Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: /VTw06WjK/ZzcG5sdkuHBgxcqWO2yG1vrhq3LsI1NNI=
Subject key identifier: D6:DD:97:A5:C8:E0:5C:06:88:11:8C:CE:C8:E3:AD:5F:86:71:91:F9
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 01A0E8889E98AC65667D716AA356BBC71BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0ACB
Signing time: Mon 28 Sep 2026 15:01:02 +0000
Manifest this update: Mon 28 Sep 2026 15:01:02 +0000
Manifest next update: Tue 29 Sep 2026 15:01:02 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: xfDVSOLSFUP6vu9ExnGnS5crKfmNH9v1CrCX/q+Ez54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:9e:98:ac:65:66:7d:71:6a:a3:56:bb:c7:1b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Sep 28 15:01:02 2026 GMT
Not After : Sep 29 15:01:02 2026 GMT
Subject: CN=d6dd97a5c8e05c0688118ccec8e3ad5f867191f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:d2:b1:ee:15:28:71:77:f8:04:0d:0e:db:
02:d3:b3:3c:89:fb:73:fc:b8:a6:53:d8:06:13:23:
42:65:8e:d9:a8:04:43:57:19:01:c8:38:48:f5:31:
12:10:08:c4:bf:b5:72:c0:27:68:f7:98:0a:92:dd:
1a:75:a2:3c:02:ff:66:ac:c2:37:7d:fb:ee:76:22:
73:1e:55:77:8a:e9:45:8e:cd:c8:2e:41:2e:20:e6:
15:45:2f:5f:a5:e2:71:bb:3b:ca:32:36:a7:40:33:
d5:54:ee:2f:3f:7d:53:57:3c:9f:6a:d2:d7:66:2c:
f2:01:ab:92:0e:28:99:36:02:14:7b:20:7f:49:fe:
29:91:f5:8b:96:b1:cf:67:82:48:67:d4:1b:27:74:
f9:72:1b:46:2b:be:97:dd:a7:aa:c6:7a:a8:d5:e5:
68:e8:e9:58:76:16:45:34:8d:60:67:f5:f8:74:eb:
7e:ee:3a:36:69:8a:8d:0c:cf:75:f4:92:b0:9d:de:
ed:cf:ea:c0:9c:9c:63:7e:81:98:3a:ce:54:91:a0:
6e:84:e9:8b:6e:a0:c4:39:2d:2c:8a:85:f8:70:20:
84:a5:05:fb:4b:ea:06:d7:18:f8:c0:93:91:53:1b:
0d:58:03:78:ce:ae:ed:76:06:11:28:6c:cb:b0:5c:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:97:A5:C8:E0:5C:06:88:11:8C:CE:C8:E3:AD:5F:86:71:91:F9
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:55:73:87:b6:35:68:4e:7d:22:e5:ec:e0:47:59:59:84:c5:
66:2f:27:f5:d1:7f:58:73:9b:5b:09:98:9f:ca:fc:51:ac:6b:
aa:94:c6:44:a2:62:ee:63:80:3d:42:c6:57:dd:7a:b5:4a:42:
c5:bf:3e:94:5d:96:74:42:2c:9f:76:6d:d9:67:8d:20:e7:6b:
47:fb:59:d8:bc:fc:d3:90:07:eb:ed:4c:dc:6f:87:97:51:f6:
cd:e0:dc:67:f0:c6:ba:d9:9d:57:2e:9f:f2:20:b3:49:d5:4d:
d0:75:57:bf:2d:81:7d:73:0d:ea:1c:23:93:7b:4e:cd:2e:2a:
b5:c8:d1:c9:3d:1e:af:06:f7:95:44:11:95:72:d4:a6:12:85:
59:79:59:49:01:4d:cc:52:fe:e2:6a:9b:8b:08:5f:1b:e5:ca:
41:67:18:3e:10:68:41:f7:76:54:73:55:9b:7f:c6:01:36:70:
ef:04:ed:06:7f:54:b6:3c:2f:83:9e:8f:d9:9f:20:93:0a:13:
89:8b:b4:89:46:a5:29:0d:32:bb:8e:e7:fc:96:8d:c6:a1:12:
23:5c:dc:0d:09:fc:29:bb:33:31:5c:85:6f:99:73:82:6b:26:
80:c7:19:8d:17:f3:95:e7:c2:03:ee:0a:4e:27:50:3a:cb:dd:
82:97:db:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoiJ6YrGVmfXFqo1a7xxv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTg1MDE3M2M4ZDI4ZDVhZmJmOTEwOTFjYTYzZTVkYTNj
NzVlZDQwHhcNMjYwOTI4MTUwMTAyWhcNMjYwOTI5MTUwMTAyWjAzMTEwLwYDVQQD
EyhkNmRkOTdhNWM4ZTA1YzA2ODgxMThjY2VjOGUzYWQ1Zjg2NzE5MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uTSse4VKHF3+AQNDtsC07M8iftz
/LimU9gGEyNCZY7ZqARDVxkByDhI9TESEAjEv7VywCdo95gKkt0adaI8Av9mrMI3
ffvudiJzHlV3iulFjs3ILkEuIOYVRS9fpeJxuzvKMjanQDPVVO4vP31TVzyfatLX
ZizyAauSDiiZNgIUeyB/Sf4pkfWLlrHPZ4JIZ9QbJ3T5chtGK76X3aeqxnqo1eVo
6OlYdhZFNI1gZ/X4dOt+7jo2aYqNDM919JKwnd7tz+rAnJxjfoGYOs5UkaBuhOmL
bqDEOS0sioX4cCCEpQX7S+oG1xj4wJORUxsNWAN4zq7tdgYRKGzLsFxWiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbdl6XI4FwGiBGMzsjjrV+GcZH5MB8GA1UdIwQY
MBaAFMYYUBc8jSjVr7+RCRymPl2jx17UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUt
YmI4ZGViYzAwMzg4LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUtYmI4ZGViYzAwMzg4
LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1Vzh7Y1
aE59IuXs4EdZWYTFZi8n9dF/WHObWwmYn8r8UaxrqpTGRKJi7mOAPULGV916tUpC
xb8+lF2WdEIsn3Zt2WeNIOdrR/tZ2Lz805AH6+1M3G+Hl1H2zeDcZ/DGutmdVy6f
8iCzSdVN0HVXvy2BfXMN6hwjk3tOzS4qtcjRyT0erwb3lUQRlXLUphKFWXlZSQFN
zFL+4mqbiwhfG+XKQWcYPhBoQfd2VHNVm3/GATZw7wTtBn9Utjwvg56P2Z8gkwoT
iYu0iUalKQ0yu47n/JaNxqESI1zcDQn8KbszMVyFb5lzgmsmgMcZjRfzlefCA+4K
TidQOsvdgpfbhQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:47:23 2026 by rpki-client