Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
File: xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft (raw, json)
Hash identifier: 97cWuVgMHQ5aZ9M6Fctj2kKw3nfmVWUzAZgIPNVDrOw=
Subject key identifier: 87:06:F7:58:22:A1:66:2B:C7:F9:4D:59:9C:D8:3B:22:F9:E3:B6:1A
Authority key identifier: C7:35:A6:81:5F:60:0E:A2:49:B1:DA:0A:6F:43:1E:FA:E8:1D:66:B0
Certificate issuer: /CN=c735a6815f600ea249b1da0a6f431efae81d66b0
Certificate serial: 01A174A68E5B4E4C1CC834AE696207FEDCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
Manifest number: DA
Signing time: Sun 25 Oct 2026 20:00:34 +0000
Manifest this update: Sun 25 Oct 2026 20:00:34 +0000
Manifest next update: Mon 26 Oct 2026 20:00:34 +0000
Files and hashes: 1: mJ5RCAjBaYyADaNeklOPoY_zZrc.asa (hash: jcbnQ3QTEujNY2UmLxDviKLr49cB9i4XezfDbSMWaWs=)
2: xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl (hash: XKDHIslNb2C8vzwQOWJt/c9Zb8q/s6c/sPBYUlSA9Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:8e:5b:4e:4c:1c:c8:34:ae:69:62:07:fe:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c735a6815f600ea249b1da0a6f431efae81d66b0
Validity
Not Before: Oct 25 20:00:34 2026 GMT
Not After : Oct 26 20:00:34 2026 GMT
Subject: CN=8706f75822a1662bc7f94d599cd83b22f9e3b61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:cd:57:3b:8d:4e:c9:b3:53:f5:47:bf:1c:
09:4a:34:ce:7a:87:e5:f0:c6:c2:62:7c:fd:08:f9:
08:f4:1f:2e:d2:a9:39:a2:2d:0c:7a:21:5e:d7:b0:
8e:63:57:8f:88:a8:a0:53:ca:d4:e1:24:fd:e8:fa:
2b:1f:b8:10:49:e4:cb:15:12:61:27:57:ed:e2:49:
62:14:37:5c:90:d8:45:5e:cf:2b:9e:89:ae:79:6e:
1b:2b:22:41:08:6e:8e:4d:56:5e:1f:c8:b4:b5:33:
96:66:b9:1a:d4:6a:e4:23:48:39:9e:9a:5c:a1:57:
4a:4b:77:8f:e6:14:7d:32:cf:5b:c6:af:ed:45:61:
65:03:02:bc:1e:c7:b6:ef:75:ad:61:21:85:01:a4:
a7:8d:e5:2b:e2:5b:9a:c3:62:69:3e:be:cd:d2:83:
8e:f6:89:8d:6a:3a:f1:45:54:86:8c:60:fa:61:04:
44:7c:b2:49:5f:6c:60:47:c1:6d:ee:a2:9c:67:41:
75:c1:4a:82:ac:f7:b0:29:43:93:5b:3c:45:b6:3b:
3f:86:e2:6b:c3:47:a8:f4:95:e3:75:30:52:fb:8d:
3b:2b:18:16:b0:90:b8:78:5a:0b:af:8d:7e:34:c5:
5f:45:67:4c:75:fa:3c:05:79:be:98:8b:75:ea:46:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:F7:58:22:A1:66:2B:C7:F9:4D:59:9C:D8:3B:22:F9:E3:B6:1A
X509v3 Authority Key Identifier:
keyid:C7:35:A6:81:5F:60:0E:A2:49:B1:DA:0A:6F:43:1E:FA:E8:1D:66:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzWmgV9gDqJJsdoKb0Me-ugdZrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd8569-ac32-4e02-9375-40d823c9c0c4/1/xzWmgV9gDqJJsdoKb0Me-ugdZrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:87:41:32:6c:29:15:15:f3:4e:d9:a1:11:63:06:15:04:0a:
