Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: wnxUnYu4rouPBjNR6n6INvCpVMDVZqIVVoiTQVMn8aA=
Subject key identifier: A8:D3:8E:BA:4D:28:D3:19:51:CD:DE:54:ED:24:53:5C:BB:BD:C1:CF
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 01A0DB71EA8BB19A403A335DC55340907C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 02:01:10 +0000
Manifest this update: Sat 26 Sep 2026 02:01:10 +0000
Manifest next update: Sun 27 Sep 2026 02:01:10 +0000
Files and hashes: 1: 4H3kqbZKgvCRJ41TW2E8J1NDC88.roa (hash: ah0Wo037A9MM/sUCKBiJ/BqofxWUcKYL1Cq5STwAUy8=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: 4OMte91Fr3TOEmA0+vCfRg66ufXWydRoP8jOrFiwC3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:ea:8b:b1:9a:40:3a:33:5d:c5:53:40:90:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Sep 26 02:01:10 2026 GMT
Not After : Sep 27 02:01:10 2026 GMT
Subject: CN=a8d38eba4d28d31951cdde54ed24535cbbbdc1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:cb:0f:b2:13:97:e1:bf:9b:1c:03:4d:2a:
14:fb:dd:ae:72:ef:c9:25:d0:b4:7a:2d:f3:9a:dc:
8e:5b:81:aa:5e:e2:0b:2b:9d:7d:33:2e:1f:47:aa:
f2:c4:49:b6:d5:3b:97:09:d6:18:ad:d5:c6:ea:22:
98:94:9e:07:60:46:35:c1:c3:64:5f:a2:06:9e:1f:
19:e1:aa:12:09:a0:3d:aa:70:41:f6:27:77:fb:b7:
aa:64:73:30:e0:3c:f9:f5:84:e6:4a:cc:33:b3:8c:
3b:87:f3:2a:6d:8b:dd:6d:f8:52:d6:f5:27:06:05:
f7:da:1f:68:54:18:7f:5b:90:7b:9f:a6:d1:ec:59:
78:55:b3:8d:86:d3:48:94:e9:8e:14:df:12:20:46:
a2:1a:a1:b0:32:f2:bc:58:e0:a4:83:73:5f:49:b7:
e5:3b:73:da:43:04:dc:ec:d3:c5:f9:6e:49:88:e7:
48:68:b2:38:db:ff:20:18:56:50:00:70:7e:d5:bf:
2e:71:dd:5c:99:a2:2a:b5:ae:11:5e:49:16:24:90:
b7:f0:84:0e:d0:5e:0f:3e:1a:5c:e2:35:1d:ef:25:
de:51:9a:5a:92:3e:71:26:ef:c3:9f:81:05:94:99:
17:8b:a2:d9:71:53:81:85:58:87:eb:ad:b8:68:61:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:8E:BA:4D:28:D3:19:51:CD:DE:54:ED:24:53:5C:BB:BD:C1:CF
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:65:28:72:7f:98:e4:dc:97:2c:a5:3c:f9:33:ff:ce:f1:
15:ef:74:a4:f3:9d:bf:b1:7d:b2:f9:e1:c4:00:da:bd:69:6a:
6b:9d:70:ba:d6:96:87:c2:84:60:fd:b7:01:d5:d0:33:21:21:
91:67:f8:71:81:66:cf:8f:54:99:d5:88:0c:ab:ee:f5:f3:48:
e1:53:5f:af:12:64:46:a8:fe:85:17:53:5d:d7:ab:99:70:f8:
91:ee:f1:1c:16:fd:dc:31:5e:17:73:50:6c:4b:66:30:dc:d2:
0a:c8:c7:5d:87:30:b4:9f:56:b2:f9:85:bb:38:28:07:ab:e0:
2c:2d:14:47:7a:b6:d7:a8:d3:f2:64:93:e0:47:1f:38:80:01:
a1:4c:c8:1e:c5:f2:93:e7:b0:50:4f:55:f1:2d:4c:2d:4e:a4:
78:0f:15:40:5b:74:d3:36:ba:28:e6:e8:c2:de:91:38:43:64:
92:16:4a:cf:64:15:4a:8c:7e:1f:44:98:74:f9:4f:1d:b8:b1:
b8:aa:fb:d3:47:89:26:00:e1:75:09:e7:d5:b5:0d:2c:89:23:
1c:50:02:a3:5a:2c:63:0e:c7:8a:fd:dd:6e:a5:64:95:80:93:
95:89:c8:3b:23:38:82:f1:dd:b1:af:f1:d3:71:b2:f0:9f:2a:
88:2b:3c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbceqLsZpAOjNdxVNAkHx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNzRkZWI0MTg0NDI2ZmE2MjIyNWI2MTIwYzM2NzA2Zjcz
N2I4ZTIwHhcNMjYwOTI2MDIwMTEwWhcNMjYwOTI3MDIwMTEwWjAzMTEwLwYDVQQD
EyhhOGQzOGViYTRkMjhkMzE5NTFjZGRlNTRlZDI0NTM1Y2JiYmRjMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdjLD7ITl+G/mxwDTSoU+92ucu/J
JdC0ei3zmtyOW4GqXuILK519My4fR6ryxEm21TuXCdYYrdXG6iKYlJ4HYEY1wcNk
X6IGnh8Z4aoSCaA9qnBB9id3+7eqZHMw4Dz59YTmSswzs4w7h/MqbYvdbfhS1vUn
BgX32h9oVBh/W5B7n6bR7Fl4VbONhtNIlOmOFN8SIEaiGqGwMvK8WOCkg3NfSbfl
O3PaQwTc7NPF+W5JiOdIaLI42/8gGFZQAHB+1b8ucd1cmaIqta4RXkkWJJC38IQO
0F4PPhpc4jUd7yXeUZpakj5xJu/Dn4EFlJkXi6LZcVOBhViH6624aGHxhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjTjrpNKNMZUc3eVO0kU1y7vcHPMB8GA1UdIwQY
MBaAFP103rQYRCb6YiJbYSDDZwb3N7jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1hUZXRCaEVKdnBpSWx0aElNTm5CdmMzdU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODQ5MWYtYjA0ZC00YjBkLTkwN2It
ZDU3MDVhZTM3MDE0LzEvX1hUZXRCaEVKdnBpSWx0aElNTm5CdmMzdU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xODQ5MWYtYjA0ZC00YjBkLTkwN2ItZDU3MDVhZTM3MDE0
LzEvX1hUZXRCaEVKdnBpSWx0aElNTm5CdmMzdU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY91lKHJ/
mOTclyylPPkz/87xFe90pPOdv7F9svnhxADavWlqa51wutaWh8KEYP23AdXQMyEh
kWf4cYFmz49UmdWIDKvu9fNI4VNfrxJkRqj+hRdTXdermXD4ke7xHBb93DFeF3NQ
bEtmMNzSCsjHXYcwtJ9WsvmFuzgoB6vgLC0UR3q216jT8mST4EcfOIABoUzIHsXy
k+ewUE9V8S1MLU6keA8VQFt00za6KObowt6ROENkkhZKz2QVSox+H0SYdPlPHbix
uKr700eJJgDhdQnn1bUNLIkjHFACo1osYw7Hiv3dbqVklYCTlYnIOyM4gvHdsa/x
03Gy8J8qiCs8GQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:27:30 2026 by rpki-client