Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: ANqvj8ZF+OTQEthknpMZgURErDyHMUHWWW1bYmcdpYA=
Subject key identifier: 2D:F0:3F:B4:AA:71:98:6A:67:35:D9:FB:6B:89:4D:78:17:35:1E:3D
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01A140B9EEC9A70DE0E9DA73D03178C1CE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 18:01:29 +0000
Manifest this update: Thu 15 Oct 2026 18:01:29 +0000
Manifest next update: Fri 16 Oct 2026 18:01:29 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: UztSuHpJ+fSzHqh6Nce1HYGe+qidiZAnkXemn8J/PBg=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b9:ee:c9:a7:0d:e0:e9:da:73:d0:31:78:c1:ce:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Oct 15 18:01:29 2026 GMT
Not After : Oct 16 18:01:29 2026 GMT
Subject: CN=2df03fb4aa71986a6735d9fb6b894d7817351e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:ca:1f:56:6f:c1:98:6d:48:c8:a7:b0:3b:
ba:99:29:10:91:b8:f9:c9:63:bd:75:99:0e:c8:10:
45:0f:a8:4b:2d:14:31:e3:3a:83:0f:3a:32:e2:0e:
14:82:11:3d:77:36:09:9b:9a:da:fd:d7:e5:4d:24:
45:4f:a7:13:d7:0d:40:9c:6a:fb:16:f4:89:89:c6:
ed:ce:d0:12:17:51:7a:cd:98:1b:37:4d:bf:ca:3f:
ab:54:e2:cb:ab:dd:a8:a5:33:2a:30:cd:e4:51:f5:
05:84:63:7c:dc:c0:98:75:5a:71:16:d7:0d:7f:ec:
3a:9d:bb:a6:37:ac:30:44:6e:b9:dd:f6:ee:a8:80:
7f:ab:b1:51:72:5e:27:8c:a5:27:29:b7:8c:e6:f6:
f8:fe:35:9a:cb:fa:cd:dd:c1:09:32:9e:ec:d5:8a:
82:77:cc:72:b5:d1:f4:ff:30:38:7e:b8:50:6c:81:
e3:5a:8f:ee:d6:5a:5c:2a:ee:b8:dd:33:ea:c0:7f:
73:0f:f8:98:c8:73:55:56:48:14:76:e5:e2:2e:27:
32:7b:af:9e:09:73:2b:9a:db:38:bc:98:98:f9:af:
bf:b0:fe:63:45:40:09:c7:56:de:d6:99:be:d1:a9:
93:a0:b3:53:c5:e1:f6:27:5d:02:15:fe:b2:d9:df:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:3F:B4:AA:71:98:6A:67:35:D9:FB:6B:89:4D:78:17:35:1E:3D
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d6:39:86:22:aa:e5:5f:21:79:f6:a5:ca:85:d1:1f:cb:52:
27:5c:45:7a:2e:a5:97:37:1f:e4:b3:d5:ff:ea:51:5f:f2:f9:
13:4f:bd:24:34:cd:88:0f:e9:b8:d9:a0:de:5f:89:6a:87:7f:
07:80:81:e8:8d:73:6e:03:a9:e5:dd:7b:c8:83:57:d1:33:a4:
93:b9:a6:b2:99:1e:42:c0:26:da:b8:d9:39:3e:07:ea:c9:c3:
86:75:6b:ec:e5:05:17:1e:92:9f:89:88:94:d8:43:07:84:77:
d3:d4:60:4d:22:94:58:2f:c2:f0:5d:97:cd:ac:15:75:6d:3c:
08:d9:94:6b:1e:a8:e5:bb:76:13:62:5a:a0:7a:3d:f0:4a:5a:
8d:6f:f5:98:f0:1d:c8:b9:bd:cd:1c:49:50:c8:d3:f7:fe:0b:
74:f4:80:67:25:09:97:6e:a7:fd:dc:2b:20:b5:a1:21:b8:52:
8e:03:7a:76:fb:73:a5:69:5e:ed:80:7f:83:93:85:a9:a4:12:
0d:2b:78:ac:89:61:cd:f3:01:f6:92:62:95:c9:fc:c5:63:b5:
cb:ee:e2:0c:64:3b:d2:49:b6:19:e0:6a:07:e1:aa:b6:b3:f5:
6b:a0:6d:9e:d0:9c:29:fb:61:c8:49:95:fd:cd:ce:fc:dd:2e:
25:4e:c3:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAue7Jpw3g6dpz0DF4wc6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl
OTZjMzUwHhcNMjYxMDE1MTgwMTI5WhcNMjYxMDE2MTgwMTI5WjAzMTEwLwYDVQQD
EygyZGYwM2ZiNGFhNzE5ODZhNjczNWQ5ZmI2Yjg5NGQ3ODE3MzUxZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a7KH1ZvwZhtSMinsDu6mSkQkbj5
yWO9dZkOyBBFD6hLLRQx4zqDDzoy4g4UghE9dzYJm5ra/dflTSRFT6cT1w1AnGr7
FvSJicbtztASF1F6zZgbN02/yj+rVOLLq92opTMqMM3kUfUFhGN83MCYdVpxFtcN
f+w6nbumN6wwRG653fbuqIB/q7FRcl4njKUnKbeM5vb4/jWay/rN3cEJMp7s1YqC
d8xytdH0/zA4frhQbIHjWo/u1lpcKu643TPqwH9zD/iYyHNVVkgUduXiLicye6+e
CXMrmts4vJiY+a+/sP5jRUAJx1be1pm+0amToLNTxeH2J10CFf6y2d8HtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3wP7SqcZhqZzXZ+2uJTXgXNR49MB8GA1UdIwQY
MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct
ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4
LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtY5hiKq
5V8hefalyoXRH8tSJ1xFei6llzcf5LPV/+pRX/L5E0+9JDTNiA/puNmg3l+Jaod/
B4CB6I1zbgOp5d17yINX0TOkk7mmspkeQsAm2rjZOT4H6snDhnVr7OUFFx6Sn4mI
lNhDB4R309RgTSKUWC/C8F2XzawVdW08CNmUax6o5bt2E2JaoHo98EpajW/1mPAd
yLm9zRxJUMjT9/4LdPSAZyUJl26n/dwrILWhIbhSjgN6dvtzpWle7YB/g5OFqaQS
DSt4rIlhzfMB9pJilcn8xWO1y+7iDGQ70km2GeBqB+GqtrP1a6BtntCcKfthyEmV
/c3O/N0uJU7D2Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 23:06:41 2026 by rpki-client