78:f3:0a:75:1b:5c:f5:3b:5e:75:e0:94:6e:49:1b:68:de:87:
72:be:2b:a1:49:de:fd:32:8d:b6:02:45:b7:fc:7c:9f:da:28:
56:a7:c7:80:2f:9e:90:5c:6a:11:03:86:fc:ce:1d:0f:57:3a:
76:49:78:60:18:af:90:51:02:77:15:23:6d:e1:1f:54:0f:c5:
47:3a:90:75:35:68:e3:c8:37:e6:53:6a:b0:4f:b3:f8:69:9e:
79:60:d9:fd:35:4d:3a:89:be:e2:35:87:e8:cd:a9:7c:dc:76:
d1:03:42:50:09:25:45:2e:0e:32:b2:f5:b5:51:04:09:b5:ae:
40:c1:52:f9:12:b2:64:5b:38:de:dd:18:eb:cc:f1:29:18:3c:
bd:28:c7:4f:50:0b:7e:da:ed:78:bd:20:45:1d:4e:62:bf:69:
ab:46:3f:34:b1:7f:98:14:f2:91:7b:13:8e:36:40:96:1a:f5:
3f:f8:5d:b2:d4:67:bb:29:3f:8e:14:1a:d5:ca:d4:8e:87:c1:
13:ac:66:2b:c9:f0:84:33:eb:60:90:1c:11:11:ac:28:5e:22:
a6:ca:be:d8:3d:51:19:98:dd:29:b9:f0:7a:52:85:12:8f:4d:
12:57:d6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0po5bTkwcyDSuaWIH/tzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MzVhNjgxNWY2MDBlYTI0OWIxZGEwYTZmNDMxZWZhZTgx
ZDY2YjAwHhcNMjYxMDI1MjAwMDM0WhcNMjYxMDI2MjAwMDM0WjAzMTEwLwYDVQQD
Eyg4NzA2Zjc1ODIyYTE2NjJiYzdmOTRkNTk5Y2Q4M2IyMmY5ZTNiNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdPNVzuNTsmzU/VHvxwJSjTOeofl
8MbCYnz9CPkI9B8u0qk5oi0MeiFe17COY1ePiKigU8rU4ST96PorH7gQSeTLFRJh
J1ft4kliFDdckNhFXs8rnomueW4bKyJBCG6OTVZeH8i0tTOWZrka1GrkI0g5nppc
oVdKS3eP5hR9Ms9bxq/tRWFlAwK8Hse273WtYSGFAaSnjeUr4luaw2JpPr7N0oOO
9omNajrxRVSGjGD6YQREfLJJX2xgR8Ft7qKcZ0F1wUqCrPewKUOTWzxFtjs/huJr
w0eo9JXjdTBS+407KxgWsJC4eFoLr41+NMVfRWdMdfo8BXm+mIt16kYzfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcG91gioWYrx/lNWZzYOyL547YaMB8GA1UdIwQY
MBaAFMc1poFfYA6iSbHaCm9DHvroHWawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHpXbWdWOWdEcUpKc2RvS2IwTWUtdWdkWnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZDg1NjktYWMzMi00ZTAyLTkzNzUt
NDBkODIzYzljMGM0LzEveHpXbWdWOWdEcUpKc2RvS2IwTWUtdWdkWnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZDg1NjktYWMzMi00ZTAyLTkzNzUtNDBkODIzYzljMGM0
LzEveHpXbWdWOWdEcUpKc2RvS2IwTWUtdWdkWnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASodBMmwp
FRXzTtmhEWMGFQQKePMKdRtc9TtedeCUbkkbaN6Hcr4roUne/TKNtgJFt/x8n9oo
VqfHgC+ekFxqEQOG/M4dD1c6dkl4YBivkFECdxUjbeEfVA/FRzqQdTVo48g35lNq
sE+z+GmeeWDZ/TVNOom+4jWH6M2pfNx20QNCUAklRS4OMrL1tVEECbWuQMFS+RKy
ZFs43t0Y68zxKRg8vSjHT1ALftrteL0gRR1OYr9pq0Y/NLF/mBTykXsTjjZAlhr1
P/hdstRnuyk/jhQa1crUjofBE6xmK8nwhDPrYJAcERGsKF4ipsq+2D1RGZjdKbnw
elKFEo9NElfWig==
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:58:14 2026 by rpki-client