Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: bR2tfJAH8nX9N4v45Uf9q0DQYPILu550mDnULG0BLR4=
Subject key identifier: CA:B8:A0:E1:FB:57:6C:63:66:03:9D:E3:30:81:CB:EE:CF:0A:86:45
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 01A136A3602CEF4C68BC85B1AB94AF3C4628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 1AA7
Signing time: Tue 13 Oct 2026 19:00:38 +0000
Manifest this update: Tue 13 Oct 2026 19:00:38 +0000
Manifest next update: Wed 14 Oct 2026 19:00:38 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: 2qdrIm0yCXchfUDGp9huI1xGYWtKwsd/vXfJHLENmNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:60:2c:ef:4c:68:bc:85:b1:ab:94:af:3c:46:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Oct 13 19:00:38 2026 GMT
Not After : Oct 14 19:00:38 2026 GMT
Subject: CN=cab8a0e1fb576c6366039de33081cbeecf0a8645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:49:45:cf:62:59:42:78:9d:93:6d:5c:8e:
be:85:4d:0c:a2:34:80:f5:65:e4:bd:5b:14:a2:9e:
57:6c:df:34:cb:87:d3:49:ec:99:6a:a2:af:72:c4:
e1:73:a6:53:05:b7:ce:ee:71:7a:8b:ae:b7:e2:8a:
af:af:60:e9:dd:e0:79:3d:db:31:09:cc:5e:34:47:
fe:d0:00:96:c2:74:51:80:32:44:23:52:ec:d6:0e:
57:20:77:8d:07:c0:1d:71:b5:a0:fe:b3:c3:33:b9:
fb:63:ab:a9:3d:e3:a3:b4:9d:0e:67:e6:75:df:48:
76:19:7f:8b:ac:1b:f0:08:f4:6e:69:df:ff:37:8f:
2d:69:30:7e:bc:b6:f1:e7:a1:c8:67:f4:f3:f3:a8:
79:32:05:21:d5:82:52:a2:af:dd:9b:a2:0b:35:c0:
3b:9e:d7:6e:4c:94:b0:b5:1c:88:d7:96:65:a9:3f:
22:71:99:cf:44:13:23:0d:10:e7:04:16:59:f0:b3:
4f:4e:46:12:09:a9:95:c5:d2:50:58:67:25:91:aa:
8a:63:81:4c:d7:11:c8:92:a5:f2:1c:73:70:26:2a:
67:da:3a:c0:c0:ac:15:49:4c:b3:3a:6a:d3:62:df:
3c:e9:2a:6f:f1:b5:c2:43:f8:16:e0:55:42:6d:e9:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:A0:E1:FB:57:6C:63:66:03:9D:E3:30:81:CB:EE:CF:0A:86:45
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:8e:61:86:fe:01:fb:fb:5b:bd:34:03:15:fb:4c:3e:09:
d3:21:27:0f:1b:0d:23:78:e6:7f:6e:d5:6b:30:9c:7d:c5:1b:
df:fe:e1:68:d6:bb:5c:46:c2:a7:31:53:79:6f:82:67:1f:20:
40:3c:ca:a5:5e:be:14:35:1e:3a:d9:06:41:06:6a:8d:30:0a:
5c:2c:51:0c:ad:d1:8a:46:b4:43:2c:09:81:2f:58:c8:04:0b:
46:32:5f:2e:50:45:10:b0:45:d8:0e:f0:1f:cc:9f:a4:a0:bc:
b9:f4:3d:07:df:3e:81:e0:41:e8:bc:24:2e:73:ed:74:88:1b:
94:78:ca:e9:f7:64:ef:7a:ea:e0:a0:0d:ac:85:ee:4a:b2:e8:
51:45:68:c3:ee:3b:82:bc:02:7d:85:1b:48:69:ba:d6:a5:39:
3f:68:ab:e8:b5:32:79:10:11:46:99:86:5b:bf:a0:80:bd:2e:
4d:8a:40:77:ba:0c:58:4a:9a:32:7b:b7:10:eb:87:61:2f:c0:
8e:07:db:9b:a4:c7:c5:11:60:29:53:a9:48:10:f9:af:4d:a6:
b8:7a:64:fd:df:c5:2d:13:ab:30:cf:fb:01:50:27:ed:e9:ed:
ac:77:e2:fd:cd:75:62:65:e7:4e:da:08:bf:53:a2:93:d1:81:
0f:05:5a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2o2As70xovIWxq5SvPEYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YTRkMmY2ODkxM2VhY2U2YzlmNTA5MmJkYzdkZDIwZjU3
NGY0MzgwHhcNMjYxMDEzMTkwMDM4WhcNMjYxMDE0MTkwMDM4WjAzMTEwLwYDVQQD
EyhjYWI4YTBlMWZiNTc2YzYzNjYwMzlkZTMzMDgxY2JlZWNmMGE4NjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOtJRc9iWUJ4nZNtXI6+hU0MojSA
9WXkvVsUop5XbN80y4fTSeyZaqKvcsThc6ZTBbfO7nF6i6634oqvr2Dp3eB5Pdsx
CcxeNEf+0ACWwnRRgDJEI1Ls1g5XIHeNB8AdcbWg/rPDM7n7Y6upPeOjtJ0OZ+Z1
30h2GX+LrBvwCPRuad//N48taTB+vLbx56HIZ/Tz86h5MgUh1YJSoq/dm6ILNcA7
ntduTJSwtRyI15ZlqT8icZnPRBMjDRDnBBZZ8LNPTkYSCamVxdJQWGclkaqKY4FM
1xHIkqXyHHNwJipn2jrAwKwVSUyzOmrTYt886Spv8bXCQ/gW4FVCbellXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq4oOH7V2xjZgOd4zCBy+7PCoZFMB8GA1UdIwQY
MBaAFMek0vaJE+rObJ9Qkr3H3SD1dPQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTkt
ZjlhMWJiYzM2ODQ1LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTktZjlhMWJiYzM2ODQ1
LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTCOYYb+
Afv7W700AxX7TD4J0yEnDxsNI3jmf27VazCcfcUb3/7haNa7XEbCpzFTeW+CZx8g
QDzKpV6+FDUeOtkGQQZqjTAKXCxRDK3Rika0QywJgS9YyAQLRjJfLlBFELBF2A7w
H8yfpKC8ufQ9B98+geBB6LwkLnPtdIgblHjK6fdk73rq4KANrIXuSrLoUUVow+47
grwCfYUbSGm61qU5P2ir6LUyeRARRpmGW7+ggL0uTYpAd7oMWEqaMnu3EOuHYS/A
jgfbm6THxRFgKVOpSBD5r02muHpk/d/FLROrMM/7AVAn7entrHfi/c11YmXnTtoI
v1Oik9GBDwVamg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:05:36 2026 by rpki-client