Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
File: x1es7dSIRbnr0Muqfb2ri8z9jWE.mft (raw, json)
Hash identifier: /oiyJQPINSt0KYXAfQRfxZgvZ6qjASTR9m7Xky4glts=
Subject key identifier: 64:12:3B:24:C2:A9:78:F1:8E:34:2A:B9:9A:FE:39:74:DC:C7:88:50
Authority key identifier: C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
Certificate issuer: /CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Certificate serial: 01A08C7AEFCA1F49367880708D9F381BB326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:01 +0000
Manifest this update: Thu 10 Sep 2026 18:01:01 +0000
Manifest next update: Fri 11 Sep 2026 18:01:01 +0000
Files and hashes: 1: 1-Urp8rAL1ZSmlkxaPOzl5pj6sR8.roa (hash: eq+9SCGsso6J0nmlRfLYKk2u+tOTbol21TaNCHcqDic=)
2: YBBatb3zVPdSOcJ9MpSHMK867-k.roa (hash: IlKGC7X7khejWn4GInerZOXh0TDt6Gd+xhqLmW0TfU4=)
3: x1es7dSIRbnr0Muqfb2ri8z9jWE.crl (hash: b5Z8BjtSAgP2RSwtCQIlD4eMBUL4tzf8E+4l05n5A6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:ef:ca:1f:49:36:78:80:70:8d:9f:38:1b:b3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Validity
Not Before: Sep 10 18:01:01 2026 GMT
Not After : Sep 11 18:01:01 2026 GMT
Subject: CN=64123b24c2a978f18e342ab99afe3974dcc78850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:b4:51:ec:ab:8e:6c:7f:4a:24:6b:8c:6e:
57:f1:23:a2:00:b2:98:84:9f:f4:82:56:a7:59:fd:
2f:2f:7d:64:4b:37:01:ed:ed:1c:d9:54:2f:bd:38:
19:65:04:d9:62:51:5a:84:98:0e:b1:04:1b:73:ac:
0d:36:9b:0c:cf:7c:92:4b:1d:03:74:ad:63:54:f8:
3d:1e:56:dc:42:5a:28:eb:0d:f9:31:62:a4:eb:eb:
42:1c:12:03:51:3a:33:cd:df:01:06:b0:9e:92:53:
11:0c:20:39:38:9d:20:74:03:47:94:35:2b:c0:cd:
b7:98:54:74:53:e2:fa:85:be:ca:2f:72:68:c7:dc:
61:2e:81:1f:ab:14:09:81:4d:17:51:a7:ac:60:da:
55:53:fe:dc:c6:ef:a3:0b:37:44:e1:62:ad:8e:eb:
00:38:3f:9a:1a:38:c3:c8:99:1d:90:13:62:ce:8c:
28:36:6d:7c:59:d5:54:71:c5:51:46:d7:c7:f6:78:
45:ae:40:2f:4d:50:e8:0c:bf:91:68:7b:7b:8b:96:
4d:8d:4d:6f:e6:b6:c5:47:c5:08:c7:dd:b0:a3:80:
df:ab:7d:de:66:0c:55:b4:62:50:a7:d2:23:f4:01:
20:71:36:08:b4:50:a5:35:01:da:93:47:b6:e0:f4:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:3B:24:C2:A9:78:F1:8E:34:2A:B9:9A:FE:39:74:DC:C7:88:50
X509v3 Authority Key Identifier:
keyid:C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2f:bd:1f:6c:63:44:22:b7:08:98:83:c8:e5:0e:f2:e4:0e:
d5:4b:8f:33:1c:48:b4:2e:d8:bb:e7:84:5f:92:bb:31:7c:65:
