Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
File: xQqgWl6FmBSzRABcMDNiiIuOYOs.mft (raw, json)
Hash identifier: dJomKopUCe68J0YR6sWBG1/WYneVqmSjuXoDKHEhV1A=
Subject key identifier: 4A:C9:44:3D:C1:AC:B0:05:D0:AD:CA:DF:AA:34:2E:49:33:4E:AE:BC
Authority key identifier: C5:0A:A0:5A:5E:85:98:14:B3:44:00:5C:30:33:62:88:8B:8E:60:EB
Certificate issuer: /CN=c50aa05a5e859814b344005c303362888b8e60eb
Certificate serial: 01A0C331DB92E7D4FA86C066A6441E1CD22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
Manifest number: 2F
Signing time: Mon 21 Sep 2026 09:00:19 +0000
Manifest this update: Mon 21 Sep 2026 09:00:19 +0000
Manifest next update: Tue 22 Sep 2026 09:00:19 +0000
Files and hashes: 1: 1jL26ut9i72o2F_y1kqJYC-SeDw.roa (hash: wtiEByOmIaDIFzO/v4C1S8MN9NcEcNuf15+fPUnmuEA=)
2: tsGRmsREpXc_Z_NdGNIekdKShcM.roa (hash: 8YVUb9LnzwGB0Dnc3npjvfCOtQTyy3Jp4dEuAqxypaY=)
3: xQqgWl6FmBSzRABcMDNiiIuOYOs.crl (hash: BkZXcs8YC+rU8H9lvuov6sriTUBb7Dx2L+xxcQuIQS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:db:92:e7:d4:fa:86:c0:66:a6:44:1e:1c:d2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50aa05a5e859814b344005c303362888b8e60eb
Validity
Not Before: Sep 21 09:00:19 2026 GMT
Not After : Sep 22 09:00:19 2026 GMT
Subject: CN=4ac9443dc1acb005d0adcadfaa342e49334eaebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:e9:c3:83:ca:20:b2:63:e0:4d:2d:09:74:
3a:f5:13:03:e3:45:b6:6e:46:c7:fd:be:b9:26:9d:
bf:3d:f7:b0:fd:4c:90:4f:f5:75:21:5c:31:59:76:
46:cb:34:8b:18:93:6a:27:5c:81:d6:23:79:69:06:
2e:e9:4b:dd:cf:ce:cb:56:fd:f1:f6:42:96:41:35:
fe:23:9f:6b:25:45:0a:4d:4b:10:9b:6e:6c:40:84:
20:a0:31:2f:cb:d0:0c:cd:04:74:4b:13:ae:c5:8a:
44:90:fe:f4:9c:00:cd:b2:52:97:1f:df:79:a3:dc:
ef:ba:7c:b2:b7:5d:2e:dc:81:1e:21:65:8d:4b:bd:
f8:8e:19:07:43:c3:ee:e7:b6:8a:77:35:f5:a8:a9:
08:84:b3:a4:0f:9f:c5:44:1a:92:bc:01:70:e4:0a:
5c:76:91:f6:cd:6f:2b:93:a3:5a:16:e1:5a:d8:b7:
4e:ee:b8:d9:5f:b7:62:0f:bc:18:b1:aa:2d:7f:b2:
e4:76:cd:e7:c9:fd:b6:fb:40:d8:1f:35:ec:ed:a2:
85:b4:c4:b4:fe:84:20:ce:26:56:f0:37:bc:9e:37:
9a:49:5e:48:39:16:53:8a:f5:9b:1a:f4:68:82:de:
af:8d:80:51:83:9b:d1:39:06:19:f5:be:46:4e:3d:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C9:44:3D:C1:AC:B0:05:D0:AD:CA:DF:AA:34:2E:49:33:4E:AE:BC
X509v3 Authority Key Identifier:
keyid:C5:0A:A0:5A:5E:85:98:14:B3:44:00:5C:30:33:62:88:8B:8E:60:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a4:56:3c:23:06:f9:02:5e:07:07:5e:47:cf:a3:ef:f7:ee:
