Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: iVdyuid56HENFybeDByDgBx8QqDofS0VshvCcJhHSm8=
Subject key identifier: 53:5E:9F:94:1A:3E:A0:AE:FA:11:55:ED:13:BC:13:E2:8F:D3:01:53
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 01A0C10C78BE323FB721B66DB4FA14C90840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 1A69
Signing time: Sun 20 Sep 2026 23:00:14 +0000
Manifest this update: Sun 20 Sep 2026 23:00:14 +0000
Manifest next update: Mon 21 Sep 2026 23:00:14 +0000
Files and hashes: 1: GpZIgv126Cl3UoGhkY1Uvof1iPY.roa (hash: fP30v2kEF8neAtWHSrqD3PG/OVeu+YIU3qixidi5CQc=)
2: idf0hZZENN-4_aae9KN1w6rgM4Q.roa (hash: qK834woHIrutz8SD0paYhf0sMnrUCo/j6IC8hJut1/0=)
3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: sbySo7i/IuJahfe6CM8AVObYEW88yjOq0oeD0OEUkpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:78:be:32:3f:b7:21:b6:6d:b4:fa:14:c9:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Sep 20 23:00:14 2026 GMT
Not After : Sep 21 23:00:14 2026 GMT
Subject: CN=535e9f941a3ea0aefa1155ed13bc13e28fd30153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ac:ef:1e:e7:49:be:4f:d1:b0:cc:9c:a9:b6:
ae:9c:79:02:ed:6d:b6:df:c0:0e:35:37:17:93:50:
13:59:b7:46:3f:18:62:41:49:38:f5:38:59:e8:e3:
48:16:c6:17:75:d4:ef:0e:18:62:68:50:09:43:99:
01:34:3f:d5:de:5a:09:e4:cf:41:e2:2f:c4:b4:9a:
34:da:6c:e1:9e:87:c7:4b:62:c1:ef:db:94:a3:a8:
a4:a6:51:30:5a:92:0c:f6:7a:f7:55:49:61:26:b6:
92:74:4e:c8:13:ce:a2:e3:dd:72:60:c8:cc:68:43:
6e:52:30:5d:e7:99:6c:5d:8d:f4:13:e0:05:7b:98:
a2:43:2d:0a:99:7c:43:6d:59:39:73:1a:62:05:c9:
3c:27:dc:8b:9b:e3:ee:a4:10:fe:a9:d9:ea:78:b9:
a2:6b:f0:5e:32:da:6f:61:70:da:eb:14:7e:e2:d8:
59:22:16:fb:1d:cb:69:3e:02:53:67:ef:1e:b5:b0:
09:4c:a4:ba:4c:f1:b8:68:7e:b5:06:76:ed:62:80:
8b:4d:d9:b8:88:88:9b:dc:11:18:1d:ff:26:3f:b3:
39:ea:f7:1e:32:84:df:27:95:80:f4:f9:2a:d2:01:
6c:7f:c6:4b:54:97:16:14:46:9e:5c:db:99:1e:b9:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5E:9F:94:1A:3E:A0:AE:FA:11:55:ED:13:BC:13:E2:8F:D3:01:53
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:98:b5:1f:fe:23:52:91:04:f1:89:a9:a7:9c:f8:8c:d3:35:
18:f0:f3:21:09:a7:c6:80:40:47:d8:f2:18:46:b6:83:02:6b:
14:74:eb:df:3e:17:c9:d1:fa:be:47:6f:b3:f4:e9:01:9d:a7:
b2:35:88:3f:a9:02:6e:5d:1c:9e:eb:04:b2:9e:fc:03:39:52:
f1:68:15:f3:7f:ec:17:ca:15:50:2c:06:e0:32:53:49:ee:35:
f8:11:73:24:4d:91:b6:4f:5c:a1:4e:75:5f:d4:84:c9:ca:67:
ac:57:4a:09:c6:48:df:cc:99:8f:f3:ba:4f:f0:5d:20:e6:ee:
9b:be:1b:6c:ff:3e:a8:7c:e3:0d:e2:3d:6c:cd:91:17:dc:37:
85:17:27:a9:21:b4:10:b1:4b:98:21:36:4f:8b:1b:b9:af:18:
4a:73:55:6f:a5:66:b3:88:aa:50:c7:6a:a4:ca:6d:95:a3:ce:
1d:ff:6c:95:bd:8b:9f:90:bf:a0:f2:4a:87:7c:b1:74:6e:1e:
62:00:55:cb:93:be:0c:eb:a4:c3:fd:1f:63:4e:86:1e:2b:fc:
f6:84:48:0e:b0:31:83:f3:36:d0:91:23:0b:00:5d:02:42:eb:
6c:4f:3f:fd:98:25:ab:76:b8:9b:fa:47:38:cc:49:e9:2a:eb:
a7:f0:92:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDHi+Mj+3IbZttPoUyQhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTc5MWE1ODExYzdmNmVkODFmZDQ0MWI1MDI2NWFmNWU5
YzYxYjAwHhcNMjYwOTIwMjMwMDE0WhcNMjYwOTIxMjMwMDE0WjAzMTEwLwYDVQQD
Eyg1MzVlOWY5NDFhM2VhMGFlZmExMTU1ZWQxM2JjMTNlMjhmZDMwMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KzvHudJvk/RsMycqbaunHkC7W22
38AONTcXk1ATWbdGPxhiQUk49ThZ6ONIFsYXddTvDhhiaFAJQ5kBND/V3loJ5M9B
4i/EtJo02mzhnofHS2LB79uUo6ikplEwWpIM9nr3VUlhJraSdE7IE86i491yYMjM
aENuUjBd55lsXY30E+AFe5iiQy0KmXxDbVk5cxpiBck8J9yLm+PupBD+qdnqeLmi
a/BeMtpvYXDa6xR+4thZIhb7HctpPgJTZ+8etbAJTKS6TPG4aH61BnbtYoCLTdm4
iIib3BEYHf8mP7M56vceMoTfJ5WA9Pkq0gFsf8ZLVJcWFEaeXNuZHrl/twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNen5QaPqCu+hFV7RO8E+KP0wFTMB8GA1UdIwQY
MBaAFMUXkaWBHH9u2B/UQbUCZa9enGGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEt
ODE5MTY0YjkyYjg4LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEtODE5MTY0YjkyYjg4
LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5i1H/4j
UpEE8Ympp5z4jNM1GPDzIQmnxoBAR9jyGEa2gwJrFHTr3z4XydH6vkdvs/TpAZ2n
sjWIP6kCbl0cnusEsp78AzlS8WgV83/sF8oVUCwG4DJTSe41+BFzJE2Rtk9coU51
X9SEycpnrFdKCcZI38yZj/O6T/BdIObum74bbP8+qHzjDeI9bM2RF9w3hRcnqSG0
ELFLmCE2T4sbua8YSnNVb6Vms4iqUMdqpMptlaPOHf9slb2Ln5C/oPJKh3yxdG4e
YgBVy5O+DOukw/0fY06GHiv89oRIDrAxg/M20JEjCwBdAkLrbE8//Zglq3a4m/pH
OMxJ6Srrp/CSOg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:32:26 2026 by rpki-client