Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: YmGEcQS4OT7UTici019KSP2GWP/spHF1WXl9x6dYO54=
Subject key identifier: D9:E5:2E:1C:4E:F2:06:1D:AE:A1:AA:F6:23:AA:64:1C:EF:F5:FF:81
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 01A11AF50E4760823897F53DC60DF35A0DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 15CA
Signing time: Thu 08 Oct 2026 10:00:29 +0000
Manifest this update: Thu 08 Oct 2026 10:00:29 +0000
Manifest next update: Fri 09 Oct 2026 10:00:29 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: Vv+3VsUFg6YNuFEHKTHSpQxru7fZBQoCxPVJzQDYlgk=)
5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:0e:47:60:82:38:97:f5:3d:c6:0d:f3:5a:0d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Oct 8 10:00:29 2026 GMT
Not After : Oct 9 10:00:29 2026 GMT
Subject: CN=d9e52e1c4ef2061daea1aaf623aa641ceff5ff81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:2f:4d:f1:14:3a:89:9a:47:75:fb:92:3d:
1c:63:f0:9b:6e:ee:c0:63:18:c0:62:a9:f1:09:9e:
cd:18:7b:38:60:e7:83:76:f6:bc:c3:b3:97:18:c7:
58:47:45:50:99:ab:67:a3:c9:41:0f:08:6d:9b:e1:
eb:23:27:c5:74:0a:3e:31:78:e7:0c:70:63:e7:8e:
3d:94:62:fb:b5:c2:b1:80:64:aa:9e:70:4a:b9:2a:
00:d6:db:40:3a:e0:c9:43:86:30:a2:8d:c1:46:44:
be:e8:d5:ce:5a:29:b6:ac:84:12:57:60:eb:5d:d4:
f2:3f:61:c0:09:5b:4e:27:67:57:9d:dc:b3:0f:f3:
24:c8:f4:44:05:87:75:05:17:7e:55:3d:89:6b:41:
e8:00:b3:2e:17:1a:31:6b:55:da:14:cc:5e:43:e9:
29:fb:26:60:51:4d:26:65:c3:48:59:2c:72:a7:8d:
45:af:32:9c:15:d7:b4:8c:19:2c:58:08:a9:fa:1c:
e5:2d:4d:e0:44:d8:83:58:bb:34:b5:33:34:f7:87:
ee:d9:ad:dd:53:3e:67:df:00:ed:93:d5:95:13:32:
b2:b7:db:60:47:c8:33:98:d6:55:4d:6b:88:32:6d:
a2:df:0b:a2:0d:78:52:10:e7:e3:3c:8b:c6:4d:bb:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:2E:1C:4E:F2:06:1D:AE:A1:AA:F6:23:AA:64:1C:EF:F5:FF:81
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cc:6b:2e:3e:9b:73:4f:3b:c9:87:29:08:a5:95:d3:c6:0e:
84:10:c4:c8:28:5e:04:fe:a9:e2:61:3c:02:ab:4c:da:79:58:
8a:3f:ee:b2:ea:27:80:89:70:43:c6:6e:9c:e7:f4:98:39:5e:
84:80:e0:b6:91:37:59:aa:5a:cb:2f:66:a3:d0:f3:94:0e:46:
0c:01:16:f1:79:42:ce:84:95:da:99:e1:59:d2:d3:eb:14:81:
b5:fd:bf:02:db:52:62:d5:06:49:21:fd:27:38:3f:da:87:21:
7e:43:7f:4d:1b:8e:64:d7:5a:85:1f:2f:96:60:d5:58:37:db:
64:b3:c0:12:81:d5:77:3c:82:ae:fe:dd:cf:e3:90:36:29:56:
e3:ff:bc:94:34:04:5a:0f:51:85:e8:42:a8:84:d8:6c:6f:1b:
49:cb:88:49:a5:2f:a6:83:34:35:c5:6d:96:c1:55:b9:03:f0:
03:68:40:46:99:e4:fc:3c:ce:f7:cb:7e:04:47:38:b1:f5:a3:
a8:33:e5:66:ce:01:83:93:9a:4e:fc:55:44:f8:d7:07:c8:e7:
9e:17:cd:8f:c8:df:3b:06:de:98:e2:6f:4f:31:3d:7a:58:12:
7a:ec:7b:e6:70:f7:ee:c5:97:03:30:b3:8e:f6:53:48:2a:77:
e2:16:10:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9Q5HYII4l/U9xg3zWg3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl
NWNmOTYwHhcNMjYxMDA4MTAwMDI5WhcNMjYxMDA5MTAwMDI5WjAzMTEwLwYDVQQD
EyhkOWU1MmUxYzRlZjIwNjFkYWVhMWFhZjYyM2FhNjQxY2VmZjVmZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cIvTfEUOomaR3X7kj0cY/Cbbu7A
YxjAYqnxCZ7NGHs4YOeDdva8w7OXGMdYR0VQmatno8lBDwhtm+HrIyfFdAo+MXjn
DHBj5449lGL7tcKxgGSqnnBKuSoA1ttAOuDJQ4Ywoo3BRkS+6NXOWim2rIQSV2Dr
XdTyP2HACVtOJ2dXndyzD/MkyPREBYd1BRd+VT2Ja0HoALMuFxoxa1XaFMxeQ+kp
+yZgUU0mZcNIWSxyp41FrzKcFde0jBksWAip+hzlLU3gRNiDWLs0tTM094fu2a3d
Uz5n3wDtk9WVEzKyt9tgR8gzmNZVTWuIMm2i3wuiDXhSEOfjPIvGTbvRfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnlLhxO8gYdrqGq9iOqZBzv9f+BMB8GA1UdIwQY
MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt
NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx
LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcxrLj6b
c087yYcpCKWV08YOhBDEyCheBP6p4mE8AqtM2nlYij/usuongIlwQ8ZunOf0mDle
hIDgtpE3Wapayy9mo9DzlA5GDAEW8XlCzoSV2pnhWdLT6xSBtf2/AttSYtUGSSH9
Jzg/2ochfkN/TRuOZNdahR8vlmDVWDfbZLPAEoHVdzyCrv7dz+OQNilW4/+8lDQE
Wg9RhehCqITYbG8bScuISaUvpoM0NcVtlsFVuQPwA2hARpnk/DzO98t+BEc4sfWj
qDPlZs4Bg5OaTvxVRPjXB8jnnhfNj8jfOwbemOJvTzE9elgSeux75nD37sWXAzCz
jvZTSCp34hYQPA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:49:03 2026 by rpki-client