Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: A/IYrfeJmzYfdD8HJVTwJ/rNh80hbCfXlMY7E3s2Bck=
Subject key identifier: 13:16:36:AE:41:61:49:B7:D0:C1:4B:D2:50:1E:C5:02:DA:87:CA:F3
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01A17BF28AB0316D72294E1044933004FF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 1A2C
Signing time: Tue 27 Oct 2026 06:00:54 +0000
Manifest this update: Tue 27 Oct 2026 06:00:54 +0000
Manifest next update: Wed 28 Oct 2026 06:00:54 +0000
Files and hashes: 1: 0GQvydNnvltwCYU4Ip_UMWYTxxY.roa (hash: LhV5AD4zlFaWyl3gf5xKjG4cuVjXMxEqjf7rizI3yyc=)
2: HuBqJxrPz8cJIEhWPQ734TMtT-k.roa (hash: tQAxKG9Tf5jOtAxlSBHO2a2s2np2ioSUpEcr2kqOTv4=)
3: XWrjWShl8ZOcp09LK2_ONhgHsKY.roa (hash: AC5IcqCMeXfvwYRIiyyOeZ/CwhWtUU1oEh3vKTXLGOA=)
4: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (hash: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE=)
5: aRUSUeQ8jMxodN7YT76VVlAnkYc.roa (hash: kW/ZEynMRGdhc2qvAiSVXrvlJhdBKDD65FvfwCuJ9qI=)
6: meWMB7mMCO2YGDQEgDBAeOkKxbU.roa (hash: 5uVBi/vJg+ul9fevZEzoy7ePbW0P4h1Oq+CpG62Daig=)
7: umcl7WnZK20q_yk2qfdqCvl0gZc.roa (hash: a3iwx7aEh16G880sgnY2R852Jz2/uGuPT/7WcJXbeQc=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: efcTSDwXdM1O4CyHEb8QgzMfixqBFgj4f8uDjBL+n58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:8a:b0:31:6d:72:29:4e:10:44:93:30:04:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Oct 27 06:00:54 2026 GMT
Not After : Oct 28 06:00:54 2026 GMT
Subject: CN=131636ae416149b7d0c14bd2501ec502da87caf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:d2:89:7c:86:6a:95:4b:1e:27:6b:e4:2c:
3f:3b:e4:db:0f:e2:0f:47:82:41:01:ce:d6:53:b9:
f2:73:2b:fd:10:01:f1:71:d9:72:70:68:e9:55:81:
26:0c:66:07:ca:9c:a6:a0:37:bc:54:fc:a2:e8:38:
89:28:f4:cb:9b:f4:0e:b1:4a:6e:a3:66:0c:25:c1:
4c:4c:8d:24:d0:a3:85:02:cd:72:1c:19:33:ae:38:
69:36:56:5a:d2:fd:b5:75:f9:8b:1c:75:d9:b7:c1:
f5:68:e2:00:d0:65:29:9c:26:da:24:d2:e8:90:1e:
b9:ae:0a:c5:e4:09:56:8d:48:8e:19:82:8a:59:8d:
3b:d4:cd:ce:98:2f:84:b3:bb:41:43:83:0e:df:db:
6d:6b:34:ce:88:a0:60:48:04:1a:7a:87:3a:14:f7:
69:df:ec:28:72:40:a8:0a:3c:b9:6c:b0:f7:c6:6a:
fe:0f:2f:36:af:c7:27:93:ef:3c:42:f0:60:cb:6e:
ec:64:2b:f7:91:9d:9a:a8:b9:40:1b:75:98:60:e1:
a8:55:d8:71:e8:ec:89:98:3b:d9:01:bf:83:82:9f:
02:df:f6:40:29:20:fe:77:a5:c6:da:49:fa:0f:6a:
