Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: Bl8t09ioplvo9FM25iHbzNVpympC16+xPCBsn/kAn+Y=
Subject key identifier: 36:23:F9:9B:6D:5D:0E:F9:8E:7F:B6:8C:7D:8A:62:03:D2:C8:F3:CE
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 01A0CEC85CE28524A955BAECFE5CD5049B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 12B7
Signing time: Wed 23 Sep 2026 15:00:32 +0000
Manifest this update: Wed 23 Sep 2026 15:00:32 +0000
Manifest next update: Thu 24 Sep 2026 15:00:32 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: koR4F71SejvWONEHmT+Fx+qF5WAy7YfB+BwA0WXiRGg=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:5c:e2:85:24:a9:55:ba:ec:fe:5c:d5:04:9b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Sep 23 15:00:32 2026 GMT
Not After : Sep 24 15:00:32 2026 GMT
Subject: CN=3623f99b6d5d0ef98e7fb68c7d8a6203d2c8f3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:54:a2:e7:77:0b:98:65:a4:3d:58:a3:07:
9c:4a:4f:16:52:c0:0e:54:64:1b:ce:04:39:87:4f:
e9:32:49:49:34:04:68:7a:aa:b3:7f:bb:39:1c:c0:
67:c2:6f:70:7b:97:a2:46:8c:ce:4d:44:c5:de:af:
9e:37:32:d3:06:31:03:86:ca:f2:44:23:5e:b1:83:
ba:e9:f2:dc:35:22:fe:99:82:9e:d1:05:9f:e8:c7:
47:d4:85:78:34:02:86:c8:13:6f:aa:47:70:b1:9b:
b8:13:64:68:cd:db:25:03:2c:2a:d7:a1:8e:b8:49:
e7:3e:36:0f:9b:63:74:56:2f:70:54:03:bc:2e:61:
b5:ff:4d:cd:ba:f6:dc:be:87:5e:14:5e:3d:7b:e0:
90:db:ef:a0:87:6d:51:36:9e:81:c7:07:d1:4b:ec:
0e:5d:a2:d6:c4:ea:82:54:e6:44:39:7d:5f:bf:c5:
f1:a9:01:e3:d2:bf:a2:9c:24:d5:2d:aa:c9:73:ec:
b2:b1:51:e0:ae:4c:c3:49:8c:ab:2b:ff:7a:fe:c3:
03:2a:2c:b0:dd:de:37:66:dd:82:bf:d6:bf:ae:69:
7d:83:67:c2:7e:15:5c:21:58:88:fc:10:62:bf:21:
96:ea:3c:c4:45:44:e4:7c:a0:d8:5f:9a:7e:2d:80:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:23:F9:9B:6D:5D:0E:F9:8E:7F:B6:8C:7D:8A:62:03:D2:C8:F3:CE
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:75:3f:3f:30:de:5e:ed:56:b9:af:87:ef:91:4a:18:30:
b8:ba:b1:b0:69:01:d8:82:ae:65:ee:cb:33:1c:ea:14:60:ec:
f3:b8:53:d4:8b:6c:ec:50:1f:25:fb:f0:b6:9e:96:b1:aa:e8:
ba:f4:b9:31:24:ca:3e:4a:19:73:4d:e3:40:33:4f:24:10:f7:
08:c3:f8:5b:c0:de:f9:d7:ef:7b:33:70:f2:31:8b:33:7d:74:
af:13:87:13:51:4c:1c:87:1f:66:fb:c2:70:f6:45:43:fe:f4:
a7:58:78:eb:33:41:f9:3a:0b:ee:d2:72:05:64:ac:5c:21:86:
8a:75:5f:f5:fd:04:4a:74:60:4d:66:d3:58:10:5c:27:f5:48:
6f:6b:a9:fd:5a:a4:0f:36:ea:54:4e:9e:66:7d:6f:50:fe:60:
4f:3f:0a:70:3c:8f:d1:a6:12:ff:41:e1:b1:1f:ba:d1:dc:e3:
7d:f8:89:dd:49:2a:90:53:b7:fa:23:d9:82:be:75:0d:1c:ef:
f0:19:bc:bd:9c:13:59:ca:29:6c:dd:a4:df:ed:16:04:c7:ad:
81:e7:11:43:25:f0:f8:f1:76:7b:9a:28:81:b5:1c:1b:ef:eb:
25:98:22:38:22:f0:67:e5:21:f4:8e:f6:c0:1f:5e:10:ff:fd:
df:a2:05:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyFzihSSpVbrs/lzVBJtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3
NGYxNDcwHhcNMjYwOTIzMTUwMDMyWhcNMjYwOTI0MTUwMDMyWjAzMTEwLwYDVQQD
EygzNjIzZjk5YjZkNWQwZWY5OGU3ZmI2OGM3ZDhhNjIwM2QyYzhmM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomVUoud3C5hlpD1YowecSk8WUsAO
VGQbzgQ5h0/pMklJNARoeqqzf7s5HMBnwm9we5eiRozOTUTF3q+eNzLTBjEDhsry
RCNesYO66fLcNSL+mYKe0QWf6MdH1IV4NAKGyBNvqkdwsZu4E2RozdslAywq16GO
uEnnPjYPm2N0Vi9wVAO8LmG1/03NuvbcvodeFF49e+CQ2++gh21RNp6BxwfRS+wO
XaLWxOqCVOZEOX1fv8XxqQHj0r+inCTVLarJc+yysVHgrkzDSYyrK/96/sMDKiyw
3d43Zt2Cv9a/rml9g2fCfhVcIViI/BBivyGW6jzERUTkfKDYX5p+LYCIIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYj+ZttXQ75jn+2jH2KYgPSyPPOMB8GA1UdIwQY
MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt
ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3
LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxJ1Pz8w
3l7tVrmvh++RShgwuLqxsGkB2IKuZe7LMxzqFGDs87hT1Its7FAfJfvwtp6Wsaro
uvS5MSTKPkoZc03jQDNPJBD3CMP4W8De+dfvezNw8jGLM310rxOHE1FMHIcfZvvC
cPZFQ/70p1h46zNB+ToL7tJyBWSsXCGGinVf9f0ESnRgTWbTWBBcJ/VIb2up/Vqk
DzbqVE6eZn1vUP5gTz8KcDyP0aYS/0HhsR+60dzjffiJ3UkqkFO3+iPZgr51DRzv
8Bm8vZwTWcopbN2k3+0WBMetgecRQyXw+PF2e5oogbUcG+/rJZgiOCLwZ+Uh9I72
wB9eEP/936IFDA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:47:38 2026 by rpki-client