Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier: nD429zJvJhHwvDmo6GAr/1S2PkqbOXgqF5keHliCxS4=
Subject key identifier: 00:F9:91:F5:78:9A:8C:DF:50:50:7A:20:7E:8F:82:E7:0C:CC:14:BF
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 01A1DCF01E28378FC7A38363AADFC140EEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number: 1606
Signing time: Sun 15 Nov 2026 02:01:26 +0000
Manifest this update: Sun 15 Nov 2026 02:01:26 +0000
Manifest next update: Mon 16 Nov 2026 02:01:26 +0000
Files and hashes: 1: 46eH9Cj2ZoAvvZOdO1gLEixXty0.roa (hash: nutrSegvu5QxeGV6g/QuVOtrzFyb4Km/JeoI/dWaXRo=)
2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: vrQNCbyd1HFhPyqeYawXqE8A7mXol5hxVEvRqke8ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:1e:28:37:8f:c7:a3:83:63:aa:df:c1:40:ee:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Nov 15 02:01:26 2026 GMT
Not After : Nov 16 02:01:26 2026 GMT
Subject: CN=00f991f5789a8cdf50507a207e8f82e70ccc14bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:d0:fb:55:f9:9d:dc:58:b4:57:72:92:eb:
d8:73:db:f9:ac:1d:ff:00:33:ae:59:e2:fe:25:d0:
f2:1d:60:b8:22:3b:18:cc:d7:63:ed:38:48:d2:36:
8c:b9:29:37:a6:ac:94:0c:49:a3:32:ab:68:3f:85:
9b:bc:51:20:c7:a9:33:20:5a:91:7e:53:5f:17:0b:
a3:21:ed:75:82:6a:b3:0e:cc:38:77:36:3e:c4:4c:
17:65:50:81:ef:5e:ac:a6:12:4f:95:49:67:50:92:
af:de:b1:6f:06:03:ed:38:d5:22:8d:ea:37:84:a6:
0f:00:e7:7f:eb:da:fb:77:e4:64:77:4b:bc:7b:cb:
52:83:b0:87:95:a7:b0:b0:79:f1:0e:f4:11:cc:d9:
50:78:51:df:3f:84:89:e5:2d:90:ae:ff:e1:a9:24:
61:79:b8:41:3d:d4:03:2c:1b:c8:19:65:59:33:12:
53:4e:77:6a:66:12:95:d7:fd:e7:54:e2:7f:5b:23:
e0:b9:ef:f4:9e:00:b5:ea:f5:16:88:e8:c1:78:8e:
8f:87:a7:23:04:48:51:c6:19:00:a3:b4:85:6f:13:
8c:f3:1d:23:71:93:a6:e5:02:00:6c:58:aa:5d:d8:
ec:0e:3d:be:e0:e5:af:b3:a0:1b:96:d3:c4:43:01:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:91:F5:78:9A:8C:DF:50:50:7A:20:7E:8F:82:E7:0C:CC:14:BF
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:17:4e:61:3b:d2:df:e1:fd:4a:28:5f:7a:8b:16:36:41:aa:
ac:1f:31:ff:38:dd:cf:f1:48:1d:1d:8c:b1:bf:c7:05:26:13:
29:05:51:c4:e3:23:68:da:aa:95:5c:82:39:c0:67:f5:dc:9b:
b2:af:3e:49:85:71:db:e1:53:5d:0c:b3:49:9a:b2:24:28:4a:
a2:8a:57:23:6b:ca:54:80:2f:99:a6:7b:16:b4:24:1c:de:5b:
36:86:81:56:7b:e3:5a:2c:5e:a6:ec:23:be:e9:1a:e3:b7:f6:
a9:42:47:21:84:99:5d:ff:30:30:fa:6a:6d:0a:97:9a:3c:c8:
d0:7d:6d:70:38:db:c9:3b:78:73:98:74:57:8c:80:8e:54:55:
15:32:7b:a2:58:f4:b4:d3:ac:54:a1:94:17:58:76:df:c5:92:
18:b5:89:e2:0d:c3:62:3c:ba:0c:34:de:2b:6e:39:73:3a:a3:
46:df:a2:60:c6:09:55:54:8f:62:a7:55:cf:9c:90:ae:35:ec:
d2:ff:4f:fb:04:fd:a3:15:5d:63:95:b8:fa:9e:67:63:80:f5:
3b:13:fa:d7:f2:4d:c5:91:fe:7a:dc:11:13:c0:ed:11:e4:91:
6c:b9:4a:c8:83:46:5f:d0:bc:c7:2c:bd:ab:74:a1:49:af:58:
9b:71:05:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHc8B4oN4/Ho4Njqt/BQO6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzc0NDY3ZTIxODQ5NTI0OTQzZDJiZDQ1OTAxMDcyMGYz
ZTIwZTQwHhcNMjYxMTE1MDIwMTI2WhcNMjYxMTE2MDIwMTI2WjAzMTEwLwYDVQQD
EygwMGY5OTFmNTc4OWE4Y2RmNTA1MDdhMjA3ZThmODJlNzBjY2MxNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1bQ+1X5ndxYtFdykuvYc9v5rB3/
ADOuWeL+JdDyHWC4IjsYzNdj7ThI0jaMuSk3pqyUDEmjMqtoP4WbvFEgx6kzIFqR
flNfFwujIe11gmqzDsw4dzY+xEwXZVCB716sphJPlUlnUJKv3rFvBgPtONUijeo3
hKYPAOd/69r7d+Rkd0u8e8tSg7CHlaewsHnxDvQRzNlQeFHfP4SJ5S2Qrv/hqSRh
ebhBPdQDLBvIGWVZMxJTTndqZhKV1/3nVOJ/WyPgue/0ngC16vUWiOjBeI6Ph6cj
BEhRxhkAo7SFbxOM8x0jcZOm5QIAbFiqXdjsDj2+4OWvs6AbltPEQwGXsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD5kfV4mozfUFB6IH6PgucMzBS/MB8GA1UdIwQY
MBaAFF53RGfiGElSSUPSvUWQEHIPPiDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMt
YWE0MDA1MzJkYWViLzEvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMtYWE0MDA1MzJkYWVi
LzEvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxdOYTvS
3+H9SihfeosWNkGqrB8x/zjdz/FIHR2Msb/HBSYTKQVRxOMjaNqqlVyCOcBn9dyb
sq8+SYVx2+FTXQyzSZqyJChKoopXI2vKVIAvmaZ7FrQkHN5bNoaBVnvjWixepuwj
vuka47f2qUJHIYSZXf8wMPpqbQqXmjzI0H1tcDjbyTt4c5h0V4yAjlRVFTJ7olj0
tNOsVKGUF1h238WSGLWJ4g3DYjy6DDTeK245czqjRt+iYMYJVVSPYqdVz5yQrjXs
0v9P+wT9oxVdY5W4+p5nY4D1OxP61/JNxZH+etwRE8DtEeSRbLlKyINGX9C8xyy9
q3ShSa9Ym3EFgQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:34 2026 by rpki-client