Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: NXktUJ8HDwMFEC2wpko9w8J6PYolv2pWY1dweqHRqfg=
Subject key identifier: B5:8C:A7:36:07:5B:C2:B7:E2:E0:68:32:E0:78:3D:5C:09:EE:B7:F7
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 01A0E0CF63B0E14BFC143D220E2B9D740B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 03:01:22 +0000
Manifest this update: Sun 27 Sep 2026 03:01:22 +0000
Manifest next update: Mon 28 Sep 2026 03:01:22 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: O6RBAfEojiNQmMs4xTVHbv9H3dRJFzQUcPpXlxR2h6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:63:b0:e1:4b:fc:14:3d:22:0e:2b:9d:74:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Sep 27 03:01:22 2026 GMT
Not After : Sep 28 03:01:22 2026 GMT
Subject: CN=b58ca736075bc2b7e2e06832e0783d5c09eeb7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:20:53:94:f3:0a:5b:58:17:8b:75:59:a5:
63:b5:a3:13:ae:d1:66:6b:5b:41:e1:de:8a:95:bf:
26:be:f1:42:2e:af:cf:ea:a7:22:6e:25:3f:2b:47:
f8:35:16:f7:64:1a:c0:9c:43:52:98:c3:fc:23:89:
42:65:b7:2c:06:7b:21:a8:bb:f0:0d:d9:ac:13:bc:
1b:89:73:c0:52:87:b4:bc:b3:79:fd:e5:d2:5c:61:
99:0b:bf:00:9f:f1:94:e7:30:15:fd:18:b4:8e:4c:
ea:e1:56:d5:23:1f:83:f7:c1:fc:bb:31:a4:ea:f4:
17:be:21:38:d3:7c:2d:52:12:3b:6a:85:0f:33:da:
9f:dd:aa:54:8e:88:dc:a6:7e:3b:47:ca:af:aa:07:
b5:58:19:f2:f1:a4:9d:7b:d6:01:33:37:0d:99:db:
5f:60:cf:81:01:92:6b:3f:d2:ec:b2:d9:21:e6:ac:
d7:6e:26:1a:d5:55:d3:26:5e:c1:80:ee:47:65:34:
33:1c:63:e4:e2:cd:e3:fe:2e:16:0d:12:03:c3:66:
a3:4a:75:26:b7:63:c7:94:5a:8d:e7:e5:68:05:7e:
63:93:32:45:72:d0:77:e8:c8:38:1f:19:35:cf:3b:
67:ca:f8:fd:56:1d:7b:19:5e:2d:1a:b1:fb:dc:df:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:A7:36:07:5B:C2:B7:E2:E0:68:32:E0:78:3D:5C:09:EE:B7:F7
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:7f:be:a3:bc:43:78:6a:2d:f4:fc:6e:89:fb:bd:da:03:
e2:76:8b:92:4b:6e:9e:10:da:1d:72:84:67:8b:d9:e8:50:b3:
b3:71:90:f0:4b:fc:e6:56:77:f4:10:ca:be:3b:0a:1a:77:73:
f0:d2:d3:d8:e9:85:1a:71:7a:e9:57:d0:57:fc:56:54:ce:f1:
50:83:00:a1:77:31:c5:bc:38:aa:45:5a:06:44:86:a8:b7:32:
64:79:25:66:09:30:6b:05:e5:e1:1e:79:7f:5e:7d:db:32:ae:
6b:5d:81:8b:7e:1d:09:88:39:85:ba:87:ed:77:f4:ef:52:9a:
cc:78:fa:98:43:52:f8:81:b0:11:28:db:58:bf:22:bc:50:7c:
64:10:c6:70:04:ed:56:a5:5a:3e:1b:fa:68:29:94:8e:c7:7d:
32:c2:19:bf:ea:d1:81:df:60:1b:c1:e4:70:20:6e:b5:57:94:
85:80:66:de:9d:bb:b8:be:f6:ef:3c:55:32:65:33:db:56:aa:
dc:fd:38:f6:19:cb:0b:12:76:8c:1c:b3:8c:df:68:de:61:04:
f1:1c:b2:1e:c9:07:26:92:76:c3:f8:89:b9:4b:48:f2:70:26:
76:e5:b2:d5:52:fc:fa:d8:a1:1a:9b:06:2a:71:0b:66:5b:22:
d5:da:8f:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgz2Ow4Uv8FD0iDiuddAtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWRhNmU1MmY4Nzc5NjBhOWUwZmJjOTNlNjgzZmU2NDg0
YTZiMDQwHhcNMjYwOTI3MDMwMTIyWhcNMjYwOTI4MDMwMTIyWjAzMTEwLwYDVQQD
EyhiNThjYTczNjA3NWJjMmI3ZTJlMDY4MzJlMDc4M2Q1YzA5ZWViN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT8gU5TzCltYF4t1WaVjtaMTrtFm
a1tB4d6Klb8mvvFCLq/P6qcibiU/K0f4NRb3ZBrAnENSmMP8I4lCZbcsBnshqLvw
DdmsE7wbiXPAUoe0vLN5/eXSXGGZC78An/GU5zAV/Ri0jkzq4VbVIx+D98H8uzGk
6vQXviE403wtUhI7aoUPM9qf3apUjojcpn47R8qvqge1WBny8aSde9YBMzcNmdtf
YM+BAZJrP9Lsstkh5qzXbiYa1VXTJl7BgO5HZTQzHGPk4s3j/i4WDRIDw2ajSnUm
t2PHlFqN5+VoBX5jkzJFctB36Mg4Hxk1zztnyvj9Vh17GV4tGrH73N8wJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWMpzYHW8K34uBoMuB4PVwJ7rf3MB8GA1UdIwQY
MBaAFMftpuUvh3lgqeD7yT5oP+ZISmsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDIt
ZTVmZDkxZDEzOTUwLzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDItZTVmZDkxZDEzOTUw
LzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmt/vqO8
Q3hqLfT8bon7vdoD4naLkktunhDaHXKEZ4vZ6FCzs3GQ8Ev85lZ39BDKvjsKGndz
8NLT2OmFGnF66VfQV/xWVM7xUIMAoXcxxbw4qkVaBkSGqLcyZHklZgkwawXl4R55
f1592zKua12Bi34dCYg5hbqH7Xf071KazHj6mENS+IGwESjbWL8ivFB8ZBDGcATt
VqVaPhv6aCmUjsd9MsIZv+rRgd9gG8HkcCButVeUhYBm3p27uL727zxVMmUz21aq
3P049hnLCxJ2jByzjN9o3mEE8RyyHskHJpJ2w/iJuUtI8nAmduWy1VL8+tihGpsG
KnELZlsi1dqPbg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:09:52 2026 by rpki-client