c9:5d:0d:d0:da:c4:c6:31:80:c1:45:7d:a5:78:ff:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:16:36:AE:41:61:49:B7:D0:C1:4B:D2:50:1E:C5:02:DA:87:CA:F3
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d5:e7:e1:5d:2c:72:7d:7f:58:9a:a5:24:c5:30:2b:26:42:
07:ac:08:71:84:fb:68:16:b6:37:58:81:0b:1b:cd:54:42:85:
1e:3c:0e:49:bd:f9:ca:ef:45:5c:b1:c5:70:47:b0:75:6f:f1:
ad:fd:9e:3a:cc:93:1b:94:44:9a:99:9d:c3:97:10:b8:df:2b:
27:45:5d:7b:0d:10:fc:34:e7:1f:2e:d9:68:2f:c6:97:42:03:
ef:64:5b:0f:7f:97:ec:c3:c0:88:6f:54:26:20:6e:12:02:c6:
d9:a6:b8:82:b5:fe:08:2a:b4:3c:e9:c0:73:18:ff:69:0b:10:
e9:f2:db:41:cb:3f:8c:42:a8:d1:31:6a:5a:b9:7e:54:20:71:
e6:f5:bf:2f:c4:fe:c8:6b:1c:89:d5:3f:cc:45:31:b7:79:fc:
37:04:9f:3d:c4:fa:ee:58:3f:2f:99:a2:e8:d4:79:34:3d:30:
dd:26:ae:ec:be:72:7e:38:2a:c3:54:ed:a2:5f:de:60:54:85:
5d:29:e8:95:0a:3c:b8:0c:49:e5:bb:69:8e:b0:00:5b:82:aa:
b3:76:a7:fe:26:fd:c5:0d:5c:e7:0e:35:69:21:37:bc:a2:58:
29:0e:03:71:99:13:ef:77:99:f2:ef:3b:ff:1e:d4:83:7b:20:
ab:89:b9:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78oqwMW1yKU4QRJMwBP8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw
ZDVkZDkwHhcNMjYxMDI3MDYwMDU0WhcNMjYxMDI4MDYwMDU0WjAzMTEwLwYDVQQD
EygxMzE2MzZhZTQxNjE0OWI3ZDBjMTRiZDI1MDFlYzUwMmRhODdjYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KzSiXyGapVLHidr5Cw/O+TbD+IP
R4JBAc7WU7nycyv9EAHxcdlycGjpVYEmDGYHypymoDe8VPyi6DiJKPTLm/QOsUpu
o2YMJcFMTI0k0KOFAs1yHBkzrjhpNlZa0v21dfmLHHXZt8H1aOIA0GUpnCbaJNLo
kB65rgrF5AlWjUiOGYKKWY071M3OmC+Es7tBQ4MO39ttazTOiKBgSAQaeoc6FPdp
3+wockCoCjy5bLD3xmr+Dy82r8cnk+88QvBgy27sZCv3kZ2aqLlAG3WYYOGoVdhx
6OyJmDvZAb+Dgp8C3/ZAKSD+d6XG2kn6D2rJXQ3Q2sTGMYDBRX2leP+kewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMWNq5BYUm30MFL0lAexQLah8rzMB8GA1UdIwQY
MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt
OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl
LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9Xn4V0s
cn1/WJqlJMUwKyZCB6wIcYT7aBa2N1iBCxvNVEKFHjwOSb35yu9FXLHFcEewdW/x
rf2eOsyTG5REmpmdw5cQuN8rJ0Vdew0Q/DTnHy7ZaC/Gl0ID72RbD3+X7MPAiG9U
JiBuEgLG2aa4grX+CCq0POnAcxj/aQsQ6fLbQcs/jEKo0TFqWrl+VCBx5vW/L8T+
yGscidU/zEUxt3n8NwSfPcT67lg/L5mi6NR5ND0w3Sau7L5yfjgqw1Ttol/eYFSF
XSnolQo8uAxJ5btpjrAAW4Kqs3an/ib9xQ1c5w41aSE3vKJYKQ4DcZkT73eZ8u87
/x7Ug3sgq4m5bg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:41:32 2026 by rpki-client