Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: wDbzdvETngUyFOpdmbOXuW1PQDnpAeji96cL1RQvtSQ=
Subject key identifier: 39:92:36:83:6B:C0:42:35:18:DE:37:5D:48:64:A3:65:6C:47:46:1F
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 01A08B3199743C4A0F93DE3755E7EA59957F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 1294
Signing time: Thu 10 Sep 2026 12:01:18 +0000
Manifest this update: Thu 10 Sep 2026 12:01:18 +0000
Manifest next update: Fri 11 Sep 2026 12:01:18 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: G7j5ufvNTh4uB1BiipN0vhAgLjI4uYShWOxoiWsbbSw=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:99:74:3c:4a:0f:93:de:37:55:e7:ea:59:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Sep 10 12:01:18 2026 GMT
Not After : Sep 11 12:01:18 2026 GMT
Subject: CN=399236836bc0423518de375d4864a3656c47461f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:13:07:60:37:8b:f9:09:18:8c:4a:22:67:
78:d7:63:5c:7b:14:4a:10:62:98:67:b3:4b:a4:38:
b5:cd:a4:ca:91:ac:a0:56:4c:17:13:ef:d9:5a:b7:
6c:ee:e7:6b:7e:93:09:a8:57:76:62:78:c3:c6:02:
ab:8b:2b:b2:a5:dc:76:74:dc:2f:82:ef:fa:6f:6f:
83:07:86:2b:af:57:a0:b8:a6:4d:a2:2f:25:2d:04:
ad:23:d8:5a:9d:9c:c0:48:da:7a:5e:cc:bb:6d:da:
3d:8b:15:7c:f5:4d:aa:2c:16:aa:56:18:49:c4:f8:
59:44:e6:e7:46:a0:46:ec:02:b5:45:f7:d0:e0:34:
11:00:de:5c:19:2f:36:34:ad:f9:5f:f5:18:aa:ba:
28:75:9e:cd:78:fd:3e:48:21:8a:d6:6f:5c:e5:1f:
bc:2e:38:8d:0a:fa:05:ea:d0:0b:84:39:40:8d:f2:
67:9b:3b:d6:05:c7:11:4c:d4:ad:e4:e7:20:ae:4e:
6f:42:80:1a:6d:67:1a:37:00:60:32:d4:39:3d:97:
15:e3:99:b3:12:4c:57:1e:42:ca:18:69:8f:16:43:
dd:cb:f5:e0:cc:c1:65:fa:fd:34:36:be:e8:4f:6c:
f3:14:ea:ae:82:a6:b4:fc:12:68:ec:97:ea:ba:7b:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:92:36:83:6B:C0:42:35:18:DE:37:5D:48:64:A3:65:6C:47:46:1F
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f9:33:19:0f:20:d1:98:75:cb:ad:87:d4:5d:ac:a8:c7:06:
8c:ef:f4:d7:98:59:0b:2f:df:2a:f3:34:4f:81:a8:30:c2:a1:
91:61:46:f7:48:b2:46:0f:41:6c:81:12:b5:4b:7e:f7:61:69:
ae:08:6e:0e:8c:da:d7:0c:51:ce:a5:19:d9:b5:04:ff:af:35:
34:82:1a:8e:76:8f:c9:b3:a2:2d:95:91:99:5e:cb:75:81:17:
20:7c:33:8e:17:91:99:fa:72:8f:c7:9b:70:fd:d8:24:91:50:
16:6b:b6:27:f5:5a:75:ca:09:38:c4:f4:a7:73:b8:21:d7:24:
24:28:83:34:e2:62:75:c8:cf:bb:fe:ed:87:4f:38:c1:bf:6a:
a1:23:85:c0:09:3d:a9:1a:6f:3b:6c:57:58:e4:a1:67:50:07:
16:fc:d0:a5:ca:86:35:3a:7e:46:5c:7d:87:3b:e9:89:ee:b4:
51:6f:a0:97:e7:8b:8e:c1:ef:ec:d2:34:0f:38:8e:92:1e:71:
58:e2:13:d2:1a:f9:3c:7c:46:6f:7f:d8:f9:b2:b7:21:1e:a5:
37:71:ad:f5:ff:c0:f3:cb:23:ca:5b:fc:95:28:c0:bf:6b:90:
0e:9f:dd:44:c9:0a:ff:d7:35:d8:51:4d:30:51:2e:c2:d5:5e:
19:35:03:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMZl0PEoPk943VefqWZV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3
NGYxNDcwHhcNMjYwOTEwMTIwMTE4WhcNMjYwOTExMTIwMTE4WjAzMTEwLwYDVQQD
EygzOTkyMzY4MzZiYzA0MjM1MThkZTM3NWQ0ODY0YTM2NTZjNDc0NjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubYTB2A3i/kJGIxKImd412NcexRK
EGKYZ7NLpDi1zaTKkaygVkwXE+/ZWrds7udrfpMJqFd2YnjDxgKriyuypdx2dNwv
gu/6b2+DB4Yrr1eguKZNoi8lLQStI9hanZzASNp6Xsy7bdo9ixV89U2qLBaqVhhJ
xPhZRObnRqBG7AK1RffQ4DQRAN5cGS82NK35X/UYqroodZ7NeP0+SCGK1m9c5R+8
LjiNCvoF6tALhDlAjfJnmzvWBccRTNSt5Ocgrk5vQoAabWcaNwBgMtQ5PZcV45mz
EkxXHkLKGGmPFkPdy/XgzMFl+v00Nr7oT2zzFOqugqa0/BJo7Jfqunv8JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmSNoNrwEI1GN43XUhko2VsR0YfMB8GA1UdIwQY
MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt
ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3
LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvkzGQ8g
0Zh1y62H1F2sqMcGjO/015hZCy/fKvM0T4GoMMKhkWFG90iyRg9BbIEStUt+92Fp
rghuDoza1wxRzqUZ2bUE/681NIIajnaPybOiLZWRmV7LdYEXIHwzjheRmfpyj8eb
cP3YJJFQFmu2J/VadcoJOMT0p3O4IdckJCiDNOJidcjPu/7th084wb9qoSOFwAk9
qRpvO2xXWOShZ1AHFvzQpcqGNTp+Rlx9hzvpie60UW+gl+eLjsHv7NI0DziOkh5x
WOIT0hr5PHxGb3/Y+bK3IR6lN3Gt9f/A88sjylv8lSjAv2uQDp/dRMkK/9c12FFN
MFEuwtVeGTUDyA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:12 2026 by rpki-client