Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: KHCOU/G80fgLuER7qkdq9S/f7gcvFI6JfIXj7yLetvs=
Subject key identifier: 68:15:43:8D:34:15:AF:45:D9:FD:F3:1A:90:45:95:73:30:1E:59:ED
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 01A0C444C38228107D57696E2458EC356189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 07EF
Signing time: Mon 21 Sep 2026 14:00:35 +0000
Manifest this update: Mon 21 Sep 2026 14:00:35 +0000
Manifest next update: Tue 22 Sep 2026 14:00:35 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: wjGp4bLhCXMuodMD/7dtqqSaC/t6QwjZK/irk+bX6UU=)
2: zzi8zjGe28pTyTWtNNeVC8-_dWE.asa (hash: QeR+Juy6P7hMJ8A5+I8ru+6te5JuUSLSPP0C9C3wehI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:c3:82:28:10:7d:57:69:6e:24:58:ec:35:61:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Sep 21 14:00:35 2026 GMT
Not After : Sep 22 14:00:35 2026 GMT
Subject: CN=6815438d3415af45d9fdf31a90459573301e59ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:7f:ce:d1:f0:97:55:e9:5e:a4:6a:eb:f1:
70:00:1c:70:33:86:1f:5d:c9:e6:4b:a7:ca:ec:6f:
31:73:1d:d8:b1:ee:7c:5a:f5:aa:a3:2a:ea:da:8c:
65:ad:0e:51:e0:46:37:7d:b3:00:13:27:56:b7:56:
51:3d:f3:88:0f:7e:a1:ed:53:e0:6d:50:eb:4f:2c:
f6:a9:b7:2d:3c:7b:0d:19:85:91:f1:29:00:03:2e:
88:b5:81:02:d9:1d:0f:de:be:7b:c1:85:6a:78:1d:
79:b6:9c:ee:46:25:a1:b8:76:42:e5:8e:5a:f8:2d:
d0:56:6c:ab:83:39:7a:58:5f:6d:6b:84:4e:81:7d:
5d:08:a3:f2:b6:e1:c9:68:8b:33:32:d2:56:65:1f:
8b:a0:c9:6e:70:b1:bf:6a:a5:d2:ee:b8:70:00:f8:
bf:ab:fe:73:90:91:4f:6d:af:13:ea:11:5b:9f:c3:
6c:51:4d:7f:5d:ff:c3:33:1e:84:49:46:f5:6f:43:
47:db:26:aa:21:bd:63:dd:3d:6b:2e:6f:4d:b9:bd:
0b:dd:1b:22:e2:e3:72:0c:9b:0d:46:83:bc:65:4b:
19:b8:7f:6d:1b:50:d5:fa:e4:1a:79:1c:b5:30:e2:
d4:0e:0c:cb:55:e2:84:dd:07:eb:f3:d6:52:70:92:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:43:8D:34:15:AF:45:D9:FD:F3:1A:90:45:95:73:30:1E:59:ED
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6c:0c:ee:3d:ea:09:86:86:51:57:32:6f:25:b6:8d:9b:12:
42:23:19:f3:77:ac:7b:3c:20:6e:42:18:33:e1:ba:02:13:bb:
ea:d3:a4:f2:95:7c:8e:40:e6:32:81:91:4b:1f:4b:76:35:f3:
ab:46:ff:9b:4e:3a:77:7d:e1:56:e3:51:d4:16:f0:ea:a4:da:
49:8a:2c:d5:3d:0e:69:e1:ff:84:63:1c:dc:5c:2c:f0:8e:35:
0c:32:43:68:59:17:28:3c:43:da:47:d8:fd:64:a0:6d:0d:3c:
a3:14:13:d4:b7:6e:60:f7:43:63:4d:1e:50:e2:d1:df:52:9c:
c8:f4:22:72:e0:6b:a6:72:04:f9:bb:0d:d7:f3:b0:85:26:ee:
ba:42:74:c8:d3:dd:3e:fe:63:1f:bd:5c:c8:86:9a:20:1d:d3:
35:67:53:fc:da:34:8d:2f:78:c2:b4:a2:ce:0a:f9:d6:82:a4:
eb:d7:32:ef:f7:2f:05:b8:ab:18:80:26:d0:8e:31:7d:fd:bb:
87:69:22:e0:49:d7:5e:19:ed:6d:2b:6b:0a:30:95:f2:ab:e3:
3b:69:a8:ca:9b:83:52:d5:03:ab:f7:49:f7:e4:63:b5:b1:58:
5a:10:80:bd:be:db:1f:24:08:8d:3a:f2:f4:94:f1:63:45:18:
ce:c2:29:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERMOCKBB9V2luJFjsNWGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3
NTExNmUwHhcNMjYwOTIxMTQwMDM1WhcNMjYwOTIyMTQwMDM1WjAzMTEwLwYDVQQD
Eyg2ODE1NDM4ZDM0MTVhZjQ1ZDlmZGYzMWE5MDQ1OTU3MzMwMWU1OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw5/ztHwl1XpXqRq6/FwABxwM4Yf
XcnmS6fK7G8xcx3Yse58WvWqoyrq2oxlrQ5R4EY3fbMAEydWt1ZRPfOID36h7VPg
bVDrTyz2qbctPHsNGYWR8SkAAy6ItYEC2R0P3r57wYVqeB15tpzuRiWhuHZC5Y5a
+C3QVmyrgzl6WF9ta4ROgX1dCKPytuHJaIszMtJWZR+LoMlucLG/aqXS7rhwAPi/
q/5zkJFPba8T6hFbn8NsUU1/Xf/DMx6ESUb1b0NH2yaqIb1j3T1rLm9Nub0L3Rsi
4uNyDJsNRoO8ZUsZuH9tG1DV+uQaeRy1MOLUDgzLVeKE3Qfr89ZScJJx+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgVQ400Fa9F2f3zGpBFlXMwHlntMB8GA1UdIwQY
MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt
YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz
LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2wM7j3q
CYaGUVcybyW2jZsSQiMZ83esezwgbkIYM+G6AhO76tOk8pV8jkDmMoGRSx9LdjXz
q0b/m046d33hVuNR1Bbw6qTaSYos1T0OaeH/hGMc3Fws8I41DDJDaFkXKDxD2kfY
/WSgbQ08oxQT1LduYPdDY00eUOLR31KcyPQicuBrpnIE+bsN1/OwhSbuukJ0yNPd
Pv5jH71cyIaaIB3TNWdT/No0jS94wrSizgr51oKk69cy7/cvBbirGIAm0I4xff27
h2ki4EnXXhntbStrCjCV8qvjO2moypuDUtUDq/dJ9+RjtbFYWhCAvb7bHyQIjTry
9JTxY0UYzsIpgQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:22:06 2026 by rpki-client