Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: 2EnPV/Vb/4DSCsWiKCSItsM5vljez1ly/s4sPu4/dF4=
Subject key identifier: A5:FA:0B:A9:31:C0:95:B3:32:95:BA:1B:AA:EB:42:65:1F:D9:27:71
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 01A0C7B3EA795DB2738746DCE881602EDB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1A04
Signing time: Tue 22 Sep 2026 06:00:51 +0000
Manifest this update: Tue 22 Sep 2026 06:00:51 +0000
Manifest next update: Wed 23 Sep 2026 06:00:51 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: G8yVSLrPs1Mw/hXIzh32SwCfV7o9kd6gQPoSGCFQAPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:ea:79:5d:b2:73:87:46:dc:e8:81:60:2e:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Sep 22 06:00:51 2026 GMT
Not After : Sep 23 06:00:51 2026 GMT
Subject: CN=a5fa0ba931c095b33295ba1baaeb42651fd92771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:fe:aa:04:0a:f0:7e:09:64:c6:14:ba:bc:
1b:60:18:07:cc:ca:10:26:82:1d:84:08:39:fa:73:
23:e0:ca:6d:73:c4:ce:54:bb:ca:57:98:ed:f5:fe:
ba:e5:5c:5d:04:ea:d8:4c:69:a3:5b:b1:b1:66:80:
cc:49:d6:86:1e:02:d0:2d:43:87:f3:85:fc:fc:84:
4d:4d:a7:6d:d6:35:6d:3f:59:17:2e:01:f8:79:5c:
8d:1d:a4:7e:6e:d2:fe:39:74:43:81:41:83:b6:8f:
e5:71:7d:7a:f3:25:16:15:02:88:24:50:7d:b8:ec:
01:77:b3:c2:95:ed:8d:54:88:d7:99:fd:c0:50:9a:
58:9e:69:0d:20:34:31:ba:f9:df:c1:73:de:14:34:
57:da:a7:89:a5:c1:8a:61:26:ad:81:d1:81:3d:c7:
0e:bd:95:75:26:d2:b6:3b:ba:5d:c8:95:e4:39:3e:
ca:0f:9e:68:4e:f5:fe:ca:b4:77:6f:ed:3c:89:65:
0f:df:e5:24:ce:de:62:0f:09:f7:e1:48:67:32:d4:
cf:61:b6:35:9f:ce:fe:d8:94:da:f4:d8:6e:74:72:
64:64:a6:6c:89:83:4f:13:f2:8b:b2:a9:6f:3a:33:
e0:5b:79:16:ef:e1:89:e4:79:92:7a:65:c2:81:79:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:0B:A9:31:C0:95:B3:32:95:BA:1B:AA:EB:42:65:1F:D9:27:71
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:d3:c8:09:e3:2d:62:9d:c6:72:4c:f1:00:b0:a3:0a:38:
11:ba:1e:ba:ee:a4:13:04:1c:41:bb:43:37:de:8c:ee:95:6b:
fd:e6:5c:3e:d8:1e:08:51:33:42:23:24:e9:3b:bf:8c:87:d3:
05:ab:6c:9d:f9:84:c4:1d:80:a2:3a:7f:be:0a:68:1d:5c:83:
a9:c6:99:f4:e4:8b:4b:5b:d4:24:b7:b6:d1:29:41:d1:ec:6a:
85:5b:56:8f:18:b9:56:d5:7f:c6:21:4f:c2:0d:be:3b:79:71:
a7:35:d8:ec:7d:6a:7a:56:86:7b:95:d2:f6:fb:1d:f4:1e:f7:
07:9c:f8:07:f0:27:73:d0:da:31:00:a4:ba:b5:cf:f9:c7:0f:
0d:c4:d4:58:7e:96:83:03:c3:b4:40:43:d7:35:72:29:52:d3:
e4:69:2c:f3:6b:bd:46:bf:f0:7f:e2:a2:a3:91:65:91:f5:86:
32:70:19:96:27:96:9e:d1:b0:71:9a:33:8d:fd:29:e7:88:a6:
d3:61:ce:4f:54:87:3e:9c:0d:48:4d:e5:bd:4a:8c:90:e9:e1:
ef:98:43:2b:a2:80:4d:8c:fc:73:97:bc:82:bd:30:aa:d5:8d:
1a:f1:53:64:de:f9:8d:69:f4:7f:ca:e3:dc:b1:ad:cb:01:0d:
be:2b:8c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs+p5XbJzh0bc6IFgLtsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw
YjdlZjgwHhcNMjYwOTIyMDYwMDUxWhcNMjYwOTIzMDYwMDUxWjAzMTEwLwYDVQQD
EyhhNWZhMGJhOTMxYzA5NWIzMzI5NWJhMWJhYWViNDI2NTFmZDkyNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cH+qgQK8H4JZMYUurwbYBgHzMoQ
JoIdhAg5+nMj4Mptc8TOVLvKV5jt9f665VxdBOrYTGmjW7GxZoDMSdaGHgLQLUOH
84X8/IRNTadt1jVtP1kXLgH4eVyNHaR+btL+OXRDgUGDto/lcX168yUWFQKIJFB9
uOwBd7PCle2NVIjXmf3AUJpYnmkNIDQxuvnfwXPeFDRX2qeJpcGKYSatgdGBPccO
vZV1JtK2O7pdyJXkOT7KD55oTvX+yrR3b+08iWUP3+Ukzt5iDwn34UhnMtTPYbY1
n87+2JTa9NhudHJkZKZsiYNPE/KLsqlvOjPgW3kW7+GJ5HmSemXCgXleqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX6C6kxwJWzMpW6G6rrQmUf2SdxMB8GA1UdIwQY
MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt
ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1
LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsbTyAnj
LWKdxnJM8QCwowo4Eboeuu6kEwQcQbtDN96M7pVr/eZcPtgeCFEzQiMk6Tu/jIfT
BatsnfmExB2Aojp/vgpoHVyDqcaZ9OSLS1vUJLe20SlB0exqhVtWjxi5VtV/xiFP
wg2+O3lxpzXY7H1qelaGe5XS9vsd9B73B5z4B/Anc9DaMQCkurXP+ccPDcTUWH6W
gwPDtEBD1zVyKVLT5Gks82u9Rr/wf+Kio5FlkfWGMnAZlieWntGwcZozjf0p54im
02HOT1SHPpwNSE3lvUqMkOnh75hDK6KATYz8c5e8gr0wqtWNGvFTZN75jWn0f8rj
3LGtywENviuMXw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:45:41 2026 by rpki-client