Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: KDGIKphh+2eIPOotEiGosuw3ScIIRBqnlFurj5hLuBc=
Subject key identifier: 6D:37:95:B4:11:31:77:10:FA:AD:08:9B:41:BD:1A:69:2C:BF:2D:75
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 01A08C7A9DF4ABBD17700B5FF5F49EA2442B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 18:00:41 +0000
Manifest this update: Thu 10 Sep 2026 18:00:41 +0000
Manifest next update: Fri 11 Sep 2026 18:00:41 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: TlRW7a5yZXwlzF43m3cREaBGVty6MVwc5t48xr3W6Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:9d:f4:ab:bd:17:70:0b:5f:f5:f4:9e:a2:44:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Sep 10 18:00:41 2026 GMT
Not After : Sep 11 18:00:41 2026 GMT
Subject: CN=6d3795b411317710faad089b41bd1a692cbf2d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:cb:ba:13:ca:87:24:55:dc:b2:2c:f5:df:
e6:87:71:45:21:16:87:77:50:40:67:68:47:2e:6a:
7b:13:ff:96:2e:f0:cf:fc:be:0e:aa:58:da:83:f6:
60:a5:77:93:b0:b0:89:78:ff:ba:01:13:a0:26:e3:
0c:3f:7e:1b:64:78:55:27:4c:06:ab:5c:b7:7c:46:
64:4d:3d:70:67:36:2c:f6:5b:b7:58:86:94:c8:62:
87:47:21:5c:a5:88:ab:35:dc:8f:32:ea:53:89:9a:
7a:52:76:0c:d7:fa:cc:a9:c6:b1:68:4a:f6:0a:aa:
7d:60:90:46:24:58:71:bd:71:82:d2:31:ef:2e:c3:
34:db:a7:14:e6:98:7e:bd:08:d3:f7:9a:35:d9:e8:
d4:ed:d1:7b:3c:52:b7:de:32:41:8a:d9:e5:fb:9f:
da:cf:bf:c6:11:38:18:81:ec:7c:64:61:17:e2:02:
8d:21:21:79:cf:e1:4a:0a:14:62:a1:55:da:b5:a5:
57:4a:cf:3e:c1:6c:3a:6e:70:62:00:1f:89:17:ee:
6e:dd:2c:e4:54:38:fd:5b:0b:72:5d:81:1a:dd:3a:
d1:fb:7d:35:3d:2f:67:56:89:98:4a:14:b0:98:02:
42:f0:d0:a3:63:00:48:b1:07:76:22:34:41:1f:5d:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:95:B4:11:31:77:10:FA:AD:08:9B:41:BD:1A:69:2C:BF:2D:75
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:61:23:98:b4:23:1e:bf:8c:d4:f6:81:3f:de:29:7b:b9:75:
77:fb:93:49:44:01:9f:7c:08:3e:72:05:23:7d:2f:c1:43:96:
3c:dd:96:9f:83:42:ea:c1:38:ef:bb:b3:d7:9a:1c:97:ad:07:
26:70:1b:7d:2f:4b:8b:ef:15:f5:b2:2c:8b:72:3a:8e:06:b6:
66:0c:15:b6:58:68:85:07:4b:4c:59:3a:aa:ed:db:1c:44:6d:
78:0d:1e:45:82:ec:71:bb:57:b2:79:4e:87:6e:35:ef:af:ae:
21:47:9c:e7:04:f3:49:fc:c4:91:a8:d4:87:88:e6:80:7b:ec:
68:af:65:4d:82:7e:ae:2a:88:4a:80:67:47:9b:88:ee:80:e5:
14:9f:61:65:8f:01:d8:20:fd:3e:97:a3:88:00:72:2f:36:fd:
cb:7b:53:e5:6a:55:99:94:45:c8:56:02:3e:bb:f9:43:95:5c:
31:b0:33:15:3b:cb:fa:55:a6:47:9f:25:fc:46:4d:9f:ef:5f:
0f:02:0d:35:34:1c:be:7f:f0:be:f7:59:6b:99:1a:8f:20:d9:
62:52:ad:f7:82:ba:4b:08:9a:c8:48:e7:1d:40:26:26:16:c4:
45:b5:e7:e7:08:50:18:93:50:72:39:e0:3f:7a:45:c7:6f:2e:
5c:f4:5e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMep30q70XcAtf9fSeokQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjYwOTEwMTgwMDQxWhcNMjYwOTExMTgwMDQxWjAzMTEwLwYDVQQD
Eyg2ZDM3OTViNDExMzE3NzEwZmFhZDA4OWI0MWJkMWE2OTJjYmYyZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsXLuhPKhyRV3LIs9d/mh3FFIRaH
d1BAZ2hHLmp7E/+WLvDP/L4Oqljag/ZgpXeTsLCJeP+6AROgJuMMP34bZHhVJ0wG
q1y3fEZkTT1wZzYs9lu3WIaUyGKHRyFcpYirNdyPMupTiZp6UnYM1/rMqcaxaEr2
Cqp9YJBGJFhxvXGC0jHvLsM026cU5ph+vQjT95o12ejU7dF7PFK33jJBitnl+5/a
z7/GETgYgex8ZGEX4gKNISF5z+FKChRioVXataVXSs8+wWw6bnBiAB+JF+5u3Szk
VDj9WwtyXYEa3TrR+301PS9nVomYShSwmAJC8NCjYwBIsQd2IjRBH121KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG03lbQRMXcQ+q0Im0G9Gmksvy11MB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGEjmLQj
Hr+M1PaBP94pe7l1d/uTSUQBn3wIPnIFI30vwUOWPN2Wn4NC6sE477uz15ocl60H
JnAbfS9Li+8V9bIsi3I6jga2ZgwVtlhohQdLTFk6qu3bHERteA0eRYLscbtXsnlO
h24176+uIUec5wTzSfzEkajUh4jmgHvsaK9lTYJ+riqISoBnR5uI7oDlFJ9hZY8B
2CD9PpejiAByLzb9y3tT5WpVmZRFyFYCPrv5Q5VcMbAzFTvL+lWmR58l/EZNn+9f
DwINNTQcvn/wvvdZa5kajyDZYlKt94K6SwiayEjnHUAmJhbERbXn5whQGJNQcjng
P3pFx28uXPReFQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:47:28 2026 by rpki-client