Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier: sclOx2VfcS+kqgJ7HgugnSqN7301BV+hc+v+SYSSd2E=
Subject key identifier: ED:29:9B:49:7B:8E:5D:D5:EF:C2:C5:3C:A9:96:37:B6:B6:89:3B:9D
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 01A0E81D272E7396288BCB09E42D9B5341D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number: 0D47
Signing time: Mon 28 Sep 2026 13:03:39 +0000
Manifest this update: Mon 28 Sep 2026 13:03:39 +0000
Manifest next update: Tue 29 Sep 2026 13:03:39 +0000
Files and hashes: 1: 42mOJ3kHdwuFCzoSOI3N3ulVxfY.roa (hash: eqCYV3DSa0ilBw3MnAd/50LEsSGMdE5H8gvqRFLf8cs=)
2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: ghYfs7zQjOH/FM3/rw9eKMep9QIfw2wfVC6BL4/Rz1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1d:27:2e:73:96:28:8b:cb:09:e4:2d:9b:53:41:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Sep 28 13:03:39 2026 GMT
Not After : Sep 29 13:03:39 2026 GMT
Subject: CN=ed299b497b8e5dd5efc2c53ca99637b6b6893b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:20:4a:d7:cf:47:42:1b:ab:9d:53:5e:e7:
89:ad:b2:db:e2:0e:7c:2f:85:b9:58:78:0d:e5:d1:
21:fe:06:83:81:1c:92:0e:18:3e:77:f9:6b:ee:78:
83:f7:0e:3f:9d:46:1e:c6:52:f2:90:a9:80:73:49:
58:25:6f:8d:80:87:01:58:bf:89:5f:d9:eb:db:aa:
7d:e6:59:98:15:83:95:26:98:02:07:67:c4:be:95:
22:da:a5:96:84:2f:24:2f:cf:9c:58:94:f8:54:33:
e9:c9:16:95:78:1a:dc:c3:77:3c:3d:c5:61:7a:be:
b3:60:fb:e5:e6:a8:91:8c:80:cd:e5:fc:cb:0b:39:
93:47:84:9e:76:99:56:a9:de:cd:22:ee:d4:80:6d:
ae:72:1c:c5:c5:c6:6d:81:17:31:fd:fc:11:42:22:
7c:13:2b:81:14:94:35:9a:22:1d:85:f2:d1:56:2f:
e0:77:44:dc:93:ba:c0:f1:49:ce:0b:f0:4b:07:bb:
6a:e7:b7:0f:43:2e:a5:3e:7c:8f:c4:6f:1d:49:a9:
b2:b0:16:6c:9d:a8:ee:9c:a5:93:50:f3:7f:2d:82:
6e:76:90:62:bd:f3:ca:88:eb:88:d7:99:8b:b0:7b:
f2:85:f4:55:cd:71:15:d8:db:e8:d5:a7:d6:81:82:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:9B:49:7B:8E:5D:D5:EF:C2:C5:3C:A9:96:37:B6:B6:89:3B:9D
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:35:97:36:b1:2b:da:5d:c6:f4:a0:32:66:f8:eb:fd:05:5f:
cf:ad:a6:15:65:c3:5f:f8:20:c8:89:6f:25:22:d9:2a:cf:5f:
9c:af:00:4c:1d:06:c1:51:fb:7e:82:30:cd:f4:82:b7:ce:1a:
21:6c:e1:d8:e6:c8:49:f2:21:a7:ef:60:11:dd:d5:7c:4f:9b:
aa:19:23:22:ea:dd:0f:09:a4:ec:d0:1e:23:03:49:08:de:9b:
d1:73:df:c1:6b:86:fb:16:45:f5:d2:48:7e:4e:f6:7c:23:13:
d4:36:0a:85:70:ea:fa:cf:d3:49:b4:1d:18:12:c7:cb:f3:e4:
42:66:24:4d:3c:24:d1:b1:40:98:09:86:18:74:47:d2:8f:c3:
a9:e2:9e:2d:88:09:71:47:4b:41:00:2d:e4:50:d5:d1:76:9a:
31:c7:72:29:63:d7:a9:ee:ac:15:41:75:35:a4:02:c6:fe:94:
f1:71:63:c8:58:4b:df:e2:08:3a:5a:09:ee:b4:71:1e:31:e4:
5a:88:02:7b:03:95:28:a7:df:f9:4e:5c:26:5f:78:63:4a:1e:
c4:de:ee:df:03:b7:80:b1:cb:2b:fe:6d:fb:c4:82:59:80:04:
1b:89:48:6c:06:b4:ad:f9:ce:52:83:17:e0:3b:db:2a:52:02:
e9:29:a2:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHScuc5Yoi8sJ5C2bU0HYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1N2FhMWM3OGY2Y2NhYmM0N2I1NTEyMWEzNWZmMzBkOTk4
MjdlZTkwHhcNMjYwOTI4MTMwMzM5WhcNMjYwOTI5MTMwMzM5WjAzMTEwLwYDVQQD
EyhlZDI5OWI0OTdiOGU1ZGQ1ZWZjMmM1M2NhOTk2MzdiNmI2ODkzYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYEgStfPR0Ibq51TXueJrbLb4g58
L4W5WHgN5dEh/gaDgRySDhg+d/lr7niD9w4/nUYexlLykKmAc0lYJW+NgIcBWL+J
X9nr26p95lmYFYOVJpgCB2fEvpUi2qWWhC8kL8+cWJT4VDPpyRaVeBrcw3c8PcVh
er6zYPvl5qiRjIDN5fzLCzmTR4SedplWqd7NIu7UgG2uchzFxcZtgRcx/fwRQiJ8
EyuBFJQ1miIdhfLRVi/gd0Tck7rA8UnOC/BLB7tq57cPQy6lPnyPxG8dSamysBZs
najunKWTUPN/LYJudpBivfPKiOuI15mLsHvyhfRVzXEV2Nvo1afWgYJm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0pm0l7jl3V78LFPKmWN7a2iTudMB8GA1UdIwQY
MBaAFEV6ocePbMq8R7VRIaNf8w2Zgn7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQt
Yzc0MGUyZmUzMGQzLzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQtYzc0MGUyZmUzMGQz
LzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDWXNrEr
2l3G9KAyZvjr/QVfz62mFWXDX/ggyIlvJSLZKs9fnK8ATB0GwVH7foIwzfSCt84a
IWzh2ObISfIhp+9gEd3VfE+bqhkjIurdDwmk7NAeIwNJCN6b0XPfwWuG+xZF9dJI
fk72fCMT1DYKhXDq+s/TSbQdGBLHy/PkQmYkTTwk0bFAmAmGGHRH0o/DqeKeLYgJ
cUdLQQAt5FDV0XaaMcdyKWPXqe6sFUF1NaQCxv6U8XFjyFhL3+IIOloJ7rRxHjHk
WogCewOVKKff+U5cJl94Y0oexN7u3wO3gLHLK/5t+8SCWYAEG4lIbAa0rfnOUoMX
4DvbKlIC6Smi6g==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:26:08 2026 by rpki-client