Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: L5qeX01httssiUthnVIi/E0unOekr/Hl7xwbVTIScI0=
Subject key identifier: B5:C1:70:ED:61:7A:7D:BD:78:D1:39:20:8F:57:95:79:5F:B9:EC:78
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 01A100C8A92C59AE8A1E86B54570862A02D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 08:01:52 +0000
Manifest this update: Sat 03 Oct 2026 08:01:52 +0000
Manifest next update: Sun 04 Oct 2026 08:01:52 +0000
Files and hashes: 1: 9hnY7Mi-DWWNXT8zxPWlDMpFkVY.roa (hash: KmgeWMyp8Cb4dRrZsFfQDYyQitlhpxsyGtinqL7w4YI=)
2: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: nmM1Oef4zlsHHULr/RgovL5cc9ahD1LK4FTCTgMlVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c8:a9:2c:59:ae:8a:1e:86:b5:45:70:86:2a:02:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Oct 3 08:01:52 2026 GMT
Not After : Oct 4 08:01:52 2026 GMT
Subject: CN=b5c170ed617a7dbd78d139208f5795795fb9ec78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:7c:37:e0:e0:4e:7b:87:fe:b9:5c:a3:dc:
0c:78:db:51:9f:76:25:26:2f:e7:88:68:b9:2b:90:
09:d7:cf:8e:a1:30:1e:80:a2:d2:ca:ae:df:a4:cd:
cb:8a:eb:a3:79:80:98:76:69:4a:ff:44:7a:44:ea:
ce:e6:b0:9b:87:41:cc:b0:9d:03:b5:50:58:57:63:
b2:b0:5b:17:bb:ee:8b:95:7f:22:81:7f:9c:4a:5a:
e2:af:1b:46:2f:60:bf:d3:ca:1f:f6:4f:ed:2f:29:
26:23:4f:67:fd:c5:eb:ce:14:fc:9e:1b:b8:ba:f2:
bc:00:7e:4f:0f:33:e5:e0:85:0e:2d:bf:15:b9:65:
a0:17:6d:28:3f:bd:38:6c:89:2e:54:2c:e6:3e:b4:
ea:dc:36:b5:a0:7c:9b:64:c6:68:28:60:8a:b2:11:
e4:4c:91:cc:41:61:fc:36:b8:24:0d:6d:90:71:8c:
cd:8a:c9:7b:72:6d:1f:9c:9b:cf:84:b7:aa:36:8b:
08:d6:f6:ec:8a:bf:7c:0e:a0:60:84:17:c6:e1:9f:
b1:99:8e:f1:52:79:d3:d3:89:8d:5f:8c:3d:8a:6d:
20:23:3d:2e:f3:ce:63:2f:d2:19:43:bd:d3:b7:46:
61:84:09:6c:48:8e:1d:b8:5a:11:26:58:5e:93:b1:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:70:ED:61:7A:7D:BD:78:D1:39:20:8F:57:95:79:5F:B9:EC:78
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:21:3f:1c:d1:7d:25:67:ff:35:36:f7:6e:51:03:e3:ad:93:
af:d0:0e:85:d4:9a:a7:84:1b:3a:b3:26:82:e6:6f:c1:31:3e:
f6:36:ac:f9:7a:6f:d8:e4:80:34:32:a4:79:2c:ff:03:8d:ca:
54:57:2c:7a:01:7c:a5:1a:ee:fb:20:d8:de:fc:5f:c0:e1:eb:
37:6c:9a:31:72:8c:a8:48:c0:66:c2:d3:59:e0:13:e4:3e:36:
79:9f:e4:03:06:b3:68:83:10:70:33:49:ec:a7:80:60:99:ad:
6f:e8:84:1f:4c:88:1c:2c:7c:e4:30:09:28:70:3b:f8:f6:df:
09:09:5c:7e:05:dc:e0:46:e6:89:67:62:a3:77:20:43:2e:81:
0f:5a:a1:e7:84:3b:36:79:31:5f:ea:2e:8c:20:9f:0a:ba:32:
f3:5b:b5:73:aa:ec:2d:df:92:af:8f:e1:c2:99:5c:f6:ac:6f:
58:5b:a6:ac:51:8c:56:72:24:e0:27:02:6c:5c:c0:b3:1b:73:
b1:2b:4b:97:c0:93:de:fc:95:be:c3:c7:38:00:88:a8:a7:3c:
ab:53:9a:9c:ac:ad:e0:2c:8c:75:9f:49:bd:a1:6a:df:4e:de:
66:3c:d1:ac:54:79:bd:c0:a7:4b:72:bc:8d:c2:97:00:a0:5e:
b9:c7:9c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAyKksWa6KHoa1RXCGKgLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGMyOGE3NWFjOTY5NTFkYzM4NDAwYTgwZjllZjNhYWFm
MmFhY2IwHhcNMjYxMDAzMDgwMTUyWhcNMjYxMDA0MDgwMTUyWjAzMTEwLwYDVQQD
EyhiNWMxNzBlZDYxN2E3ZGJkNzhkMTM5MjA4ZjU3OTU3OTVmYjllYzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuZ8N+DgTnuH/rlco9wMeNtRn3Yl
Ji/niGi5K5AJ18+OoTAegKLSyq7fpM3LiuujeYCYdmlK/0R6ROrO5rCbh0HMsJ0D
tVBYV2OysFsXu+6LlX8igX+cSlrirxtGL2C/08of9k/tLykmI09n/cXrzhT8nhu4
uvK8AH5PDzPl4IUOLb8VuWWgF20oP704bIkuVCzmPrTq3Da1oHybZMZoKGCKshHk
TJHMQWH8NrgkDW2QcYzNisl7cm0fnJvPhLeqNosI1vbsir98DqBghBfG4Z+xmY7x
UnnT04mNX4w9im0gIz0u885jL9IZQ73Tt0ZhhAlsSI4duFoRJlhek7FvwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXBcO1hen29eNE5II9XlXlfuex4MB8GA1UdIwQY
MBaAFFxMKKdayWlR3DhACoD57zqq8qrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYt
NjdjNzYzMjAxODZhLzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYtNjdjNzYzMjAxODZh
LzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyE/HNF9
JWf/NTb3blED462Tr9AOhdSap4QbOrMmguZvwTE+9jas+Xpv2OSANDKkeSz/A43K
VFcsegF8pRru+yDY3vxfwOHrN2yaMXKMqEjAZsLTWeAT5D42eZ/kAwazaIMQcDNJ
7KeAYJmtb+iEH0yIHCx85DAJKHA7+PbfCQlcfgXc4EbmiWdio3cgQy6BD1qh54Q7
NnkxX+oujCCfCroy81u1c6rsLd+Sr4/hwplc9qxvWFumrFGMVnIk4CcCbFzAsxtz
sStLl8CT3vyVvsPHOACIqKc8q1OanKyt4CyMdZ9JvaFq307eZjzRrFR5vcCnS3K8
jcKXAKBeucecUQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:21:55 2026 by rpki-client