27:01:c9:a5:52:af:3b:c1:2f:d1:e5:54:84:88:2e:37:ea:7b:
45:2e:d6:53:a9:9f:db:6f:a9:b3:6f:25:36:bc:ed:f8:31:a3:
57:c7:4e:03:e3:66:b9:78:17:e5:f2:41:d6:29:17:e6:12:f0:
e9:a9:7a:35:45:90:fb:e4:33:f9:d4:fe:4d:2b:3e:7d:13:23:
83:18:4d:3b:e1:d8:fe:85:1d:57:fb:fd:d8:8b:a6:d2:11:d2:
2f:fc:02:a5:4d:20:03:a1:8f:f6:fc:8a:2f:be:94:33:43:af:
ec:9b:b3:e8:29:30:83:07:14:79:59:a9:40:b0:be:fd:d9:b2:
20:03:de:70:92:4b:8b:9b:40:75:58:96:47:8c:ae:b3:1d:09:
25:43:fe:3c:69:c4:4e:d3:d8:25:90:52:8a:be:05:7d:e0:32:
31:ab:84:48:e2:8e:02:5b:61:d5:b8:59:c5:46:4d:80:52:98:
45:86:2d:be:14:99:20:5e:0c:24:db:e8:29:4c:37:94:69:93:
20:35:65:3b:eb:6e:21:ed:e4:b5:e7:d3:2c:99:e6:03:7f:5f:
31:ae:03:06:eb:60:21:78:49:38:66:d4:7a:55:96:e6:39:10:
0d:7f:73:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMduS59T6hsBmpkQeHNIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGFhMDVhNWU4NTk4MTRiMzQ0MDA1YzMwMzM2Mjg4OGI4
ZTYwZWIwHhcNMjYwOTIxMDkwMDE5WhcNMjYwOTIyMDkwMDE5WjAzMTEwLwYDVQQD
Eyg0YWM5NDQzZGMxYWNiMDA1ZDBhZGNhZGZhYTM0MmU0OTMzNGVhZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWDpw4PKILJj4E0tCXQ69RMD40W2
bkbH/b65Jp2/Pfew/UyQT/V1IVwxWXZGyzSLGJNqJ1yB1iN5aQYu6Uvdz87LVv3x
9kKWQTX+I59rJUUKTUsQm25sQIQgoDEvy9AMzQR0SxOuxYpEkP70nADNslKXH995
o9zvunyyt10u3IEeIWWNS734jhkHQ8Pu57aKdzX1qKkIhLOkD5/FRBqSvAFw5Apc
dpH2zW8rk6NaFuFa2LdO7rjZX7diD7wYsaotf7Lkds3nyf22+0DYHzXs7aKFtMS0
/oQgziZW8De8njeaSV5IORZTivWbGvRogt6vjYBRg5vROQYZ9b5GTj2+CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErJRD3BrLAF0K3K36o0LkkzTq68MB8GA1UdIwQY
MBaAFMUKoFpehZgUs0QAXDAzYoiLjmDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFxZ1dsNkZtQlN6UkFCY01ETmlpSXVPWU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iNzZkNzMtNjU2YS00MGEyLTk4N2Qt
M2JjNmQzZmI3ODNmLzEveFFxZ1dsNkZtQlN6UkFCY01ETmlpSXVPWU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iNzZkNzMtNjU2YS00MGEyLTk4N2QtM2JjNmQzZmI3ODNm
LzEveFFxZ1dsNkZtQlN6UkFCY01ETmlpSXVPWU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6RWPCMG
+QJeBwdeR8+j7/fuJwHJpVKvO8Ev0eVUhIguN+p7RS7WU6mf22+ps28lNrzt+DGj
V8dOA+NmuXgX5fJB1ikX5hLw6al6NUWQ++Qz+dT+TSs+fRMjgxhNO+HY/oUdV/v9
2Ium0hHSL/wCpU0gA6GP9vyKL76UM0Ov7Juz6CkwgwcUeVmpQLC+/dmyIAPecJJL
i5tAdViWR4yusx0JJUP+PGnETtPYJZBSir4FfeAyMauESOKOAlth1bhZxUZNgFKY
RYYtvhSZIF4MJNvoKUw3lGmTIDVlO+tuIe3ktefTLJnmA39fMa4DButgIXhJOGbU
elWW5jkQDX9zmg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:52 2026 by rpki-client