Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File: xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier: SPcoPNnHlQ9wpPkD8+SdfAOrZ86OAgdxdMlBsWHlIKQ=
Subject key identifier: 72:A2:12:43:2E:9A:6D:CB:7C:F5:22:98:D8:A6:8D:0D:6B:6A:74:6E
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer: /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial: 01A0BD9E4AFAD9EF31580363CB1BE8D3F3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number: 01A8
Signing time: Sun 20 Sep 2026 07:01:02 +0000
Manifest this update: Sun 20 Sep 2026 07:01:02 +0000
Manifest next update: Mon 21 Sep 2026 07:01:02 +0000
Files and hashes: 1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: ItTpdFkdWvDuTU+aiPi5xK834y5fLIB5TU3GoogLshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9e:4a:fa:d9:ef:31:58:03:63:cb:1b:e8:d3:f3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Validity
Not Before: Sep 20 07:01:02 2026 GMT
Not After : Sep 21 07:01:02 2026 GMT
Subject: CN=72a212432e9a6dcb7cf52298d8a68d0d6b6a746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:2c:e0:d9:5f:95:39:b4:d1:41:03:91:b6:
e9:35:17:b0:41:c0:62:ce:f5:38:22:af:28:aa:a7:
50:2a:d4:5a:88:44:86:8d:66:f0:e8:97:03:66:0a:
9b:e5:b8:f1:1f:e9:97:2e:ae:cb:19:c2:2a:f0:18:
d3:24:b4:97:17:ee:7a:03:17:45:92:2d:c0:be:ee:
da:ba:ea:7d:e3:de:b8:d5:f1:d0:9d:22:df:b4:51:
35:8e:e8:9e:81:ca:21:cf:a4:3a:b9:d1:a1:b1:70:
86:78:44:77:d6:6d:19:34:20:98:c0:53:27:be:f4:
08:3c:8f:d7:c7:ad:7f:87:d7:ed:c5:c3:5a:d9:19:
f7:7a:f6:d1:b1:4b:61:0e:de:54:05:d1:ed:5a:d3:
7f:5e:92:fc:1d:95:a8:5f:a3:65:69:38:e9:69:87:
89:e9:96:1c:72:43:fa:d1:65:8d:ec:34:4b:f5:14:
c3:e8:2b:7c:3a:7a:b7:dd:04:4c:b4:e5:38:a1:3c:
5d:42:2e:0e:ac:de:89:5e:71:27:55:75:bc:67:ae:
06:d9:4c:48:e5:e6:34:05:d0:c3:15:07:3a:46:5a:
a0:f6:5b:16:db:b4:a8:3f:31:39:fb:fe:5e:28:63:
f9:3b:e8:8b:40:7c:4f:e0:06:f1:b4:b2:12:45:ff:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A2:12:43:2E:9A:6D:CB:7C:F5:22:98:D8:A6:8D:0D:6B:6A:74:6E
X509v3 Authority Key Identifier:
keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:41:ac:b8:3c:f3:83:83:f2:64:1a:d8:fb:d8:a5:60:4d:b5:
53:98:d6:8f:bd:27:74:ab:cd:db:f5:cf:54:98:12:e6:8d:57:
e3:34:be:ba:45:eb:e4:9c:62:e2:b8:87:37:29:39:82:0b:53:
36:63:7e:c7:0e:a7:12:75:ea:2d:01:2f:1f:d8:6e:4a:26:6f:
88:28:19:1a:61:8e:76:b9:86:e6:81:68:1e:fb:13:5f:3b:00:
f7:ee:57:13:9b:d5:f1:d5:12:88:4d:b6:92:e4:2b:f2:b8:35:
26:22:23:bb:13:f5:c8:d6:ad:4a:97:ab:41:e4:ed:8c:e9:ac:
66:cf:05:b2:af:65:5b:ac:2a:3f:c7:3e:fa:3d:89:9b:c5:15:
13:4b:17:10:b0:e9:98:bb:97:e8:62:e7:da:06:2a:63:46:c1:
72:ee:90:15:17:a9:91:90:0c:46:10:4c:65:89:22:a6:46:76:
31:77:f7:d8:70:2b:ca:80:01:fd:14:eb:1e:b9:17:b8:20:0b:
45:be:20:c8:6b:ae:01:1f:49:b6:f9:03:ab:24:af:a8:a1:94:
3b:a6:12:04:68:20:c5:ae:ab:e4:53:31:4e:2f:ff:28:ca:9c:
db:d2:bc:bc:c6:7b:c7:8b:a3:ad:c5:99:ba:42:59:d8:a7:64:
a6:9e:62:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9nkr62e8xWANjyxvo0/PeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NjhlZjc4YzNjZmU5ODVlMDFlNzUzZDVmNDVlYTY3NTEx
YjllNDIwHhcNMjYwOTIwMDcwMTAyWhcNMjYwOTIxMDcwMTAyWjAzMTEwLwYDVQQD
Eyg3MmEyMTI0MzJlOWE2ZGNiN2NmNTIyOThkOGE2OGQwZDZiNmE3NDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvQs4NlflTm00UEDkbbpNRewQcBi
zvU4Iq8oqqdQKtRaiESGjWbw6JcDZgqb5bjxH+mXLq7LGcIq8BjTJLSXF+56AxdF
ki3Avu7auup949641fHQnSLftFE1juiegcohz6Q6udGhsXCGeER31m0ZNCCYwFMn
vvQIPI/Xx61/h9ftxcNa2Rn3evbRsUthDt5UBdHtWtN/XpL8HZWoX6NlaTjpaYeJ
6ZYcckP60WWN7DRL9RTD6Ct8Onq33QRMtOU4oTxdQi4OrN6JXnEnVXW8Z64G2UxI
5eY0BdDDFQc6Rlqg9lsW27SoPzE5+/5eKGP5O+iLQHxP4AbxtLISRf/4ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKiEkMumm3LfPUimNimjQ1ranRuMB8GA1UdIwQY
MBaAFMVo73jDz+mF4B51PV9F6mdRG55CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hZjA2MjAtZGQ5ZS00N2U2LWE4NzQt
MjY1MDExZjEwNGQ2LzEveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hZjA2MjAtZGQ5ZS00N2U2LWE4NzQtMjY1MDExZjEwNGQ2
LzEveFdqdmVNUFA2WVhnSG5VOVgwWHFaMUVibmtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEGsuDzz
g4PyZBrY+9ilYE21U5jWj70ndKvN2/XPVJgS5o1X4zS+ukXr5Jxi4riHNyk5ggtT
NmN+xw6nEnXqLQEvH9huSiZviCgZGmGOdrmG5oFoHvsTXzsA9+5XE5vV8dUSiE22
kuQr8rg1JiIjuxP1yNatSperQeTtjOmsZs8Fsq9lW6wqP8c++j2Jm8UVE0sXELDp
mLuX6GLn2gYqY0bBcu6QFRepkZAMRhBMZYkipkZ2MXf32HAryoAB/RTrHrkXuCAL
Rb4gyGuuAR9JtvkDqySvqKGUO6YSBGggxa6r5FMxTi//KMqc29K8vMZ7x4ujrcWZ
ukJZ2Kdkpp5i2Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:59:33 2026 by rpki-client