Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: dgO+PvEgVoiK7Z7AKplDEh9A8WQWoSuJTIwV7qjFRQo=
Subject key identifier: 11:AB:F3:B6:3E:39:97:16:2F:17:A4:22:8C:74:AD:CB:1D:F4:7A:83
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 01A0C5C55A3DA6155C49C4F0EE6497EE0E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 21:00:40 +0000
Manifest this update: Mon 21 Sep 2026 21:00:40 +0000
Manifest next update: Tue 22 Sep 2026 21:00:40 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: DlD+WNajMrJbsDW2iso7BdL2XWDISo3FGoxViaW1rQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:5a:3d:a6:15:5c:49:c4:f0:ee:64:97:ee:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Sep 21 21:00:40 2026 GMT
Not After : Sep 22 21:00:40 2026 GMT
Subject: CN=11abf3b63e3997162f17a4228c74adcb1df47a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a4:ad:0b:23:4a:58:2e:51:a3:ae:08:c5:c0:
c4:d0:cb:4b:0b:72:b8:1b:5f:0d:9b:e3:8d:b1:a4:
14:19:84:b4:72:71:f1:9a:e4:a4:10:e3:85:a1:39:
f9:3e:ee:02:2f:76:f7:e3:89:85:48:4c:ec:db:cc:
99:04:96:03:79:4c:0b:1c:c2:35:6a:f1:a9:7e:61:
af:5f:39:30:47:96:6f:4c:32:ad:c1:e2:4b:f2:f9:
e5:67:34:1b:94:07:6a:da:66:ce:8f:f8:4b:7f:a1:
a8:9b:a2:5b:05:bb:a3:99:95:ee:5f:11:41:44:0f:
d3:9a:ab:f7:60:04:da:9f:e8:5c:d2:cb:49:24:ac:
21:cc:e5:2a:e6:dc:3d:0b:54:e1:2d:aa:f4:00:07:
8a:1d:e3:6b:b8:24:cc:9d:e9:c3:97:56:c1:cb:2d:
ad:38:65:2f:77:98:73:17:81:54:94:b6:c6:6e:ee:
9e:63:08:38:ff:6d:48:7d:d5:00:78:46:5b:f6:f1:
9e:bb:de:e3:63:95:6d:23:58:04:c6:f9:ce:27:d6:
8f:49:87:10:ef:a9:f9:3b:26:75:53:3a:a4:04:cb:
9d:84:a0:36:41:0f:84:a8:3e:e7:23:cf:fe:86:2f:
a7:59:23:70:c1:56:e0:bb:cb:b2:0a:30:eb:12:b8:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:F3:B6:3E:39:97:16:2F:17:A4:22:8C:74:AD:CB:1D:F4:7A:83
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:1c:d5:fd:36:0e:44:3c:36:89:78:3c:20:a0:e9:9b:5f:
ae:9b:10:bf:9e:0d:b3:da:c7:e4:c5:f8:71:a0:d4:1c:81:03:
6e:96:6b:b6:79:c7:74:5e:67:30:0a:60:46:c6:c3:9a:54:54:
e4:ba:13:bd:aa:7f:f1:af:21:94:29:83:1f:47:d0:1f:b5:4f:
21:b4:b6:fa:ff:9e:c9:e0:65:17:26:08:ea:17:14:55:c0:8d:
41:f3:c4:ef:dd:5e:84:c0:6a:6d:1d:31:51:a2:63:27:8d:59:
5b:57:7f:f1:41:e8:3a:0a:ef:54:10:35:10:9e:20:c6:27:e0:
00:4f:5e:dd:d3:02:1b:eb:77:92:6d:b8:30:f3:ed:71:34:6e:
3a:f5:44:f5:b2:c2:14:45:05:42:d1:b5:55:07:1b:97:ab:74:
34:25:3d:b1:68:6b:e7:eb:84:13:9b:9d:c9:14:59:e7:1a:8a:
71:1c:c7:05:a6:fc:0f:55:ec:e3:70:55:a4:dd:e3:00:f4:c2:
55:b0:13:b0:db:79:34:e1:65:93:fc:4a:e7:ee:2a:c9:0e:42:
5a:a7:d6:45:19:b8:90:ff:ad:35:7c:9a:21:9c:f9:6d:06:f4:
0c:8d:4e:c7:88:5e:49:c5:07:e1:22:e2:1b:56:db:18:f7:6a:
bc:11:9c:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxVo9phVcScTw7mSX7g6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj
NzNiMWMwHhcNMjYwOTIxMjEwMDQwWhcNMjYwOTIyMjEwMDQwWjAzMTEwLwYDVQQD
EygxMWFiZjNiNjNlMzk5NzE2MmYxN2E0MjI4Yzc0YWRjYjFkZjQ3YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaStCyNKWC5Ro64IxcDE0MtLC3K4
G18Nm+ONsaQUGYS0cnHxmuSkEOOFoTn5Pu4CL3b344mFSEzs28yZBJYDeUwLHMI1
avGpfmGvXzkwR5ZvTDKtweJL8vnlZzQblAdq2mbOj/hLf6Gom6JbBbujmZXuXxFB
RA/Tmqv3YATan+hc0stJJKwhzOUq5tw9C1ThLar0AAeKHeNruCTMnenDl1bByy2t
OGUvd5hzF4FUlLbGbu6eYwg4/21IfdUAeEZb9vGeu97jY5VtI1gExvnOJ9aPSYcQ
76n5OyZ1UzqkBMudhKA2QQ+EqD7nI8/+hi+nWSNwwVbgu8uyCjDrErhhTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGr87Y+OZcWLxekIox0rcsd9HqDMB8GA1UdIwQY
MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt
NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi
LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI0c1f02
DkQ8Nol4PCCg6ZtfrpsQv54Ns9rH5MX4caDUHIEDbpZrtnnHdF5nMApgRsbDmlRU
5LoTvap/8a8hlCmDH0fQH7VPIbS2+v+eyeBlFyYI6hcUVcCNQfPE791ehMBqbR0x
UaJjJ41ZW1d/8UHoOgrvVBA1EJ4gxifgAE9e3dMCG+t3km24MPPtcTRuOvVE9bLC
FEUFQtG1VQcbl6t0NCU9sWhr5+uEE5udyRRZ5xqKcRzHBab8D1Xs43BVpN3jAPTC
VbATsNt5NOFlk/xK5+4qyQ5CWqfWRRm4kP+tNXyaIZz5bQb0DI1Ox4heScUH4SLi
G1bbGPdqvBGc8Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:55:16 2026 by rpki-client