eb:dd:63:ce:dc:57:d1:73:8f:a9:51:b7:02:3e:74:38:a1:ff:
3a:2a:45:31:89:49:76:90:42:71:98:f1:d4:b9:16:ed:e5:3f:
f6:87:7a:6e:b9:7b:fb:19:73:ec:75:16:cb:c8:ef:46:6b:f9:
22:7d:74:87:5c:a7:ad:8d:60:1b:82:f3:60:29:23:9a:5a:b2:
c5:be:ba:54:38:85:23:82:43:0a:96:ff:32:45:06:af:38:6f:
1a:21:21:f2:ef:4d:c8:f8:ff:46:55:b7:2d:94:e2:33:ad:53:
48:73:d3:a2:ef:73:28:b1:5b:09:32:29:0b:ef:91:24:dc:f4:
35:9d:cb:e8:67:81:c5:14:3d:a6:ac:a6:ce:3e:bc:2e:5a:6c:
b6:dd:e3:d8:c8:60:fd:27:5a:ec:25:b9:2f:63:15:0f:40:a7:
f8:5e:75:d0:e4:62:20:69:24:08:ec:51:d0:7a:d6:a0:d7:1b:
ae:50:70:93:2e:00:c9:fa:8d:f9:2c:3b:b6:90:c8:df:d8:64:
a6:5b:93:b0:72:c8:08:39:97:3c:7e:60:98:ec:a5:a6:88:61:
f7:bc:34:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMeu/KH0k2eIBwjZ84G7MmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTdhY2VkZDQ4ODQ1YjllYmQwY2JhYTdkYmRhYjhiY2Nm
ZDhkNjEwHhcNMjYwOTEwMTgwMTAxWhcNMjYwOTExMTgwMTAxWjAzMTEwLwYDVQQD
Eyg2NDEyM2IyNGMyYTk3OGYxOGUzNDJhYjk5YWZlMzk3NGRjYzc4ODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeO0Ueyrjmx/SiRrjG5X8SOiALKY
hJ/0glanWf0vL31kSzcB7e0c2VQvvTgZZQTZYlFahJgOsQQbc6wNNpsMz3ySSx0D
dK1jVPg9HlbcQloo6w35MWKk6+tCHBIDUTozzd8BBrCeklMRDCA5OJ0gdANHlDUr
wM23mFR0U+L6hb7KL3Jox9xhLoEfqxQJgU0XUaesYNpVU/7cxu+jCzdE4WKtjusA
OD+aGjjDyJkdkBNizowoNm18WdVUccVRRtfH9nhFrkAvTVDoDL+RaHt7i5ZNjU1v
5rbFR8UIx92wo4Dfq33eZgxVtGJQp9Ij9AEgcTYItFClNQHak0e24PRpOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQSOyTCqXjxjjQquZr+OXTcx4hQMB8GA1UdIwQY
MBaAFMdXrO3UiEW569DLqn29q4vM/Y1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFlczdkU0lSYm5yME11cWZiMnJpOHo5aldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83Y2FmNzItZjA0Mi00ZWY4LTgzMzkt
ZWIzNjBjNDE4ZTUzLzEveDFlczdkU0lSYm5yME11cWZiMnJpOHo5aldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83Y2FmNzItZjA0Mi00ZWY4LTgzMzktZWIzNjBjNDE4ZTUz
LzEveDFlczdkU0lSYm5yME11cWZiMnJpOHo5aldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJi+9H2xj
RCK3CJiDyOUO8uQO1UuPMxxItC7Yu+eEX5K7MXxl691jztxX0XOPqVG3Aj50OKH/
OipFMYlJdpBCcZjx1LkW7eU/9od6brl7+xlz7HUWy8jvRmv5In10h1ynrY1gG4Lz
YCkjmlqyxb66VDiFI4JDCpb/MkUGrzhvGiEh8u9NyPj/RlW3LZTiM61TSHPTou9z
KLFbCTIpC++RJNz0NZ3L6GeBxRQ9pqymzj68Llpstt3j2Mhg/Sda7CW5L2MVD0Cn
+F510ORiIGkkCOxR0HrWoNcbrlBwky4AyfqN+Sw7tpDI39hkpluTsHLICDmXPH5g
mOylpohh97w0xA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:23:03 2026 by rpki-client