Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: yBF6QAds0ALFZ0Wka0jnoZ1IMzgxBbKQaVOspdCR6cE=
Subject key identifier: 2B:D3:E9:90:13:85:A4:A9:76:AC:F6:35:19:C6:F8:C8:56:9B:EA:40
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 01A1DE39B183E11AE6E70FF88D6C7A7FDE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 08:01:25 +0000
Manifest this update: Sun 15 Nov 2026 08:01:25 +0000
Manifest next update: Mon 16 Nov 2026 08:01:25 +0000
Files and hashes: 1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
2: PQFHhglqtcFEFN0zXrd66FRNn2c.roa (hash: UrYnODwnEvY5/u5NDLBTYWkNOxtCx+Fpql4otdo2Y88=)
3: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
4: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: NxQNtwtLsfOc5hKKn53ibz+sBdOaBWNo5suG6kHxMFQ=)
5: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:b1:83:e1:1a:e6:e7:0f:f8:8d:6c:7a:7f:de:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Nov 15 08:01:25 2026 GMT
Not After : Nov 16 08:01:25 2026 GMT
Subject: CN=2bd3e9901385a4a976acf63519c6f8c8569bea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:89:a9:0b:4e:50:20:73:d3:36:0a:ea:4d:
9f:b9:b1:1d:b9:76:38:3c:46:77:55:92:e9:c0:c3:
fc:2a:15:06:71:56:b8:d4:1f:69:fb:e8:b8:10:4e:
37:f4:4a:e4:5d:75:2c:a7:4c:4e:55:eb:e7:bb:28:
1a:a3:c7:be:11:e0:e9:16:e5:2e:01:aa:1b:b9:77:
09:e5:89:58:85:69:73:e8:37:5f:c6:bc:b1:7c:38:
c3:aa:51:7e:28:a5:44:c6:d4:2a:3b:61:d3:67:4d:
e8:fa:b7:bb:fe:86:6b:f0:82:fa:aa:c0:83:10:e7:
1e:fa:ed:4d:78:a1:12:2e:f1:b8:a6:97:7b:98:10:
5d:39:11:5e:6f:3a:0f:3a:ec:d6:51:27:2c:c4:5e:
90:a5:9d:9b:b1:a4:e7:7c:11:78:28:15:e3:d4:3d:
08:05:e3:44:14:4a:60:a1:5a:0a:f8:b0:7f:46:6f:
2d:85:68:eb:9e:35:b4:e8:c9:32:a7:24:f1:99:6e:
ad:b9:f6:fe:34:bd:a8:61:96:7e:8c:bc:a4:cc:90:
5a:05:dd:c6:8b:ff:03:25:2b:5b:fc:fc:2d:ff:d9:
ef:43:7e:68:6a:22:57:ec:b7:90:54:e4:c5:6a:3f:
73:e6:8e:59:a2:7b:11:b7:12:15:37:ee:7f:5e:09:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:E9:90:13:85:A4:A9:76:AC:F6:35:19:C6:F8:C8:56:9B:EA:40
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ea:f8:65:28:59:ff:48:2d:a6:2c:13:0b:92:a9:ae:92:58:
4a:03:f7:2f:99:e7:80:8d:59:bf:c2:8d:ed:e6:65:73:43:ca:
3e:f8:2c:3a:ae:80:40:49:3e:ab:3d:94:ce:75:90:65:99:d9:
4b:d3:0f:69:e5:79:38:f0:a2:50:ea:b4:2f:c8:80:39:26:3b:
4e:69:76:cf:3d:4c:2a:f3:09:06:a3:20:58:13:97:9b:b5:34:
1b:38:d0:b7:77:48:f8:ad:79:8a:96:a8:07:da:68:7d:6d:e0:
a6:de:02:1d:16:d3:0e:e7:dc:7a:05:36:9a:82:78:c1:b0:d9:
2d:4f:3c:ad:9d:57:75:55:1d:85:32:f4:c5:36:cf:71:07:07:
59:18:e8:3c:d9:8b:16:dd:bf:b5:9a:cc:a2:64:9d:63:3d:f4:
53:72:f9:ae:c0:21:04:ed:5e:d8:a3:50:7f:46:5a:ae:dc:ba:
7a:49:16:b3:77:17:b2:bd:12:38:cb:c4:69:21:e2:81:b5:25:
e0:3f:66:85:51:67:2e:cb:7b:4b:22:e9:f8:bd:df:01:89:45:
19:9d:60:0f:1c:7a:a7:2a:b1:ff:e2:5c:3c:31:a0:71:61:0e:
bc:45:c7:72:b2:ef:3c:f1:99:6c:9a:4b:3b:12:1d:c7:d4:9f:
b0:13:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:45:57 2026 by rpki-client