Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: 4ZhNxZhWdZlUIoizhLp5oubw27XsezIvNsTiiJ7Wa1Y=
Subject key identifier: 98:FB:F9:01:DB:C5:21:49:53:74:05:CE:85:04:B5:ED:96:81:C3:FF
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01A0CDECF774FB76E6F12100D99133D0992D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 11:00:54 +0000
Manifest this update: Wed 23 Sep 2026 11:00:54 +0000
Manifest next update: Thu 24 Sep 2026 11:00:54 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: 6A8EaopL8MQqelAXNon+d8QXPF7mhd3yNCo6Ack28/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:f7:74:fb:76:e6:f1:21:00:d9:91:33:d0:99:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Sep 23 11:00:54 2026 GMT
Not After : Sep 24 11:00:54 2026 GMT
Subject: CN=98fbf901dbc52149537405ce8504b5ed9681c3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f6:64:6e:da:58:7b:62:31:b6:2b:88:17:ff:
b4:e9:26:f8:5f:94:b6:d4:86:c1:cc:db:e2:f4:4c:
d4:61:84:15:c9:70:13:91:54:a0:3f:74:66:d5:a7:
22:5e:6f:34:99:df:15:c9:d8:3a:fe:93:b1:e9:b6:
4c:d3:f3:46:61:4c:f9:75:cf:b1:53:2d:e9:6b:05:
a2:3b:ef:f6:e9:d2:e1:4d:8f:95:48:0b:3b:62:ef:
ae:35:c0:3c:31:af:0c:09:11:8d:bf:b5:a4:8b:c8:
a9:a7:09:64:c2:d7:fa:10:07:a5:d9:51:37:04:e4:
08:03:ec:3e:ae:7b:67:af:83:97:96:a6:5f:1d:29:
92:a2:17:e8:16:90:06:c7:8e:c5:64:f9:44:9a:4e:
33:50:4b:35:23:80:da:7e:ae:ab:7d:f2:99:8e:b1:
6b:bb:8f:25:ee:9a:5c:1b:ab:12:59:33:67:88:9c:
35:18:02:5f:af:68:b7:93:ff:59:ae:e3:47:b1:e0:
eb:0d:23:7f:72:24:bf:c1:ca:d6:80:bf:36:53:2e:
0b:1b:96:7b:c8:96:61:87:38:17:8b:29:f0:6a:de:
a0:4b:53:3e:48:d1:0a:4d:5b:a5:29:a0:7e:7c:01:
89:43:8c:c9:f8:75:72:67:ad:7c:86:99:8b:91:44:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:F9:01:DB:C5:21:49:53:74:05:CE:85:04:B5:ED:96:81:C3:FF
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:13:e3:9d:c9:8c:d8:bc:b6:3a:f5:a5:c7:45:03:f4:f8:
ed:8a:a3:d8:97:94:54:29:aa:33:d6:32:15:77:24:a1:d8:b4:
e6:e4:a1:bf:77:0a:77:1a:17:94:f2:ab:c1:cf:e3:2f:48:bf:
af:58:a2:0b:d9:32:88:b2:aa:4b:c5:2f:47:e6:77:cc:a2:a8:
85:40:b9:26:a6:d2:c6:ad:14:23:d8:35:24:a3:9c:44:7b:5f:
64:32:9f:f5:5f:3b:b9:b1:bf:bc:0a:88:30:f0:0e:98:45:a6:
6d:11:cb:27:fe:e5:b9:38:79:48:93:52:d3:d1:54:ea:6e:83:
cf:8f:da:63:6a:f7:18:6b:ba:31:e6:c6:da:c7:a0:fb:d0:fd:
08:4b:86:9a:47:80:0c:e2:5a:e8:5d:70:02:91:30:ab:7c:de:
46:80:37:9b:1b:e4:15:22:0e:26:b9:bb:2e:7e:f6:13:a7:16:
a3:e7:51:af:87:93:84:65:37:9e:04:96:0f:15:35:03:e6:3d:
56:d5:4f:96:8a:f3:5e:cd:ae:47:b6:29:5d:97:b5:ef:78:2a:
19:28:6d:6b:43:52:f1:f7:8a:97:89:c0:81:81:5d:6b:30:9a:
fa:47:e7:87:0f:63:7b:1a:da:79:a6:b4:95:25:93:73:5b:ac:
df:46:d4:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7Pd0+3bm8SEA2ZEz0JktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm
MmY5YTkwHhcNMjYwOTIzMTEwMDU0WhcNMjYwOTI0MTEwMDU0WjAzMTEwLwYDVQQD
Eyg5OGZiZjkwMWRiYzUyMTQ5NTM3NDA1Y2U4NTA0YjVlZDk2ODFjM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/ZkbtpYe2IxtiuIF/+06Sb4X5S2
1IbBzNvi9EzUYYQVyXATkVSgP3Rm1aciXm80md8Vydg6/pOx6bZM0/NGYUz5dc+x
Uy3pawWiO+/26dLhTY+VSAs7Yu+uNcA8Ma8MCRGNv7Wki8ippwlkwtf6EAel2VE3
BOQIA+w+rntnr4OXlqZfHSmSohfoFpAGx47FZPlEmk4zUEs1I4Dafq6rffKZjrFr
u48l7ppcG6sSWTNniJw1GAJfr2i3k/9ZruNHseDrDSN/ciS/wcrWgL82Uy4LG5Z7
yJZhhzgXiynwat6gS1M+SNEKTVulKaB+fAGJQ4zJ+HVyZ618hpmLkUQFmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj7+QHbxSFJU3QFzoUEte2WgcP/MB8GA1UdIwQY
MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt
MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4
LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoC0T453J
jNi8tjr1pcdFA/T47Yqj2JeUVCmqM9YyFXckodi05uShv3cKdxoXlPKrwc/jL0i/
r1iiC9kyiLKqS8UvR+Z3zKKohUC5JqbSxq0UI9g1JKOcRHtfZDKf9V87ubG/vAqI
MPAOmEWmbRHLJ/7luTh5SJNS09FU6m6Dz4/aY2r3GGu6MebG2seg+9D9CEuGmkeA
DOJa6F1wApEwq3zeRoA3mxvkFSIOJrm7Ln72E6cWo+dRr4eThGU3ngSWDxU1A+Y9
VtVPlorzXs2uR7YpXZe173gqGShta0NS8feKl4nAgYFdazCa+kfnhw9jexraeaa0
lSWTc1us30bUpg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:22:34 2026 by rpki-client