Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: C9JHkwrBil7OICSbcPLmRxFuun/EMCOZM8pmjxBBEHA=
Subject key identifier: 63:25:A8:6D:22:2A:3F:4D:7F:41:52:39:D0:7C:4B:D1:1A:06:ED:62
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 01A0E7AE633F5C63EEA1A16DDF3CE00D0A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 06D1
Signing time: Mon 28 Sep 2026 11:02:40 +0000
Manifest this update: Mon 28 Sep 2026 11:02:40 +0000
Manifest next update: Tue 29 Sep 2026 11:02:40 +0000
Files and hashes: 1: oQLrsym4iOz188XGqSxvS36V8uo.roa (hash: u+mDhRKGL7GwqgXaq7o6vxiOjSNYOhzMnEaoKa4qr0I=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: QFu/fHlvT5C5t5keRBqUaJDUbtpiEPpUpsWurQ3cBJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:63:3f:5c:63:ee:a1:a1:6d:df:3c:e0:0d:0a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Sep 28 11:02:40 2026 GMT
Not After : Sep 29 11:02:40 2026 GMT
Subject: CN=6325a86d222a3f4d7f415239d07c4bd11a06ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:18:b9:38:e3:0c:69:6b:a8:e7:01:71:64:
fc:62:c9:8d:8a:3c:ed:69:37:1d:f2:d4:10:cf:c5:
89:53:61:16:3b:1d:84:6e:97:6d:a0:f5:59:71:bd:
2b:fe:fe:88:6b:59:d5:e5:56:0a:81:6a:69:cd:3a:
d6:ab:2a:82:2f:55:2c:7a:87:5b:43:01:ca:c7:ab:
4a:c2:2e:19:bc:9b:ff:37:90:77:4a:4e:5e:ab:88:
bf:48:dd:f8:2e:60:2c:b1:b3:54:d9:dc:c2:4f:f5:
79:3e:b5:9a:ff:fc:e4:a6:b5:f4:c3:98:e3:22:59:
fd:3a:fd:d7:84:c8:2a:34:d9:f6:23:8e:07:e3:90:
ea:e2:f1:68:fa:2d:c2:9a:db:46:12:61:29:a6:0d:
40:99:3d:5c:41:82:15:6f:a9:b5:ce:6c:0b:25:7f:
ae:e9:de:68:48:94:71:a4:a0:92:47:93:56:22:bd:
85:11:65:da:db:11:b7:39:9e:61:d6:6c:19:64:30:
b5:07:95:ae:db:20:2a:3b:35:ca:7c:06:a2:6e:e5:
7b:b5:80:8d:66:e5:dd:4f:e5:0f:17:dd:d1:ed:76:
61:91:d2:bb:8a:47:d2:cb:2c:4a:12:28:c5:d1:04:
dd:16:44:4f:61:8a:5c:e3:37:ae:bf:a8:e1:ae:f7:
c0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:A8:6D:22:2A:3F:4D:7F:41:52:39:D0:7C:4B:D1:1A:06:ED:62
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ba:f1:a7:9d:96:f4:08:f4:c0:a9:bc:10:10:40:c9:f7:46:
7f:2a:14:7f:5d:29:55:3b:6f:6d:32:2f:fd:c5:3a:99:e7:ae:
49:6c:2e:64:14:2a:42:c3:2b:00:67:ad:74:91:be:53:f8:6b:
34:eb:14:8b:ae:d7:1b:35:7a:e5:22:0c:8b:05:50:85:e5:ee:
93:8c:ac:10:a8:f1:2a:95:d6:b1:0c:4c:c3:09:24:7f:24:04:
c8:ba:28:31:30:8d:e8:21:eb:ce:3e:01:38:c0:76:91:4e:56:
b2:f9:76:b5:ee:3a:c8:02:70:d9:9c:2f:a5:a9:34:58:89:12:
c2:85:a5:c3:8b:0e:b9:2a:30:d8:e0:e3:da:7b:f8:21:91:dc:
cf:c9:c7:69:10:90:16:2f:70:11:2b:a2:13:c3:c9:89:56:bc:
0e:e3:0f:3e:c0:e4:6b:b3:7d:a3:c9:d4:43:f6:ee:aa:36:51:
49:77:6f:d9:9a:c3:57:25:6d:f2:43:ff:5a:d7:e5:78:fb:2b:
51:3d:f4:93:5c:95:6b:68:be:27:3f:0b:2f:cf:37:70:61:36:
5e:9a:45:a2:4f:fa:0d:2b:9f:45:30:0b:46:92:7d:cf:2a:00:
d2:f9:da:c2:98:b3:7a:4b:7d:a5:1d:5d:93:fc:c3:d0:a2:8b:
8e:c9:86:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnrmM/XGPuoaFt3zzgDQqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NjYyZjk4MDIwZGE0ZTM3ZDUwZWQzYmIzMDIwMjc3NGYy
OTJkN2EwHhcNMjYwOTI4MTEwMjQwWhcNMjYwOTI5MTEwMjQwWjAzMTEwLwYDVQQD
Eyg2MzI1YTg2ZDIyMmEzZjRkN2Y0MTUyMzlkMDdjNGJkMTFhMDZlZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszAYuTjjDGlrqOcBcWT8YsmNijzt
aTcd8tQQz8WJU2EWOx2EbpdtoPVZcb0r/v6Ia1nV5VYKgWppzTrWqyqCL1Useodb
QwHKx6tKwi4ZvJv/N5B3Sk5eq4i/SN34LmAssbNU2dzCT/V5PrWa//zkprX0w5jj
Iln9Ov3XhMgqNNn2I44H45Dq4vFo+i3CmttGEmEppg1AmT1cQYIVb6m1zmwLJX+u
6d5oSJRxpKCSR5NWIr2FEWXa2xG3OZ5h1mwZZDC1B5Wu2yAqOzXKfAaibuV7tYCN
ZuXdT+UPF93R7XZhkdK7ikfSyyxKEijF0QTdFkRPYYpc4zeuv6jhrvfAGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMlqG0iKj9Nf0FSOdB8S9EaBu1iMB8GA1UdIwQY
MBaAFMVmL5gCDaTjfVDtO7MCAndPKS16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTIt
Zjg5OTc3YTQ1YjYwLzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTItZjg5OTc3YTQ1YjYw
LzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrrxp52W
9Aj0wKm8EBBAyfdGfyoUf10pVTtvbTIv/cU6meeuSWwuZBQqQsMrAGetdJG+U/hr
NOsUi67XGzV65SIMiwVQheXuk4ysEKjxKpXWsQxMwwkkfyQEyLooMTCN6CHrzj4B
OMB2kU5Wsvl2te46yAJw2Zwvpak0WIkSwoWlw4sOuSow2ODj2nv4IZHcz8nHaRCQ
Fi9wESuiE8PJiVa8DuMPPsDka7N9o8nUQ/buqjZRSXdv2ZrDVyVt8kP/WtflePsr
UT30k1yVa2i+Jz8LL883cGE2XppFok/6DSufRTALRpJ9zyoA0vnawpizekt9pR1d
k/zD0KKLjsmGew==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:46:13 2026 by rpki-client