Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: np2+TnUW2CB+1mXCBlD/mEjVhiK6UJ5zpDOe6uD6N0c=
Subject key identifier: 83:F5:39:33:46:A3:4E:78:FA:BD:0E:2C:A9:8D:ED:D2:DD:8F:08:C6
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 019FAB9A7E677AD4EBF363E9C199D0981EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 02F2
Signing time: Wed 29 Jul 2026 02:00:56 +0000
Manifest this update: Wed 29 Jul 2026 02:00:56 +0000
Manifest next update: Thu 30 Jul 2026 02:00:56 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: y5fpxeKfQuEBmmeYLYZFmfmOr8/iCk85OzrxSm+w51U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:7e:67:7a:d4:eb:f3:63:e9:c1:99:d0:98:1e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Jul 29 02:00:56 2026 GMT
Not After : Jul 30 02:00:56 2026 GMT
Subject: CN=83f5393346a34e78fabd0e2ca98dedd2dd8f08c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:1c:cc:91:c6:be:5c:a4:55:78:78:53:c1:
19:bc:aa:6e:4a:c7:d9:b1:27:61:27:ef:39:0a:27:
1d:43:73:fb:e2:c2:1e:85:bf:19:84:b9:7f:5c:66:
f9:de:17:93:e3:59:2e:56:eb:b2:3c:61:bb:f8:88:
a0:c8:c4:bf:72:d6:6b:8d:72:d5:c8:74:39:50:54:
65:37:0a:bf:d4:35:97:36:1e:56:8c:9f:06:65:b5:
64:4f:b2:bd:ba:55:73:34:69:21:44:51:bd:f9:f8:
5a:ca:e1:3a:84:86:5a:22:9d:f1:5b:36:25:14:cd:
2e:de:ad:fb:34:52:fd:0a:d5:1d:bd:d1:ab:de:ca:
f0:bd:21:1b:51:66:83:cb:10:42:5a:21:f3:22:47:
13:ca:8d:28:e5:d7:1a:ef:d3:d8:a9:e0:75:76:c8:
4b:70:82:c0:dc:3f:34:c1:8b:7d:52:47:9b:69:0f:
cd:c2:22:83:46:36:59:1b:ce:31:db:0c:08:ab:7b:
bb:25:e0:19:8b:e3:24:29:18:86:6d:11:a0:32:f3:
0d:46:7c:1b:9f:72:e8:b2:10:c3:58:8e:53:6f:d8:
63:f3:25:71:56:c0:6e:46:6e:41:da:06:c3:b3:ce:
9d:ae:b3:26:c9:e3:9b:85:4a:f9:53:da:52:79:bc:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:39:33:46:A3:4E:78:FA:BD:0E:2C:A9:8D:ED:D2:DD:8F:08:C6
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9b:a3:47:8e:fe:40:a5:7c:13:92:37:72:92:18:5e:0c:93:
29:4e:cf:c0:95:c2:a5:cd:73:df:a6:e0:ba:0d:8d:f8:7e:85:
34:b8:8a:11:21:85:5b:fa:bd:e3:50:d0:9c:9c:e9:84:39:78:
a5:c5:c8:cb:99:b2:28:fb:87:da:c7:dc:b6:56:9b:a3:bf:23:
1c:16:0c:92:6a:e0:94:e5:e2:21:eb:9f:8d:94:85:13:55:48:
d6:f2:c5:d1:cb:ac:a6:a8:8f:fb:cc:05:28:34:96:25:00:81:
5e:77:64:3c:e7:d0:4e:06:ac:73:fb:7d:f8:6d:8f:bf:20:f9:
2d:4b:27:28:e9:e3:24:51:25:ae:b3:cd:01:f2:0e:36:4d:e9:
5c:4a:ce:bd:8a:ef:35:79:87:71:79:8f:f6:eb:33:44:af:d2:
92:06:d1:92:5c:d6:a7:d8:0f:96:ac:14:27:bf:b3:0a:b3:d2:
d6:73:91:d5:c6:7b:24:e6:b1:9f:53:9d:c0:f4:e6:03:0c:ee:
40:c0:80:07:5f:70:46:47:72:c9:cc:03:a4:a1:4a:6d:ac:b3:
77:76:37:97:42:56:e8:0e:77:03:cf:e8:64:d3:87:7f:ee:42:
ab:ff:3f:4d:bb:d6:19:eb:c4:15:5e:2e:50:09:d3:69:c6:96:
9d:53:15:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmn5netTr82PpwZnQmB7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MWYzOTFkNjBlMWExMzljY2M0MmIxN2EzMmE5NTM2M2Rm
NWNmYjAwHhcNMjYwNzI5MDIwMDU2WhcNMjYwNzMwMDIwMDU2WjAzMTEwLwYDVQQD
Eyg4M2Y1MzkzMzQ2YTM0ZTc4ZmFiZDBlMmNhOThkZWRkMmRkOGYwOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvoczJHGvlykVXh4U8EZvKpuSsfZ
sSdhJ+85CicdQ3P74sIehb8ZhLl/XGb53heT41kuVuuyPGG7+IigyMS/ctZrjXLV
yHQ5UFRlNwq/1DWXNh5WjJ8GZbVkT7K9ulVzNGkhRFG9+fhayuE6hIZaIp3xWzYl
FM0u3q37NFL9CtUdvdGr3srwvSEbUWaDyxBCWiHzIkcTyo0o5dca79PYqeB1dshL
cILA3D80wYt9UkebaQ/NwiKDRjZZG84x2wwIq3u7JeAZi+MkKRiGbRGgMvMNRnwb
n3LoshDDWI5Tb9hj8yVxVsBuRm5B2gbDs86drrMmyeObhUr5U9pSebyu8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP1OTNGo054+r0OLKmN7dLdjwjGMB8GA1UdIwQY
MBaAFMcfOR1g4aE5zMQrF6MqlTY99c+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAt
NjU0MWNjMDA2ZWFjLzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAtNjU0MWNjMDA2ZWFj
LzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpujR47+
QKV8E5I3cpIYXgyTKU7PwJXCpc1z36bgug2N+H6FNLiKESGFW/q941DQnJzphDl4
pcXIy5myKPuH2sfctlabo78jHBYMkmrglOXiIeufjZSFE1VI1vLF0cuspqiP+8wF
KDSWJQCBXndkPOfQTgasc/t9+G2PvyD5LUsnKOnjJFElrrPNAfIONk3pXErOvYrv
NXmHcXmP9uszRK/SkgbRklzWp9gPlqwUJ7+zCrPS1nOR1cZ7JOaxn1OdwPTmAwzu
QMCAB19wRkdyycwDpKFKbayzd3Y3l0JW6A53A8/oZNOHf+5Cq/8/TbvWGevEFV4u
UAnTacaWnVMVqQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:12 2026 by rpki-client