Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: 6et9lu0KJZb3o11CJazvUOjxdK3jkcYhEFfI8lweyBI=
Subject key identifier: 1E:A4:22:CF:52:BF:DF:60:3E:6D:B0:94:A6:59:4B:44:63:78:3A:5C
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 01A18C0A744D13042844E1C08D5A9CF0843F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 1319
Signing time: Fri 30 Oct 2026 09:00:57 +0000
Manifest this update: Fri 30 Oct 2026 09:00:57 +0000
Manifest next update: Sat 31 Oct 2026 09:00:57 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: K70JyrDbILgIlkf9A8KR7DD2ivEUH588fmcdiuHS8qc=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:74:4d:13:04:28:44:e1:c0:8d:5a:9c:f0:84:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Oct 30 09:00:57 2026 GMT
Not After : Oct 31 09:00:57 2026 GMT
Subject: CN=1ea422cf52bfdf603e6db094a6594b4463783a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:b9:b5:17:62:91:6d:c8:56:9d:d7:87:af:
f8:d5:d8:c3:ea:2f:b4:97:c9:c4:aa:23:e6:7d:ad:
8f:1d:69:a2:a0:a9:aa:0a:57:ce:c9:32:20:ab:6b:
27:5d:a0:d8:8f:26:62:f6:ba:55:4f:b5:0a:86:0e:
5b:a0:d3:4d:d1:2d:a7:d9:a5:8a:cd:83:4d:65:85:
03:9d:32:e1:1e:f6:bb:5a:82:a6:cd:92:05:02:93:
14:41:81:c1:e3:74:95:de:60:cd:f3:2a:1c:8b:5d:
1e:46:b2:ea:f0:55:12:2d:23:8b:2c:b4:c7:07:75:
76:70:d7:5e:9a:ff:08:b9:d5:67:49:6c:74:bb:02:
b5:de:da:0d:1a:08:99:4b:97:9c:5f:9b:26:aa:ad:
be:ea:54:c1:1c:d4:b6:94:b5:92:79:68:51:98:31:
ad:c2:d0:a2:c6:ce:e2:94:8a:e9:c1:51:30:85:dc:
e2:42:58:8f:36:56:e9:99:9f:fb:87:a7:7a:28:87:
06:ba:9d:bf:ed:e4:c2:37:9e:cb:9f:16:80:57:c1:
5d:85:1f:23:7c:64:05:9f:41:d6:0a:e9:4d:a6:48:
0c:6b:3e:c9:27:1b:05:6f:e1:a9:1e:7c:e6:1a:0e:
67:5f:e8:5d:9a:e7:40:e0:32:77:36:a4:db:48:e7:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:22:CF:52:BF:DF:60:3E:6D:B0:94:A6:59:4B:44:63:78:3A:5C
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:59:3f:01:04:4d:4d:52:0e:fd:9c:fc:cf:1e:37:53:38:9b:
be:06:f3:da:da:bf:4c:fd:e7:11:50:09:17:38:78:6a:d8:33:
b2:4f:98:da:c0:71:a0:ee:4c:b6:97:35:51:3f:e8:93:8c:33:
1d:8f:b8:e5:d2:52:e8:3b:00:3c:29:22:df:79:fc:fb:4a:d1:
bf:ff:44:58:a2:82:cf:33:e4:f0:f0:78:d1:0b:a9:cb:9c:08:
b3:50:0e:76:c8:d7:a9:09:97:33:16:09:6e:c4:52:2a:23:00:
87:44:65:4f:d0:db:c4:46:2f:f8:7e:90:cc:b8:1f:37:94:45:
d3:14:7b:30:05:41:ab:be:0f:87:dc:cc:05:17:56:8e:73:b4:
71:0e:d0:5e:7d:3a:cd:5a:ae:05:6e:f9:b6:34:94:e1:d3:78:
fe:42:6e:cd:e9:78:87:70:d8:57:a5:4c:a5:b7:7d:16:c7:60:
1c:24:cf:92:90:b0:01:f1:42:40:de:4f:6a:ee:6a:9f:d5:38:
a5:e7:05:7f:9c:66:de:e9:55:6a:ae:a3:e1:26:01:e7:f4:f3:
33:b0:21:e4:70:99:b0:6f:08:3c:38:37:55:48:78:8f:a7:53:
fc:08:f1:e7:73:87:1b:49:2d:0b:07:71:3b:3f:fc:ef:7e:b0:
be:4b:b7:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGMCnRNEwQoROHAjVqc8IQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3
NGYxNDcwHhcNMjYxMDMwMDkwMDU3WhcNMjYxMDMxMDkwMDU3WjAzMTEwLwYDVQQD
EygxZWE0MjJjZjUyYmZkZjYwM2U2ZGIwOTRhNjU5NGI0NDYzNzgzYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTm5tRdikW3IVp3Xh6/41djD6i+0
l8nEqiPmfa2PHWmioKmqClfOyTIgq2snXaDYjyZi9rpVT7UKhg5boNNN0S2n2aWK
zYNNZYUDnTLhHva7WoKmzZIFApMUQYHB43SV3mDN8yoci10eRrLq8FUSLSOLLLTH
B3V2cNdemv8IudVnSWx0uwK13toNGgiZS5ecX5smqq2+6lTBHNS2lLWSeWhRmDGt
wtCixs7ilIrpwVEwhdziQliPNlbpmZ/7h6d6KIcGup2/7eTCN57LnxaAV8FdhR8j
fGQFn0HWCulNpkgMaz7JJxsFb+GpHnzmGg5nX+hdmudA4DJ3NqTbSOeRCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6kIs9Sv99gPm2wlKZZS0RjeDpcMB8GA1UdIwQY
MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt
ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3
LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFk/AQRN
TVIO/Zz8zx43Uzibvgbz2tq/TP3nEVAJFzh4atgzsk+Y2sBxoO5Mtpc1UT/ok4wz
HY+45dJS6DsAPCki33n8+0rRv/9EWKKCzzPk8PB40Qupy5wIs1AOdsjXqQmXMxYJ
bsRSKiMAh0RlT9DbxEYv+H6QzLgfN5RF0xR7MAVBq74Ph9zMBRdWjnO0cQ7QXn06
zVquBW75tjSU4dN4/kJuzel4h3DYV6VMpbd9FsdgHCTPkpCwAfFCQN5Pau5qn9U4
pecFf5xm3ulVaq6j4SYB5/TzM7Ah5HCZsG8IPDg3VUh4j6dT/Ajx53OHG0ktCwdx
Oz/8736wvku3GQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:48 2026 by rpki-client