Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: cPn+KBeLEKWkVzjQMFJGw2Ovz3diRzufvztRS0Jm4BY=
Subject key identifier: 64:60:08:17:FC:E4:52:C7:24:1E:76:B6:F1:5D:16:43:A1:5B:DA:42
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 01A0F18B6E6BD1B9A390CA701EBB2645CD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0EB5
Signing time: Wed 30 Sep 2026 09:00:41 +0000
Manifest this update: Wed 30 Sep 2026 09:00:41 +0000
Manifest next update: Thu 01 Oct 2026 09:00:41 +0000
Files and hashes: 1: jBvSHulkiAFNZq-1Sz_1NBwC4gw.roa (hash: kIr3tsaXSv0n1HwqnJcooiylPmXgSiBfGD9CqML14GU=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: zFdN2GxvpNABv7MXPRBPLrNwhGY5WGHIcy3YSEQOyAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:6e:6b:d1:b9:a3:90:ca:70:1e:bb:26:45:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Sep 30 09:00:41 2026 GMT
Not After : Oct 1 09:00:41 2026 GMT
Subject: CN=64600817fce452c7241e76b6f15d1643a15bda42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:cd:ef:7c:39:9b:65:b4:05:19:ba:74:da:
64:a0:32:cf:5d:e4:77:28:17:f6:45:ea:8f:bb:a6:
62:65:7a:de:c4:af:57:37:0f:e7:4c:5e:50:29:a6:
0d:e1:3d:80:8a:bc:ae:5f:e5:eb:3b:55:40:6d:8a:
5d:b2:96:34:36:12:fb:25:dd:78:d6:e5:b1:b0:ac:
35:68:55:a3:70:3f:80:20:b3:c0:28:b4:3d:29:8a:
94:28:17:1d:b7:ac:30:4c:9d:40:45:20:6e:d6:1c:
b5:ab:47:75:18:21:da:34:92:36:09:a8:33:ba:bb:
15:e7:4c:49:9f:d8:fd:d7:53:5c:33:2a:83:da:f4:
52:68:1a:f5:24:06:85:93:10:64:cf:08:4d:c4:1e:
ab:43:f9:2f:f3:36:6c:9d:6f:c2:17:80:10:21:47:
6f:e3:35:71:22:99:ba:4f:1e:19:f7:7b:9c:54:59:
37:e2:5e:be:2e:c6:eb:ae:a8:4b:86:87:2b:b4:e5:
4d:ec:63:90:4e:26:82:8a:9e:79:24:0c:4b:ed:0b:
9f:9a:3a:2c:66:a1:78:cd:18:9a:a2:ed:4b:b8:21:
f3:70:88:35:49:b9:29:ca:63:6d:65:e4:3a:2e:0a:
36:2f:c8:47:a0:ec:9a:22:11:ff:70:43:b3:94:19:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:08:17:FC:E4:52:C7:24:1E:76:B6:F1:5D:16:43:A1:5B:DA:42
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f9:b2:eb:d9:ed:34:a6:ab:c2:72:a2:ee:d6:b1:64:ec:e4:
1b:05:18:39:1b:c8:68:6c:97:76:19:b0:19:9c:1f:00:a7:f5:
d8:94:a5:43:fa:04:ba:53:8a:3b:58:7c:6f:0e:03:6a:45:73:
f1:ce:34:19:1b:c0:19:d9:53:26:f0:0c:e3:9d:b6:9b:4c:7b:
f0:6a:0b:5d:01:bb:79:14:32:e0:1e:36:db:de:4a:24:52:be:
ea:c5:71:ee:e7:c5:a7:5e:0a:c9:01:38:0c:77:50:90:47:ad:
ad:4b:a6:be:65:11:6c:60:7b:c5:bc:4a:57:9d:0a:e9:9e:42:
b9:95:1c:7b:f1:f9:0f:77:18:99:33:30:b9:9e:cf:ec:b5:80:
34:c8:d1:4f:b2:71:bc:21:eb:e4:63:93:11:4f:d3:14:a8:fc:
b0:f2:24:cc:c3:0e:37:03:2d:4e:79:3a:85:96:16:ae:cb:fd:
19:78:46:44:9b:8c:b8:a2:78:9a:b0:17:e6:79:97:fe:94:bb:
11:8f:e7:04:82:45:ad:9a:28:d3:77:0a:a4:bc:fb:76:4d:fb:
32:89:ff:d6:b4:00:e4:38:1d:f8:7c:a0:6f:35:5f:07:ee:da:
5f:96:1c:c0:9b:2f:c1:14:04:f8:d7:ef:da:e4:4a:29:e3:09:
bb:7d:71:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxi25r0bmjkMpwHrsmRc1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmZhNzFhNTExM2ZlZDgyNDY0Nzc2YzE0MzcxNTE0Yzky
MThlZjUwHhcNMjYwOTMwMDkwMDQxWhcNMjYxMDAxMDkwMDQxWjAzMTEwLwYDVQQD
Eyg2NDYwMDgxN2ZjZTQ1MmM3MjQxZTc2YjZmMTVkMTY0M2ExNWJkYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYfN73w5m2W0BRm6dNpkoDLPXeR3
KBf2ReqPu6ZiZXrexK9XNw/nTF5QKaYN4T2AiryuX+XrO1VAbYpdspY0NhL7Jd14
1uWxsKw1aFWjcD+AILPAKLQ9KYqUKBcdt6wwTJ1ARSBu1hy1q0d1GCHaNJI2Cagz
ursV50xJn9j911NcMyqD2vRSaBr1JAaFkxBkzwhNxB6rQ/kv8zZsnW/CF4AQIUdv
4zVxIpm6Tx4Z93ucVFk34l6+LsbrrqhLhocrtOVN7GOQTiaCip55JAxL7Qufmjos
ZqF4zRiaou1LuCHzcIg1SbkpymNtZeQ6Lgo2L8hHoOyaIhH/cEOzlBl12wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRgCBf85FLHJB52tvFdFkOhW9pCMB8GA1UdIwQY
MBaAFMW/pxpRE/7YJGR3bBQ3FRTJIY71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82N2M4ZmItMDI1Ny00ZDYwLWEwZGYt
NmZjZTAzMzI1YjNmLzEveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82N2M4ZmItMDI1Ny00ZDYwLWEwZGYtNmZjZTAzMzI1YjNm
LzEveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPmy69nt
NKarwnKi7taxZOzkGwUYORvIaGyXdhmwGZwfAKf12JSlQ/oEulOKO1h8bw4DakVz
8c40GRvAGdlTJvAM4522m0x78GoLXQG7eRQy4B42295KJFK+6sVx7ufFp14KyQE4
DHdQkEetrUumvmURbGB7xbxKV50K6Z5CuZUce/H5D3cYmTMwuZ7P7LWANMjRT7Jx
vCHr5GOTEU/TFKj8sPIkzMMONwMtTnk6hZYWrsv9GXhGRJuMuKJ4mrAX5nmX/pS7
EY/nBIJFrZoo03cKpLz7dk37Mon/1rQA5Dgd+HygbzVfB+7aX5YcwJsvwRQE+Nfv
2uRKKeMJu31xTQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:11:37 2026 by rpki-client