E:02:58:4A:CD:79:8C:DE:27:34
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f7:bb:9f:75:cc:cc:57:c4:15:74:0b:09:81:36:f6:7b:05:
d9:6a:1d:d3:c7:b0:1d:dd:ed:eb:43:20:1a:93:d6:fc:c5:fc:
7b:72:c1:bc:b6:7b:1e:b7:d1:72:aa:0d:55:f6:31:7f:92:4e:
d1:09:6c:9f:b1:2b:71:fb:2d:b7:5f:f3:43:2a:72:fd:0f:c4:
aa:45:78:c9:66:cd:90:8a:78:83:cc:eb:2d:4f:89:3c:e7:8b:
30:bc:e9:2d:39:a4:68:ea:19:67:77:14:bf:c1:dd:8e:85:74:
54:ba:84:5b:2e:3f:a2:c2:fd:7f:3f:e0:94:3c:0b:d1:41:4f:
ac:b5:5d:a9:c6:87:ca:44:6f:13:b7:68:31:eb:24:95:b6:72:
6e:a2:66:2a:b6:10:ad:e2:dd:8c:38:87:5b:45:10:2c:52:af:
10:db:d2:0f:20:57:26:a1:b0:a5:63:2a:d7:95:24:5e:b5:9f:
89:b6:49:b0:8d:4f:1d:6d:79:8f:a4:a6:e3:6f:3a:51:5f:f2:
b0:d7:f0:57:5f:39:d0:22:bc:63:ae:d4:50:70:b2:c8:d6:17:
1e:87:80:1e:32:e4:c2:42:29:c1:df:3b:54:91:7e:f9:d5:31:
cc:64:f9:35:c6:64:11:2c:a2:f6:78:ae:5e:cc:94:4a:ce:cf:
98:64:6d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGVDSkkkL7qLAUlj5qZFRqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjYxMTAxMDMwMDI5WhcNMjYxMTAyMDMwMDI5WjAzMTEwLwYDVQQD
Eyg5ZWRjOTg3NWQ3MTgxN2EyMTg4MjFlMDI1ODRhY2Q3OThjZGUyNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnllHaOcqOK/zAR/ihEsZbklrDszQ
L3hyu47jRDSTf8gu7h6yqCftUo4T/uaAAMPskbHdk7+9e6zK2TnJb6yX5JWnsSXj
MdpDZI3Y6PpoRS4BuqE3FK7dbTP+DJ7+DIIR+OfrGGnjiXSKJf4y9aq8JH8QTW6Y
IkzFPYnM9xyNVqNMLbkwcLMAuYyOjU7HB+4ovPZamstOxGdcdwpACsvVtJDmIQhQ
16hSsi1GdooTNiuJCJC1oPd7jsj8n9hXbY2xHeNXcUbsbTY3kag8+gnU+P4UK3R8
dF/iIpQow626DhnTiyEpe/0DdviSSEkRae8JzJN9RIWqvDFGtNsq1IvCnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7cmHXXGBeiGIIeAlhKzXmM3ic0MB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/e7n3XM
zFfEFXQLCYE29nsF2Wod08ewHd3t60MgGpPW/MX8e3LBvLZ7HrfRcqoNVfYxf5JO
0Qlsn7Ercfstt1/zQypy/Q/EqkV4yWbNkIp4g8zrLU+JPOeLMLzpLTmkaOoZZ3cU
v8HdjoV0VLqEWy4/osL9fz/glDwL0UFPrLVdqcaHykRvE7doMesklbZybqJmKrYQ
reLdjDiHW0UQLFKvENvSDyBXJqGwpWMq15UkXrWfibZJsI1PHW15j6Sm4286UV/y
sNfwV1850CK8Y67UUHCyyNYXHoeAHjLkwkIpwd87VJF++dUxzGT5NcZkESyi9niu
XsyUSs7PmGRtvQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:36:59 2026 by rpki-client