Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: 11YAR7FViaQHyBZtY43IGz/9y+aQ2jLPKTWbY4ORU3o=
Subject key identifier: 3A:B8:98:F6:94:68:A6:B1:4E:38:34:76:43:40:17:93:66:23:AC:AC
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 01A06D95AD8A286465147C8D3AA58CDDBFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 096E
Signing time: Fri 04 Sep 2026 18:02:00 +0000
Manifest this update: Fri 04 Sep 2026 18:02:00 +0000
Manifest next update: Sat 05 Sep 2026 18:02:00 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: aFqMXouPqgocudsDFc2+3iMhX+2YDuZwnF6cm45Onl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:ad:8a:28:64:65:14:7c:8d:3a:a5:8c:dd:bf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Sep 4 18:02:00 2026 GMT
Not After : Sep 5 18:02:00 2026 GMT
Subject: CN=3ab898f69468a6b14e383476434017936623acac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:b6:d9:b0:2f:91:74:2c:4f:50:97:6c:7c:
cd:44:e5:c7:ea:c7:ac:a5:be:c4:27:1a:64:2e:37:
ab:31:0c:0b:db:99:9d:60:22:e1:50:68:a5:d3:9f:
62:68:75:ce:b1:f3:28:f9:cb:6e:ef:5a:d7:fd:de:
c8:4c:f1:53:a6:ee:41:7f:4d:31:5c:e2:e7:02:93:
0e:6f:20:6b:35:ae:ca:47:29:27:c6:71:1f:37:f4:
ba:72:a3:f3:97:1c:2c:0f:78:6c:49:d8:d5:04:72:
b3:d0:ec:51:96:a2:63:19:bf:35:b2:82:d3:5e:04:
c0:83:ed:fd:27:31:df:90:7f:9b:50:f3:1a:00:43:
f5:18:31:dc:7c:7f:f4:9e:9a:da:77:35:00:ca:4a:
5b:af:8a:3a:31:8c:3c:7a:02:26:d0:cb:b9:1a:93:
18:0f:21:71:fe:3d:6c:6a:6f:60:4d:ef:00:c2:9e:
41:74:df:c9:d3:94:eb:5f:d9:37:58:9f:e9:0d:b7:
29:e9:2e:38:32:09:18:0f:33:82:34:15:5b:9b:d1:
24:39:40:30:d9:d4:e8:50:47:09:a8:0f:60:2d:95:
70:25:dc:3b:3e:0b:8a:38:88:9d:f1:21:bc:87:79:
06:63:80:9a:68:b4:ce:94:d2:c1:13:b7:30:8a:55:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:98:F6:94:68:A6:B1:4E:38:34:76:43:40:17:93:66:23:AC:AC
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:31:54:f9:31:80:88:9c:d3:bb:bd:57:61:66:00:62:34:9e:
52:bb:67:36:b5:3d:9c:f5:1c:ac:68:bc:d1:94:8b:96:4d:6c:
a2:82:bc:05:c8:b4:33:34:91:c2:96:80:92:e6:31:d3:25:75:
b3:33:b5:58:40:97:75:c3:8e:21:86:24:33:64:14:a7:68:dd:
2a:f6:d6:ce:12:54:42:3c:22:a5:cb:86:90:d7:3a:c7:2b:40:
c9:64:23:62:8b:3a:4d:21:8d:56:23:c4:78:e2:ad:02:54:dd:
dd:43:57:57:85:93:6b:62:b6:4c:71:57:07:6b:6e:66:4e:72:
dd:d1:a2:7b:6c:f8:9e:f0:32:81:3a:68:67:b5:ce:46:b8:d4:
23:fc:81:01:79:a9:bd:10:ac:02:48:2e:96:bc:71:78:8e:be:
0b:ba:f6:89:da:37:74:b6:d3:37:54:63:f7:70:3e:d2:22:ec:
b8:de:02:16:6f:39:2f:64:cc:0f:b0:3d:46:15:d6:36:a7:01:
6a:0f:e0:ec:36:d8:9d:cd:db:e6:40:a2:a2:e4:05:3a:d9:81:
8e:42:6f:4c:07:a9:9b:32:40:16:19:cb:c8:55:bf:8b:14:ee:
01:47:71:34:29:1e:04:1c:72:74:7b:e4:e7:4a:38:bb:d6:01:
0a:c3:ec:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtla2KKGRlFHyNOqWM3b+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0
ZjRlOWEwHhcNMjYwOTA0MTgwMjAwWhcNMjYwOTA1MTgwMjAwWjAzMTEwLwYDVQQD
EygzYWI4OThmNjk0NjhhNmIxNGUzODM0NzY0MzQwMTc5MzY2MjNhY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsra22bAvkXQsT1CXbHzNROXH6ses
pb7EJxpkLjerMQwL25mdYCLhUGil059iaHXOsfMo+ctu71rX/d7ITPFTpu5Bf00x
XOLnApMObyBrNa7KRyknxnEfN/S6cqPzlxwsD3hsSdjVBHKz0OxRlqJjGb81soLT
XgTAg+39JzHfkH+bUPMaAEP1GDHcfH/0npradzUAykpbr4o6MYw8egIm0Mu5GpMY
DyFx/j1sam9gTe8Awp5BdN/J05TrX9k3WJ/pDbcp6S44MgkYDzOCNBVbm9EkOUAw
2dToUEcJqA9gLZVwJdw7PguKOIid8SG8h3kGY4CaaLTOlNLBE7cwilXyjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq4mPaUaKaxTjg0dkNAF5NmI6ysMB8GA1UdIwQY
MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt
NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix
LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTFU+TGA
iJzTu71XYWYAYjSeUrtnNrU9nPUcrGi80ZSLlk1sooK8Bci0MzSRwpaAkuYx0yV1
szO1WECXdcOOIYYkM2QUp2jdKvbWzhJUQjwipcuGkNc6xytAyWQjYos6TSGNViPE
eOKtAlTd3UNXV4WTa2K2THFXB2tuZk5y3dGie2z4nvAygTpoZ7XORrjUI/yBAXmp
vRCsAkgulrxxeI6+C7r2ido3dLbTN1Rj93A+0iLsuN4CFm85L2TMD7A9RhXWNqcB
ag/g7DbYnc3b5kCiouQFOtmBjkJvTAepmzJAFhnLyFW/ixTuAUdxNCkeBBxydHvk
50o4u9YBCsPsTA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:34:23 2026 by rpki-client