Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: 0nSrLs94xRnfZy8onTnrL0jbCGNeneaCF/xKahICu4s=
Subject key identifier: E4:2C:B0:86:BD:EA:D1:65:82:EE:C5:9D:41:EA:DB:DD:CE:23:0D:60
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 01A0CDB605157AA89878BCF475CD4F16D59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 18B7
Signing time: Wed 23 Sep 2026 10:00:53 +0000
Manifest this update: Wed 23 Sep 2026 10:00:53 +0000
Manifest next update: Thu 24 Sep 2026 10:00:53 +0000
Files and hashes: 1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: R+8H7NVd7BOXAFpjZYE+tYKzjaHFkpb7sA8CK2NTp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:05:15:7a:a8:98:78:bc:f4:75:cd:4f:16:d5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Sep 23 10:00:53 2026 GMT
Not After : Sep 24 10:00:53 2026 GMT
Subject: CN=e42cb086bdead16582eec59d41eadbddce230d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:68:94:1f:66:63:0b:af:6b:e7:a9:00:b4:
ce:74:23:75:c6:5b:fc:28:0e:d6:ea:bf:0f:ee:ab:
76:d4:b5:a3:2f:bf:8c:33:46:68:f2:a3:78:f0:a4:
0f:88:07:7b:7b:c2:cc:95:5d:23:12:b0:cf:9d:fe:
e5:83:76:6e:d4:79:9c:48:59:59:63:7e:db:5b:82:
3c:87:e0:2d:2c:9a:c7:0a:70:6e:a3:bc:31:34:68:
17:43:6c:37:9a:24:cc:aa:6e:1c:06:83:45:88:c1:
cf:39:18:c7:0e:e5:5e:87:93:2b:41:21:35:b5:cc:
59:f3:08:b9:33:da:1c:a5:87:f7:0e:b7:63:af:48:
6f:c9:d5:84:2d:38:95:50:db:ff:26:2a:5b:48:d6:
62:0d:4b:f0:f3:66:c1:92:58:82:92:18:79:b0:61:
99:65:55:2f:56:ea:23:ce:5f:07:81:2f:e6:09:ab:
06:37:8b:72:a9:76:fd:5c:4c:e0:4d:7f:d1:01:06:
71:53:f0:e8:0b:75:1f:5c:aa:6f:49:92:33:42:1e:
e0:73:62:ba:58:a3:7c:84:74:3b:62:d6:9f:93:95:
62:dc:e9:eb:0a:70:ac:a9:a4:d0:67:ed:2a:51:11:
0e:e9:48:9a:de:b2:db:1a:fa:df:69:8f:64:1e:a0:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:B0:86:BD:EA:D1:65:82:EE:C5:9D:41:EA:DB:DD:CE:23:0D:60
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:62:04:55:28:4e:3a:36:3b:a3:21:b3:52:66:c8:e9:4b:
43:53:e9:00:74:a6:da:60:fc:bc:74:4c:80:09:94:36:7e:07:
5f:1b:be:00:87:23:23:55:70:46:bc:d3:1d:67:8b:d6:ed:09:
5d:fe:cb:08:0a:b8:d3:35:a0:c1:ba:dc:af:7c:fc:c8:10:ec:
a0:59:d7:3c:e4:cd:46:18:50:50:fb:29:4f:16:08:4c:d9:a8:
15:74:b2:9a:6a:b1:8b:20:a7:a7:bc:68:c8:97:f5:ef:87:9a:
80:31:ed:81:d7:1b:25:4d:f8:fc:b5:6b:73:d2:49:89:45:23:
57:19:7a:a0:27:75:01:53:e5:b9:a3:db:db:c1:95:9e:5e:b7:
1f:94:f6:39:4d:7a:77:63:e9:65:58:b0:32:9f:45:a8:75:68:
25:bb:14:08:32:fb:e5:b3:42:fd:9c:ee:49:b9:cd:b1:f2:c6:
6e:d9:22:47:bb:d3:20:ef:00:13:e6:48:2f:8b:d9:95:16:60:
1f:48:fa:2c:47:42:8e:ce:06:6b:2a:9c:18:99:be:9e:05:2a:
8d:59:5f:a0:fa:0b:59:a9:bb:78:f6:e1:0e:75:2b:e1:90:ce:
27:0b:56:e1:be:39:fd:01:0e:c6:fa:a9:d5:19:ba:0e:4e:c0:
b4:7a:19:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtgUVeqiYeLz0dc1PFtWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjYwOTIzMTAwMDUzWhcNMjYwOTI0MTAwMDUzWjAzMTEwLwYDVQQD
EyhlNDJjYjA4NmJkZWFkMTY1ODJlZWM1OWQ0MWVhZGJkZGNlMjMwZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhxolB9mYwuva+epALTOdCN1xlv8
KA7W6r8P7qt21LWjL7+MM0Zo8qN48KQPiAd7e8LMlV0jErDPnf7lg3Zu1HmcSFlZ
Y37bW4I8h+AtLJrHCnBuo7wxNGgXQ2w3miTMqm4cBoNFiMHPORjHDuVeh5MrQSE1
tcxZ8wi5M9ocpYf3Drdjr0hvydWELTiVUNv/JipbSNZiDUvw82bBkliCkhh5sGGZ
ZVUvVuojzl8HgS/mCasGN4tyqXb9XEzgTX/RAQZxU/DoC3UfXKpvSZIzQh7gc2K6
WKN8hHQ7Ytafk5Vi3OnrCnCsqaTQZ+0qUREO6Uia3rLbGvrfaY9kHqAz4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQssIa96tFlgu7FnUHq293OIw1gMB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACq9iBFUo
Tjo2O6Mhs1JmyOlLQ1PpAHSm2mD8vHRMgAmUNn4HXxu+AIcjI1VwRrzTHWeL1u0J
Xf7LCAq40zWgwbrcr3z8yBDsoFnXPOTNRhhQUPspTxYITNmoFXSymmqxiyCnp7xo
yJf174eagDHtgdcbJU34/LVrc9JJiUUjVxl6oCd1AVPluaPb28GVnl63H5T2OU16
d2PpZViwMp9FqHVoJbsUCDL75bNC/ZzuSbnNsfLGbtkiR7vTIO8AE+ZIL4vZlRZg
H0j6LEdCjs4GayqcGJm+ngUqjVlfoPoLWam7ePbhDnUr4ZDOJwtW4b45/QEOxvqp
1Rm6Dk7AtHoZ+A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:59:53 2026 by rpki-client