Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: wm30gIl0rjTJaXj4ABpBGsLUD9ZYBnQeasPfe1mkdR0=
Subject key identifier: D9:E0:06:01:77:34:CB:E8:73:47:04:73:27:1A:AC:B4:47:93:0D:53
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 01A16FEE0BC95224F0A8E373DFAB8955A2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1AC0
Signing time: Sat 24 Oct 2026 22:00:33 +0000
Manifest this update: Sat 24 Oct 2026 22:00:33 +0000
Manifest next update: Sun 25 Oct 2026 22:00:33 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: S7y9ghAX8Arwxvr70stTL9MFaO/85B19UWZ4SEq87UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:ee:0b:c9:52:24:f0:a8:e3:73:df:ab:89:55:a2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Oct 24 22:00:33 2026 GMT
Not After : Oct 25 22:00:33 2026 GMT
Subject: CN=d9e006017734cbe873470473271aacb447930d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:98:38:86:23:be:b5:e7:54:de:c1:43:dc:
1b:58:dd:ba:a3:a1:9b:21:27:7d:e1:57:22:12:f3:
b3:b5:2f:bf:f5:80:9b:5d:d9:36:c1:03:78:28:81:
93:06:52:34:15:68:93:bf:36:a8:52:26:86:a0:b1:
ef:25:61:de:e7:31:9f:46:a0:7f:cb:c8:8a:80:79:
97:94:8e:52:bc:d7:20:5a:80:dd:6b:0c:78:71:4e:
15:97:20:48:94:fa:2a:64:a5:14:ee:2a:35:21:28:
48:3f:51:e9:ea:58:25:fc:6c:09:d4:bf:3b:1f:4e:
e8:12:95:06:88:5b:05:e4:26:af:70:69:b6:f2:a7:
2b:33:8b:01:e2:c5:9e:3b:fe:a1:07:68:61:ea:a8:
3c:bd:9c:fa:f5:f7:5a:d5:8e:a9:29:49:f8:e2:1f:
ce:e8:d4:f3:7d:f6:7b:e3:77:37:21:64:96:da:f0:
70:bf:b8:48:72:73:a5:b4:30:fb:d2:f1:0b:68:0a:
c1:b8:58:09:20:3f:f9:cb:cb:80:33:45:8c:1f:fc:
a1:3e:6f:45:81:b0:62:9c:a9:18:ef:bf:ee:8b:4d:
f2:f1:f9:de:1f:e3:54:44:2b:a1:b5:10:a6:d8:90:
11:85:bd:bb:39:10:3e:bd:cd:8e:57:65:7e:79:95:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E0:06:01:77:34:CB:E8:73:47:04:73:27:1A:AC:B4:47:93:0D:53
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b0:f9:8b:93:99:fc:31:ec:df:27:56:ee:7c:5d:f2:a2:e6:
6b:a0:fd:aa:21:2f:a6:c1:3f:41:d0:50:35:d0:2a:7d:8e:1b:
d5:5b:b7:aa:54:03:43:42:11:a9:18:b6:7a:97:56:62:51:5e:
d9:a0:7b:72:7a:3a:26:a7:0a:78:dc:57:13:0d:5b:2c:83:01:
98:c8:d0:c7:2c:35:29:af:8c:44:c2:78:26:31:06:69:75:c4:
28:be:e3:82:15:6c:69:19:d2:44:0a:dd:1c:e2:aa:da:7c:d2:
24:36:e9:92:2e:88:99:85:51:d4:0f:9b:07:21:8d:2d:be:ee:
4b:f2:75:ca:74:9b:f2:d6:ac:41:a7:a3:fa:1f:4a:35:56:22:
70:73:4a:fd:86:b7:8e:b6:b6:07:35:6d:ac:71:47:68:5b:60:
d5:f1:a6:e2:ae:00:09:59:88:4a:6d:ea:70:e2:20:31:d6:d3:
93:28:b8:99:27:0b:f8:60:aa:e5:6c:cc:50:bb:6f:bb:c0:83:
ae:d1:19:25:d6:43:5b:af:56:47:1b:94:35:75:f6:95:19:02:
2b:f2:f3:54:a2:68:89:bc:e2:d4:d9:c4:a3:c0:d6:e9:b0:59:
fa:e5:d1:96:c7:03:f5:fb:5c:d4:08:9d:ff:03:cb:9a:87:d1:
2c:24:7b:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFv7gvJUiTwqONz36uJVaLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2M2Q5NmFlZmM1NDgwMjRmYTM2ZmE1Y2U4MDRhNDhiZjdj
YTNhNDAwHhcNMjYxMDI0MjIwMDMzWhcNMjYxMDI1MjIwMDMzWjAzMTEwLwYDVQQD
EyhkOWUwMDYwMTc3MzRjYmU4NzM0NzA0NzMyNzFhYWNiNDQ3OTMwZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC2YOIYjvrXnVN7BQ9wbWN26o6Gb
ISd94VciEvOztS+/9YCbXdk2wQN4KIGTBlI0FWiTvzaoUiaGoLHvJWHe5zGfRqB/
y8iKgHmXlI5SvNcgWoDdawx4cU4VlyBIlPoqZKUU7io1IShIP1Hp6lgl/GwJ1L87
H07oEpUGiFsF5CavcGm28qcrM4sB4sWeO/6hB2hh6qg8vZz69fda1Y6pKUn44h/O
6NTzffZ743c3IWSW2vBwv7hIcnOltDD70vELaArBuFgJID/5y8uAM0WMH/yhPm9F
gbBinKkY77/ui03y8fneH+NURCuhtRCm2JARhb27ORA+vc2OV2V+eZWDawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNngBgF3NMvoc0cEcycarLRHkw1TMB8GA1UdIwQY
MBaAFMY9lq78VIAk+jb6XOgEpIv3yjpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDct
OTcxZDI4ZDQzYzE0LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDctOTcxZDI4ZDQzYzE0
LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrD5i5OZ
/DHs3ydW7nxd8qLma6D9qiEvpsE/QdBQNdAqfY4b1Vu3qlQDQ0IRqRi2epdWYlFe
2aB7cno6JqcKeNxXEw1bLIMBmMjQxyw1Ka+MRMJ4JjEGaXXEKL7jghVsaRnSRArd
HOKq2nzSJDbpki6ImYVR1A+bByGNLb7uS/J1ynSb8tasQaej+h9KNVYicHNK/Ya3
jra2BzVtrHFHaFtg1fGm4q4ACVmISm3qcOIgMdbTkyi4mScL+GCq5WzMULtvu8CD
rtEZJdZDW69WRxuUNXX2lRkCK/LzVKJoibzi1NnEo8DW6bBZ+uXRlscD9ftc1Aid
/wPLmofRLCR7Ug==
-----END CERTIFICATE-----
Generated at Sun Oct 25 08:04:03 2026 by rpki-client