Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: 5yjiERayNYmucMVC8lUqCEwY7ePuCAOSjXurN1r+Twc=
Subject key identifier: 06:03:C9:D2:33:A6:B5:06:7A:DD:2B:CF:E4:CA:BF:F7:4F:87:84:07
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01A16BA3DBE1EBC8B32C712F4F8A445E3D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1AC7
Signing time: Sat 24 Oct 2026 02:01:03 +0000
Manifest this update: Sat 24 Oct 2026 02:01:03 +0000
Manifest next update: Sun 25 Oct 2026 02:01:03 +0000
Files and hashes: 1: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
2: lSFi-1eTKmeoYvO7iogn6X4tIpU.roa (hash: //ICRxBUp7hn0Q5ceoMLISlFLfZ4l/LvL7doeO/ruS0=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: lcUD/2SpGOZa41Y98xa0fa5Heuj6VQ7OTqeFTDu6quk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:a3:db:e1:eb:c8:b3:2c:71:2f:4f:8a:44:5e:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Oct 24 02:01:03 2026 GMT
Not After : Oct 25 02:01:03 2026 GMT
Subject: CN=0603c9d233a6b5067add2bcfe4cabff74f878407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:6d:81:7f:32:0d:f0:41:fa:f8:f8:09:10:
f8:cb:e6:f5:9e:cc:f5:34:33:89:9c:99:7a:70:45:
f5:21:b2:31:92:8b:4e:14:ac:38:53:9c:de:7e:de:
b1:67:d1:c7:76:41:ef:77:dd:37:7b:f8:05:77:d2:
81:53:d5:3b:d6:03:4d:1f:e7:76:8a:bf:24:14:ff:
86:1e:d5:68:a6:4c:21:b0:72:ce:2c:85:32:d6:98:
e9:07:66:fb:b0:89:01:6b:42:f1:cc:ee:94:1d:4d:
42:ab:5e:fe:8f:4c:d0:fd:1e:a2:6b:45:5d:13:02:
91:9a:9e:ac:62:22:ce:fc:b2:7e:35:c1:3f:4e:fe:
dd:bf:d8:07:d6:56:b1:7b:3a:58:32:2b:ca:c7:03:
ac:0d:af:c0:d0:14:35:26:92:ac:f8:45:fc:d6:4b:
fe:f8:68:89:da:0f:ad:54:6c:34:3c:15:8b:b6:bf:
db:b1:e3:dd:1c:21:63:8c:e4:ab:ab:43:a8:1c:c5:
4c:9d:93:a2:af:d5:89:57:3b:34:98:d4:e3:76:f3:
43:43:be:3b:db:e1:61:c3:b1:dc:c1:f2:59:f1:3f:
54:09:3a:ce:89:a4:29:58:6d:85:b9:5a:95:43:56:
2b:89:48:3d:77:11:d8:94:21:4b:62:6a:cd:e6:84:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:03:C9:D2:33:A6:B5:06:7A:DD:2B:CF:E4:CA:BF:F7:4F:87:84:07
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:eb:b1:2c:82:91:6d:55:0f:d9:41:3d:3e:c4:47:58:d4:06:
8c:d1:7e:2e:72:36:da:38:39:d6:d0:7a:7f:94:5f:28:83:ac:
14:fe:98:a0:ca:fb:49:0d:94:9b:39:ed:67:c6:91:cd:a8:2d:
3c:02:bb:35:d1:26:b9:5f:3e:df:0b:b1:2e:43:d7:4b:6a:74:
a6:b6:46:aa:e0:ef:20:4e:6c:64:17:68:a4:3b:a7:6f:7d:1c:
dd:53:e8:48:1d:d2:cf:15:e4:4d:5b:82:34:91:e5:2a:7f:e1:
82:dd:b5:59:6c:87:bc:1f:c2:9f:fa:c6:d9:f4:9d:09:00:ee:
08:5b:cc:8f:75:bc:33:95:c8:13:33:4d:fc:14:2a:a4:13:76:
5c:36:f1:40:1f:71:5a:7b:6e:c1:13:2e:99:58:d3:f8:52:e0:
b8:1a:0d:d8:2a:b4:a6:41:5a:47:30:de:c5:f4:86:27:ea:59:
39:76:3a:6f:e6:84:f8:ab:5a:f9:04:72:81:67:c2:f0:7a:16:
ea:2d:83:c5:5f:47:26:73:48:64:73:cd:f3:55:b4:f2:d7:85:
6c:a7:9a:d2:e0:86:48:93:1b:10:24:d6:b2:d3:b9:d0:c2:92:
74:fa:ba:db:65:db:36:7a:c9:74:d5:fe:cd:40:0b:96:07:b0:
78:e6:f0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFro9vh68izLHEvT4pEXj0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjYxMDI0MDIwMTAzWhcNMjYxMDI1MDIwMTAzWjAzMTEwLwYDVQQD
EygwNjAzYzlkMjMzYTZiNTA2N2FkZDJiY2ZlNGNhYmZmNzRmODc4NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG5tgX8yDfBB+vj4CRD4y+b1nsz1
NDOJnJl6cEX1IbIxkotOFKw4U5zeft6xZ9HHdkHvd903e/gFd9KBU9U71gNNH+d2
ir8kFP+GHtVopkwhsHLOLIUy1pjpB2b7sIkBa0LxzO6UHU1Cq17+j0zQ/R6ia0Vd
EwKRmp6sYiLO/LJ+NcE/Tv7dv9gH1laxezpYMivKxwOsDa/A0BQ1JpKs+EX81kv+
+GiJ2g+tVGw0PBWLtr/bsePdHCFjjOSrq0OoHMVMnZOir9WJVzs0mNTjdvNDQ747
2+Fhw7HcwfJZ8T9UCTrOiaQpWG2FuVqVQ1YriUg9dxHYlCFLYmrN5oQgAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYDydIzprUGet0rz+TKv/dPh4QHMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5OuxLIKR
bVUP2UE9PsRHWNQGjNF+LnI22jg51tB6f5RfKIOsFP6YoMr7SQ2UmzntZ8aRzagt
PAK7NdEmuV8+3wuxLkPXS2p0prZGquDvIE5sZBdopDunb30c3VPoSB3SzxXkTVuC
NJHlKn/hgt21WWyHvB/Cn/rG2fSdCQDuCFvMj3W8M5XIEzNN/BQqpBN2XDbxQB9x
WntuwRMumVjT+FLguBoN2Cq0pkFaRzDexfSGJ+pZOXY6b+aE+Kta+QRygWfC8HoW
6i2DxV9HJnNIZHPN81W08teFbKea0uCGSJMbECTWstO50MKSdPq622XbNnrJdNX+
zUALlgeweObwcQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:16:19 2026 by rpki-client