Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier: pfVHiL/pTJDPQTprAe8+EVct+fIDpg8s/lURPJQfG0E=
Subject key identifier: 31:5A:23:1B:28:84:46:00:3F:76:F0:9E:3F:9A:3A:CB:10:C8:4D:16
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 01A0D45DBD3846A00369B2952ADBFB7192CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number: 157D
Signing time: Thu 24 Sep 2026 17:01:47 +0000
Manifest this update: Thu 24 Sep 2026 17:01:47 +0000
Manifest next update: Fri 25 Sep 2026 17:01:47 +0000
Files and hashes: 1: 46eH9Cj2ZoAvvZOdO1gLEixXty0.roa (hash: nutrSegvu5QxeGV6g/QuVOtrzFyb4Km/JeoI/dWaXRo=)
2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: K0wCnvTSoI9cxb17P4tJuiwotx2Npmi94HO/YA2QyZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:bd:38:46:a0:03:69:b2:95:2a:db:fb:71:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Sep 24 17:01:47 2026 GMT
Not After : Sep 25 17:01:47 2026 GMT
Subject: CN=315a231b288446003f76f09e3f9a3acb10c84d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:18:14:90:ca:44:fa:b0:e3:1f:04:d0:ee:
e1:68:21:99:cb:5e:2b:32:60:22:2b:8d:44:f6:e2:
82:81:48:b4:d1:71:71:a9:61:67:8a:10:0b:05:61:
04:a5:36:ca:4d:6a:9e:03:e5:16:b3:54:83:8f:01:
1d:42:1b:25:09:44:ad:44:a3:cf:24:27:ba:7c:6e:
7a:f8:b0:a2:b2:e8:91:d7:66:20:5b:04:19:1a:09:
89:38:a8:19:a8:2c:0f:fb:c7:55:11:29:36:01:da:
28:aa:8a:be:83:59:49:8a:a3:bc:4c:b9:52:60:a4:
30:ed:e4:da:ce:aa:da:e7:36:31:4c:4c:f7:cb:86:
0b:87:87:19:e1:76:56:13:c8:17:f7:6b:72:bc:04:
20:a1:b0:68:6a:24:a1:f9:e8:ab:ea:5f:ad:bc:5f:
82:90:96:f4:38:53:e6:d9:b9:0d:1b:8d:ef:a9:4e:
73:81:a7:92:bd:41:b7:a4:f8:b0:8c:0d:4a:27:1b:
b7:88:3e:ab:89:19:d7:d8:34:ae:18:00:4d:05:53:
01:ac:e6:ee:58:d8:98:e6:9e:c7:65:7d:37:a8:08:
a7:83:3e:4f:7a:16:2e:b7:1b:d7:9b:93:04:e7:fc:
78:43:7c:4f:46:9b:fe:79:6e:e2:ef:69:37:04:8f:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:23:1B:28:84:46:00:3F:76:F0:9E:3F:9A:3A:CB:10:C8:4D:16
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b5:8e:37:68:1a:67:ad:b7:0a:35:1b:09:b6:25:54:d6:07:
cf:2b:94:3a:c5:f8:4c:93:d3:19:bf:4b:48:b6:9a:14:1e:13:
e5:7e:5c:83:1f:ec:ea:6a:12:a7:ae:5d:38:c1:c1:f0:6b:ce:
7d:79:46:79:f3:e5:d3:97:d8:19:28:6a:a2:d9:6a:f2:f6:5c:
78:33:84:68:58:af:9f:dc:63:1d:11:57:03:75:3b:8c:96:b2:
cc:58:9a:51:18:5c:73:4e:29:b8:16:e8:cc:3e:34:31:2c:e0:
e5:d9:88:8e:54:cb:67:23:86:90:ab:ab:6c:4e:02:6a:a9:f5:
94:78:34:f7:eb:06:83:4e:0c:b9:de:25:ba:6e:6c:22:38:9e:
e2:08:d6:1c:40:c0:64:bc:19:c4:6e:7b:55:c9:eb:e7:11:47:
1c:28:58:9f:9b:84:ab:97:e2:de:6e:dc:43:14:1b:76:1c:d3:
04:86:b7:1f:39:23:bc:ad:dc:9a:e1:9c:cf:4b:81:b6:6f:8c:
15:87:29:45:40:82:18:56:bc:46:89:77:7d:5f:d5:00:f6:8e:
8c:16:c3:35:c8:9b:ed:0d:4b:e6:10:35:d5:2d:f1:2a:5c:82:
ec:db:98:3d:61:f7:31:0b:a3:3f:3a:ae:a0:1b:8d:40:bd:95:
03:3a:fc:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXb04RqADabKVKtv7cZLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzc0NDY3ZTIxODQ5NTI0OTQzZDJiZDQ1OTAxMDcyMGYz
ZTIwZTQwHhcNMjYwOTI0MTcwMTQ3WhcNMjYwOTI1MTcwMTQ3WjAzMTEwLwYDVQQD
EygzMTVhMjMxYjI4ODQ0NjAwM2Y3NmYwOWUzZjlhM2FjYjEwYzg0ZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBYYFJDKRPqw4x8E0O7haCGZy14r
MmAiK41E9uKCgUi00XFxqWFnihALBWEEpTbKTWqeA+UWs1SDjwEdQhslCUStRKPP
JCe6fG56+LCisuiR12YgWwQZGgmJOKgZqCwP+8dVESk2Adooqoq+g1lJiqO8TLlS
YKQw7eTazqra5zYxTEz3y4YLh4cZ4XZWE8gX92tyvAQgobBoaiSh+eir6l+tvF+C
kJb0OFPm2bkNG43vqU5zgaeSvUG3pPiwjA1KJxu3iD6riRnX2DSuGABNBVMBrObu
WNiY5p7HZX03qAingz5PehYutxvXm5ME5/x4Q3xPRpv+eW7i72k3BI/RawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFaIxsohEYAP3bwnj+aOssQyE0WMB8GA1UdIwQY
MBaAFF53RGfiGElSSUPSvUWQEHIPPiDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMt
YWE0MDA1MzJkYWViLzEvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMtYWE0MDA1MzJkYWVi
LzEvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbWON2ga
Z623CjUbCbYlVNYHzyuUOsX4TJPTGb9LSLaaFB4T5X5cgx/s6moSp65dOMHB8GvO
fXlGefPl05fYGShqotlq8vZceDOEaFivn9xjHRFXA3U7jJayzFiaURhcc04puBbo
zD40MSzg5dmIjlTLZyOGkKurbE4Caqn1lHg09+sGg04Mud4lum5sIjie4gjWHEDA
ZLwZxG57Vcnr5xFHHChYn5uEq5fi3m7cQxQbdhzTBIa3HzkjvK3cmuGcz0uBtm+M
FYcpRUCCGFa8Rol3fV/VAPaOjBbDNcib7Q1L5hA11S3xKlyC7NuYPWH3MQujPzqu
oBuNQL2VAzr87A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:07:41 2026 by rpki-client