Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: wIyi2GkNCAdy8pwBQi8o8RpOk75bE/Nbxx5sDgas0ao=
Subject key identifier: E6:FE:A6:6A:1F:44:7C:E0:18:1F:1C:C3:35:67:FA:F8:65:05:24:20
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 01A0C2FAF834D8B6621B1249538D4513F6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 0258
Signing time: Mon 21 Sep 2026 08:00:22 +0000
Manifest this update: Mon 21 Sep 2026 08:00:22 +0000
Manifest next update: Tue 22 Sep 2026 08:00:22 +0000
Files and hashes: 1: LiklnKyGrQ1N8swmJUP8MTgMhcs.asa (hash: YnfSS7Rq+wWXwWH2x0GgIjhpjhncpiH/Ro2Xlq96x7Q=)
2: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: 4Iupdn88W6nv9dUGyNHyPFn+BXgB9plmR6PQrOjaTp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:f8:34:d8:b6:62:1b:12:49:53:8d:45:13:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Sep 21 08:00:22 2026 GMT
Not After : Sep 22 08:00:22 2026 GMT
Subject: CN=e6fea66a1f447ce0181f1cc33567faf865052420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:d3:11:0e:68:ba:21:85:27:ff:12:b9:60:
2e:b2:ef:8e:c4:0c:94:51:c3:a1:e0:59:85:50:d3:
69:29:81:5a:7e:ab:7f:2e:46:af:b7:e9:0f:6b:fd:
7c:82:4c:ea:5d:bd:16:67:9d:92:47:ef:7e:fb:dd:
3c:50:d9:e8:9c:d1:cb:b4:e0:d1:d1:41:de:02:fd:
05:2c:f5:d4:05:97:42:6a:53:ad:62:5f:f7:ba:89:
76:77:19:da:64:d1:1c:8f:dd:7e:93:c7:4d:f8:8b:
81:02:4d:c8:74:29:00:cb:83:a0:e5:84:d0:60:1e:
fb:53:4c:63:7c:25:89:a0:9d:f8:51:fb:ef:ec:12:
a4:6d:7d:60:9b:0d:80:05:08:cf:9a:8e:c0:62:22:
b2:50:5b:fa:b8:1c:70:42:c1:94:22:32:eb:9d:1d:
d5:6e:07:56:13:07:b1:29:e8:ad:f3:b6:05:b6:7c:
c9:b7:dc:aa:ab:54:fe:48:91:3a:3c:1b:01:00:aa:
76:44:bc:4e:3f:53:6c:02:20:43:00:fd:05:2e:c7:
6f:0f:91:8c:db:3d:90:47:ab:9b:7b:40:ba:69:32:
f0:c7:d6:20:c6:c9:55:49:72:1b:c5:17:e8:bc:75:
38:ba:c7:15:78:73:82:8e:1a:99:b5:f4:01:ce:a7:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:A6:6A:1F:44:7C:E0:18:1F:1C:C3:35:67:FA:F8:65:05:24:20
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:77:84:ff:b2:64:eb:c4:23:9e:eb:2d:a8:e5:93:4a:aa:50:
fe:63:ff:64:c9:f5:c0:cb:b0:42:cc:2a:0b:3d:6c:4c:c2:8f:
5d:84:70:ce:28:73:b5:bb:23:8a:14:69:01:7d:0d:a2:65:0d:
8c:7e:9d:96:19:a7:0b:c8:e1:7f:7f:5d:d0:54:1f:d7:18:4f:
9d:1c:d1:7b:a3:b7:c1:2d:51:42:02:49:e2:95:a5:46:54:ef:
59:fd:45:b6:6d:09:a7:9a:23:08:86:ed:72:76:29:9a:72:6a:
fb:5f:fb:7b:eb:6a:9e:7f:4a:33:a6:36:2b:48:ea:62:66:56:
3d:ea:80:03:ec:f2:ea:19:66:15:c7:71:1c:52:ef:3e:98:e3:
b3:6c:20:56:a6:cb:e9:bb:e3:d7:1e:46:9a:6c:3a:f2:14:f4:
b2:6b:9c:88:91:fb:d6:89:15:7d:b8:f7:10:48:44:fe:6c:4f:
5c:08:dd:52:fe:44:5b:49:b4:1a:e7:29:cc:85:b5:5f:30:4f:
71:ed:ab:50:79:c3:f0:b7:97:f2:be:a1:b9:73:e3:8c:4a:4d:
28:0d:12:24:3d:c6:9c:a3:99:64:3b:d8:dd:4b:df:54:63:97:
11:4e:ce:48:2a:ea:d2:5f:5a:a7:69:df:ac:ba:5f:fe:79:e0:
80:82:62:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+vg02LZiGxJJU41FE/bUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNDFkMzMwZGM4YzcyOTNlNzI5NDUxZGIyNjQ2MzgzODM4
ZTNmOGMwHhcNMjYwOTIxMDgwMDIyWhcNMjYwOTIyMDgwMDIyWjAzMTEwLwYDVQQD
EyhlNmZlYTY2YTFmNDQ3Y2UwMTgxZjFjYzMzNTY3ZmFmODY1MDUyNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBDTEQ5ouiGFJ/8SuWAusu+OxAyU
UcOh4FmFUNNpKYFafqt/Lkavt+kPa/18gkzqXb0WZ52SR+9++908UNnonNHLtODR
0UHeAv0FLPXUBZdCalOtYl/3uol2dxnaZNEcj91+k8dN+IuBAk3IdCkAy4Og5YTQ
YB77U0xjfCWJoJ34Ufvv7BKkbX1gmw2ABQjPmo7AYiKyUFv6uBxwQsGUIjLrnR3V
bgdWEwexKeit87YFtnzJt9yqq1T+SJE6PBsBAKp2RLxOP1NsAiBDAP0FLsdvD5GM
2z2QR6ube0C6aTLwx9YgxslVSXIbxRfovHU4uscVeHOCjhqZtfQBzqePjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb+pmofRHzgGB8cwzVn+vhlBSQgMB8GA1UdIwQY
MBaAFF1B0zDcjHKT5ylFHbJkY4ODjj+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFVIVE1OeU1jcFBuS1VVZHNtUmpnNE9PUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82OTVjZjItMmJmYS00NjI4LTk0M2It
NWM3YThmZDViMmRmLzEvWFVIVE1OeU1jcFBuS1VVZHNtUmpnNE9PUDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82OTVjZjItMmJmYS00NjI4LTk0M2ItNWM3YThmZDViMmRm
LzEvWFVIVE1OeU1jcFBuS1VVZHNtUmpnNE9PUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3eE/7Jk
68QjnustqOWTSqpQ/mP/ZMn1wMuwQswqCz1sTMKPXYRwzihztbsjihRpAX0NomUN
jH6dlhmnC8jhf39d0FQf1xhPnRzRe6O3wS1RQgJJ4pWlRlTvWf1Ftm0Jp5ojCIbt
cnYpmnJq+1/7e+tqnn9KM6Y2K0jqYmZWPeqAA+zy6hlmFcdxHFLvPpjjs2wgVqbL
6bvj1x5Gmmw68hT0smuciJH71okVfbj3EEhE/mxPXAjdUv5EW0m0GucpzIW1XzBP
ce2rUHnD8LeX8r6huXPjjEpNKA0SJD3GnKOZZDvY3UvfVGOXEU7OSCrq0l9ap2nf
rLpf/nnggIJiAg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:42:58 2026 by rpki-client