Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
File: xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft (raw, json)
Hash identifier: 0QtL/U58TKWwjMeJCMyiPCZyl2e+ApnRsKKJe0MmTsc=
Subject key identifier: 78:0D:E3:A7:50:E7:2A:97:52:89:AA:5D:F7:8D:13:1C:81:48:94:C6
Authority key identifier: C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
Certificate issuer: /CN=c73e163a37870548d696ef0330646b8425328f28
Certificate serial: 01A08A8CA152F1D2272CBB37DD0508706088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:07 +0000
Manifest this update: Thu 10 Sep 2026 09:01:07 +0000
Manifest next update: Fri 11 Sep 2026 09:01:07 +0000
Files and hashes: 1: WSJBCh2OsvZcrdAL-2hq6pN9tFg.roa (hash: PeDCYtSLNPlYm/YRPC7P1Ngc8lvfXH2IT/iFWw8s2T4=)
2: xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl (hash: BiwybtX4zC7bGqtae4Z/dz+e73Kv90Bz6YgU7Y+g0oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:a1:52:f1:d2:27:2c:bb:37:dd:05:08:70:60:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c73e163a37870548d696ef0330646b8425328f28
Validity
Not Before: Sep 10 09:01:07 2026 GMT
Not After : Sep 11 09:01:07 2026 GMT
Subject: CN=780de3a750e72a975289aa5df78d131c814894c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:1f:84:cc:00:3f:46:ef:d7:98:da:f7:a6:
4d:ce:43:36:43:41:7b:c3:e4:dc:85:b4:7c:f3:f4:
17:83:29:ee:1e:9b:3e:c3:d9:83:87:f1:51:31:ec:
13:9a:77:e5:f7:68:13:17:6e:72:d5:31:24:1e:7e:
a9:6c:a9:7e:76:56:cd:c0:4c:f3:9a:f5:d0:14:c2:
c2:6e:fe:97:dc:d5:7b:2d:a2:c0:55:36:95:77:96:
ae:2b:20:83:74:fe:62:52:4c:2e:a8:30:2e:fd:8f:
92:02:8f:97:c0:db:1d:f6:62:88:ff:15:ee:3b:90:
8e:f3:df:42:a2:e7:21:ed:e6:cc:33:cf:4a:4e:c8:
70:02:1a:00:e3:b0:2c:a4:99:18:2e:1e:ed:ed:f8:
ae:05:37:67:57:9a:82:7f:47:57:78:74:3e:c3:12:
2d:8c:a3:42:8b:d5:ce:59:a6:86:21:50:d9:7c:5c:
3f:73:fb:37:9e:c1:c8:25:93:9f:46:16:66:e0:3f:
de:17:8c:3b:d8:50:e8:3f:09:af:75:17:22:01:97:
39:98:4f:8f:a4:56:3e:82:35:98:75:39:56:b0:83:
e3:8e:a8:8e:6b:8b:97:69:c6:34:7e:ab:22:dc:07:
fe:40:9c:62:96:b7:f4:c2:14:de:d7:8f:50:4c:ea:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0D:E3:A7:50:E7:2A:97:52:89:AA:5D:F7:8D:13:1C:81:48:94:C6
X509v3 Authority Key Identifier:
keyid:C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:43:e7:08:90:e3:fb:1a:74:10:4c:ea:f7:04:24:70:22:fd:
29:18:db:bc:8d:23:60:b2:5b:f3:75:97:a3:ac:b4:1f:fa:cd:
6a:a5:b0:ae:9a:94:1f:af:79:0b:14:94:4b:b6:86:f7:83:22:
61:3d:ef:26:ea:b1:58:92:b3:f8:dd:8a:e9:0a:86:0d:47:a8:
90:f7:84:39:a5:f3:ff:45:d8:0d:10:be:12:cb:16:2f:e0:a5:
dd:5b:54:6e:b9:72:d1:c5:a4:95:04:c3:3d:1b:69:33:c7:d9:
e8:8b:b9:8c:72:ed:4d:52:db:c6:55:46:1f:11:30:3e:39:ba:
2e:d6:3b:5f:7d:61:b2:3c:8f:f1:02:cb:8b:ed:83:6f:20:f1:
79:78:e7:a4:54:02:0a:10:dd:17:45:6c:5f:21:22:20:4e:6b:
c6:c3:72:d8:a8:6e:68:13:59:bf:e5:10:5f:dc:aa:1e:64:1b:
09:ec:b7:82:2d:7b:0a:b5:aa:bb:1f:f1:35:8e:6b:65:59:f5:
b3:24:f9:c1:2d:98:36:90:ff:9d:2d:e3:14:ba:56:98:e8:df:
d5:46:62:2c:23:b7:0a:5b:dc:49:fd:77:a9:bc:5f:2c:24:a6:
6d:6f:43:5c:2c:b6:77:dd:10:c1:ba:79:20:dc:c9:97:50:18:
74:dc:fa:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjKFS8dInLLs33QUIcGCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3M2UxNjNhMzc4NzA1NDhkNjk2ZWYwMzMwNjQ2Yjg0MjUz
MjhmMjgwHhcNMjYwOTEwMDkwMTA3WhcNMjYwOTExMDkwMTA3WjAzMTEwLwYDVQQD
Eyg3ODBkZTNhNzUwZTcyYTk3NTI4OWFhNWRmNzhkMTMxYzgxNDg5NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpgfhMwAP0bv15ja96ZNzkM2Q0F7
w+TchbR88/QXgynuHps+w9mDh/FRMewTmnfl92gTF25y1TEkHn6pbKl+dlbNwEzz
mvXQFMLCbv6X3NV7LaLAVTaVd5auKyCDdP5iUkwuqDAu/Y+SAo+XwNsd9mKI/xXu
O5CO899Couch7ebMM89KTshwAhoA47AspJkYLh7t7fiuBTdnV5qCf0dXeHQ+wxIt
jKNCi9XOWaaGIVDZfFw/c/s3nsHIJZOfRhZm4D/eF4w72FDoPwmvdRciAZc5mE+P
pFY+gjWYdTlWsIPjjqiOa4uXacY0fqsi3Af+QJxilrf0whTe149QTOruzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgN46dQ5yqXUomqXfeNExyBSJTGMB8GA1UdIwQY
MBaAFMc+Fjo3hwVI1pbvAzBka4QlMo8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHo0V09qZUhCVWpXbHU4RE1HUnJoQ1V5anlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3Yjkt
YTdlZGI3ZDNmNTM3LzEveHo0V09qZUhCVWpXbHU4RE1HUnJoQ1V5anlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3YjktYTdlZGI3ZDNmNTM3
LzEveHo0V09qZUhCVWpXbHU4RE1HUnJoQ1V5anlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUPnCJDj
+xp0EEzq9wQkcCL9KRjbvI0jYLJb83WXo6y0H/rNaqWwrpqUH695CxSUS7aG94Mi
YT3vJuqxWJKz+N2K6QqGDUeokPeEOaXz/0XYDRC+EssWL+Cl3VtUbrly0cWklQTD
PRtpM8fZ6Iu5jHLtTVLbxlVGHxEwPjm6LtY7X31hsjyP8QLLi+2DbyDxeXjnpFQC
ChDdF0VsXyEiIE5rxsNy2KhuaBNZv+UQX9yqHmQbCey3gi17CrWqux/xNY5rZVn1
syT5wS2YNpD/nS3jFLpWmOjf1UZiLCO3ClvcSf13qbxfLCSmbW9DXCy2d90Qwbp5
INzJl1AYdNz6pQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:09 2026 by rpki-client