Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: zqkLU/DhekKbdsrt35FEOgBeyA2KgiUVznlbm07g580=
Subject key identifier: 5B:93:CA:E2:F1:E5:A4:B8:ED:70:34:E1:9A:A4:6E:56:CF:32:D3:8B
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 01A06EDE20A68EE2BBF3E3059E9B5B30E97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0A8C
Signing time: Sat 05 Sep 2026 00:00:46 +0000
Manifest this update: Sat 05 Sep 2026 00:00:46 +0000
Manifest next update: Sun 06 Sep 2026 00:00:46 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: OQpqJrWQeFU5m8afX+WBDgRePh5wRDAvQBRansL1+oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:20:a6:8e:e2:bb:f3:e3:05:9e:9b:5b:30:e9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Sep 5 00:00:46 2026 GMT
Not After : Sep 6 00:00:46 2026 GMT
Subject: CN=5b93cae2f1e5a4b8ed7034e19aa46e56cf32d38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:b8:f8:b7:33:b5:6a:30:8c:fc:2b:64:96:
ef:71:c8:de:66:85:7e:2f:7b:76:dd:e2:73:3a:69:
c9:fd:f1:57:d2:01:5e:be:bd:e2:b6:dc:77:e9:76:
d6:07:73:e0:e9:56:c6:68:2c:be:e3:94:30:f9:02:
72:51:df:94:95:5f:bd:7e:43:cf:0a:36:86:21:04:
96:10:24:7f:43:02:1c:78:45:a3:ea:8b:dc:2a:30:
dc:e1:f4:73:e2:4a:51:62:01:ee:34:a2:4e:5a:39:
19:eb:fb:bb:fd:90:ed:01:a9:ce:f4:c0:08:4c:59:
10:53:4a:be:61:1e:2f:41:78:df:1e:15:f5:43:2a:
20:71:01:93:f2:ee:35:8e:1b:59:07:2c:e3:8d:b7:
02:fe:5e:e9:57:2c:4c:e6:54:b9:d6:9b:0d:29:a2:
b1:b9:ca:e4:cd:80:cb:a9:6f:74:3f:16:ae:a3:5d:
b5:62:0b:5f:c7:69:7f:29:cf:e3:8b:74:ed:ad:99:
0a:af:5d:fe:4a:73:d6:c3:90:d0:1e:52:59:33:91:
aa:c9:71:ad:cd:01:5f:66:7c:cc:96:b9:07:99:4e:
68:d3:5b:41:55:9e:8c:6f:67:70:a0:c9:1d:bd:bc:
8a:ec:28:40:7f:c6:7a:47:41:49:31:09:07:36:14:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:93:CA:E2:F1:E5:A4:B8:ED:70:34:E1:9A:A4:6E:56:CF:32:D3:8B
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4f:2b:25:73:5e:fe:c7:34:b0:9d:e5:5d:77:31:c1:a4:d9:
c3:8c:20:40:d0:d4:09:bd:e0:5c:b9:b6:92:1e:00:1b:9d:89:
be:82:38:6e:a6:6e:61:55:a6:fc:15:25:54:bc:68:28:84:98:
ba:c5:15:29:9c:03:c1:3a:87:4c:8f:30:26:ff:e6:f2:77:19:
f0:2a:70:e5:03:6b:53:59:02:d1:5e:a9:53:9e:ea:dd:2e:e4:
9a:19:f8:d7:b3:4f:7a:e8:dc:95:19:11:37:ce:0e:79:04:ff:
00:31:bd:9d:49:93:84:58:4a:5e:46:39:2c:aa:1c:c6:82:1f:
61:cd:de:59:95:e7:99:70:ba:d0:0f:3b:bf:2c:b4:c5:1d:d0:
aa:d8:df:88:58:4b:0a:6f:e3:d9:57:b2:28:d2:d3:11:87:63:
ba:7b:1e:da:46:37:ab:9c:3d:47:84:1f:1b:98:ec:94:b5:df:
22:08:11:35:65:4a:0a:a1:9b:bd:99:f0:57:fc:f1:3b:da:21:
fb:5e:08:ef:84:34:ff:33:31:72:00:2e:10:31:0e:cd:ed:04:
b6:eb:5b:c7:d7:c9:bd:d5:d8:f0:4c:8a:50:af:35:7a:a7:da:
9c:8d:99:19:28:ac:85:f3:a5:80:a8:a5:96:fd:c5:17:7c:1a:
51:de:6b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3iCmjuK78+MFnptbMOl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTg1MDE3M2M4ZDI4ZDVhZmJmOTEwOTFjYTYzZTVkYTNj
NzVlZDQwHhcNMjYwOTA1MDAwMDQ2WhcNMjYwOTA2MDAwMDQ2WjAzMTEwLwYDVQQD
Eyg1YjkzY2FlMmYxZTVhNGI4ZWQ3MDM0ZTE5YWE0NmU1NmNmMzJkMzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAK4+LcztWowjPwrZJbvccjeZoV+
L3t23eJzOmnJ/fFX0gFevr3ittx36XbWB3Pg6VbGaCy+45Qw+QJyUd+UlV+9fkPP
CjaGIQSWECR/QwIceEWj6ovcKjDc4fRz4kpRYgHuNKJOWjkZ6/u7/ZDtAanO9MAI
TFkQU0q+YR4vQXjfHhX1QyogcQGT8u41jhtZByzjjbcC/l7pVyxM5lS51psNKaKx
ucrkzYDLqW90Pxauo121Ygtfx2l/Kc/ji3TtrZkKr13+SnPWw5DQHlJZM5GqyXGt
zQFfZnzMlrkHmU5o01tBVZ6Mb2dwoMkdvbyK7ChAf8Z6R0FJMQkHNhQqNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuTyuLx5aS47XA04ZqkblbPMtOLMB8GA1UdIwQY
MBaAFMYYUBc8jSjVr7+RCRymPl2jx17UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUt
YmI4ZGViYzAwMzg4LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUtYmI4ZGViYzAwMzg4
LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM08rJXNe
/sc0sJ3lXXcxwaTZw4wgQNDUCb3gXLm2kh4AG52JvoI4bqZuYVWm/BUlVLxoKISY
usUVKZwDwTqHTI8wJv/m8ncZ8Cpw5QNrU1kC0V6pU57q3S7kmhn417NPeujclRkR
N84OeQT/ADG9nUmThFhKXkY5LKocxoIfYc3eWZXnmXC60A87vyy0xR3QqtjfiFhL
Cm/j2VeyKNLTEYdjunse2kY3q5w9R4QfG5jslLXfIggRNWVKCqGbvZnwV/zxO9oh
+14I74Q0/zMxcgAuEDEOze0Etutbx9fJvdXY8EyKUK81eqfanI2ZGSishfOlgKil
lv3FF3waUd5r/w==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:07:39 2026 by rpki-client