Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: vFwdA+vecQIliUs+0Ok4WdaIUlezIkCjNMi/vPuRYJI=
Subject key identifier: 40:DA:38:DD:97:2C:BA:3C:97:17:5C:95:72:2C:FC:A0:72:C6:8E:3B
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 01A0BF554F59E134EA538447236F34F7DBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 1A67
Signing time: Sun 20 Sep 2026 15:00:34 +0000
Manifest this update: Sun 20 Sep 2026 15:00:34 +0000
Manifest next update: Mon 21 Sep 2026 15:00:34 +0000
Files and hashes: 1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: faVJmc4OQN+sJ4IBaybFd1fHiZ1JjMJcB7W2JSdEVi8=)
3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:4f:59:e1:34:ea:53:84:47:23:6f:34:f7:db:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Sep 20 15:00:34 2026 GMT
Not After : Sep 21 15:00:34 2026 GMT
Subject: CN=40da38dd972cba3c97175c95722cfca072c68e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:b3:44:5b:8d:75:2f:09:22:38:c0:53:1a:
16:e7:ca:3f:57:cf:69:22:57:a4:46:a5:87:1f:1c:
13:00:7d:50:37:1e:b0:ab:16:73:f2:96:eb:d9:1d:
0d:f2:82:d7:be:9f:d8:77:f6:bf:ad:1d:13:35:2e:
73:44:93:9a:07:21:31:3a:7b:cf:13:8b:d6:df:c0:
31:69:1c:b1:c0:12:82:99:fa:bd:36:0e:91:85:76:
0d:eb:3a:5e:09:d4:85:32:32:a1:1b:ab:a5:2b:df:
74:3f:db:e7:2f:45:93:e3:a5:86:33:fa:bb:04:2d:
fb:5a:d6:02:78:f7:67:8c:a9:62:23:ce:35:2b:1e:
4b:38:43:9e:29:76:e5:81:4e:cb:3c:50:ea:b5:0b:
d1:a2:8b:1e:78:0d:3a:05:78:61:b9:a3:06:cf:80:
4d:e0:97:78:fd:b7:54:17:b6:c0:96:79:3c:9a:84:
1a:b0:3d:dd:99:e3:47:22:2c:3f:16:ae:fc:9b:11:
9a:ea:8a:01:a3:0c:b4:37:da:40:48:5b:7b:35:b6:
6e:f0:c2:b3:1d:85:bb:27:ca:0a:26:03:bf:c1:4c:
5d:fe:a6:b8:03:36:d0:88:6c:cc:c6:79:78:97:e8:
88:27:08:bc:da:07:9f:7d:f2:61:0e:10:b1:8d:bb:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:38:DD:97:2C:BA:3C:97:17:5C:95:72:2C:FC:A0:72:C6:8E:3B
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bd:21:7c:87:64:c2:1f:5a:df:53:c9:2d:51:7a:b0:55:62:
72:14:32:fb:1f:d2:e1:3b:bb:ae:43:c8:38:60:2d:10:d5:43:
7a:d5:2a:0f:11:d2:c6:f0:89:fa:e5:a0:93:84:ea:1d:71:e0:
96:ff:54:f2:ec:74:d4:ec:8b:6e:1b:ca:75:45:18:a4:7f:f4:
58:23:da:c7:45:75:2b:69:dd:13:b2:46:7a:d8:a6:f2:88:35:
7b:e0:39:f6:34:76:98:17:48:48:59:b8:00:12:21:97:51:e2:
49:67:bb:d8:9f:4c:26:ca:fe:37:c9:d7:8c:1e:3e:a8:2b:9e:
89:91:47:a2:bd:7c:de:aa:c9:ad:bc:f5:18:e8:9b:60:3e:03:
35:05:cd:8a:91:2a:9f:e6:fb:34:e0:90:e7:4c:cb:2b:bf:da:
9b:0c:24:d2:c8:0a:e4:1a:30:ff:73:78:5a:5e:ac:05:29:52:
08:af:4b:5a:da:fd:eb:31:0b:80:ce:5c:08:11:29:c3:34:26:
01:6a:cc:be:84:4b:77:fb:05:da:bd:c5:fa:8c:7b:fd:31:cd:
2f:2d:ef:29:42:17:7a:fb:7d:8e:ed:66:8e:e0:5d:5f:20:47:
7b:fc:43:73:86:e4:cd:14:ed:6d:bc:ae:e8:9e:31:76:2b:c7:
b2:06:0d:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/VU9Z4TTqU4RHI28099v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz
NTAzMzYwHhcNMjYwOTIwMTUwMDM0WhcNMjYwOTIxMTUwMDM0WjAzMTEwLwYDVQQD
Eyg0MGRhMzhkZDk3MmNiYTNjOTcxNzVjOTU3MjJjZmNhMDcyYzY4ZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteuzRFuNdS8JIjjAUxoW58o/V89p
IlekRqWHHxwTAH1QNx6wqxZz8pbr2R0N8oLXvp/Yd/a/rR0TNS5zRJOaByExOnvP
E4vW38AxaRyxwBKCmfq9Ng6RhXYN6zpeCdSFMjKhG6ulK990P9vnL0WT46WGM/q7
BC37WtYCePdnjKliI841Kx5LOEOeKXblgU7LPFDqtQvRooseeA06BXhhuaMGz4BN
4Jd4/bdUF7bAlnk8moQasD3dmeNHIiw/Fq78mxGa6ooBowy0N9pASFt7NbZu8MKz
HYW7J8oKJgO/wUxd/qa4AzbQiGzMxnl4l+iIJwi82gefffJhDhCxjbvG8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDaON2XLLo8lxdclXIs/KByxo47MB8GA1UdIwQY
MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt
NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj
LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaL0hfIdk
wh9a31PJLVF6sFVichQy+x/S4Tu7rkPIOGAtENVDetUqDxHSxvCJ+uWgk4TqHXHg
lv9U8ux01OyLbhvKdUUYpH/0WCPax0V1K2ndE7JGetim8og1e+A59jR2mBdISFm4
ABIhl1HiSWe72J9MJsr+N8nXjB4+qCueiZFHor183qrJrbz1GOibYD4DNQXNipEq
n+b7NOCQ50zLK7/amwwk0sgK5Bow/3N4Wl6sBSlSCK9LWtr96zELgM5cCBEpwzQm
AWrMvoRLd/sF2r3F+ox7/THNLy3vKUIXevt9ju1mjuBdXyBHe/xDc4bkzRTtbbyu
6J4xdivHsgYNJQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:13:22 2026 by rpki-client