Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: 1GrItRFFPeFaBSXg5vYsh/nEiKhUjizQTOdlE7/yZdo=
Subject key identifier: 2E:E7:26:79:1D:A2:6D:CE:57:AE:AC:AB:AC:BB:A8:65:45:C4:11:B7
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01A0D983A0ED5D41F371AA30E954D765BC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1A7B
Signing time: Fri 25 Sep 2026 17:01:17 +0000
Manifest this update: Fri 25 Sep 2026 17:01:17 +0000
Manifest next update: Sat 26 Sep 2026 17:01:17 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: lOVdN+gSy294QJbtIXwQFrTqtrveGtJn1myj3QzRgWQ=)
3: dNdisfulIUnUQz_6DtHf4gSxOPM.roa (hash: O/ns0/vObEAUXbqvm9Js2Oj4M7X/gux1gfco1hQ75Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:a0:ed:5d:41:f3:71:aa:30:e9:54:d7:65:bc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Sep 25 17:01:17 2026 GMT
Not After : Sep 26 17:01:17 2026 GMT
Subject: CN=2ee726791da26dce57aeacabacbba86545c411b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:04:dd:25:30:9f:07:78:8c:62:92:f1:f4:
40:bc:bb:65:91:77:bf:14:42:d3:1e:ef:5e:c4:60:
a3:9c:96:32:6f:9d:61:13:23:88:a1:51:33:aa:20:
b3:0b:40:bd:d6:92:04:32:cc:a8:ea:89:52:08:a0:
17:4e:ca:69:93:46:a0:c1:19:42:3f:c7:3e:a3:33:
7c:93:d2:bf:53:b1:8e:84:e6:6d:65:46:c7:ef:54:
05:b2:86:b2:eb:6a:1f:c1:63:f4:fc:c2:26:be:0c:
4e:de:d8:9a:fa:2b:85:16:f3:b0:28:7a:ed:4e:d7:
c1:4c:0a:d5:e1:94:e9:f7:e9:59:2b:7d:7a:66:73:
8c:45:b5:1a:f5:58:89:c9:3e:83:47:96:dd:3a:fb:
a9:da:56:06:e2:73:97:5e:64:56:9e:be:73:68:43:
f5:17:5d:24:fa:cd:82:a0:16:56:bf:76:83:6c:3e:
aa:8b:2e:87:35:86:d2:8a:83:36:33:66:94:ad:6c:
11:70:be:3a:63:26:59:1a:ed:ba:30:71:3b:5b:8b:
53:80:0a:7e:77:c0:ea:a4:dd:85:4a:3e:3a:0b:3d:
18:50:28:42:2e:c0:81:3f:45:69:e1:7d:fd:9c:53:
ff:8d:1c:1d:db:72:ae:cd:82:6f:6d:6f:eb:c6:03:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:26:79:1D:A2:6D:CE:57:AE:AC:AB:AC:BB:A8:65:45:C4:11:B7
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f7:e9:9e:da:1a:7a:06:ea:83:46:6b:f6:9d:57:e5:04:16:
9d:69:9d:8e:5d:da:55:f5:3a:21:66:1f:3e:36:d5:18:1f:ad:
a3:d1:34:40:9f:49:ba:32:45:aa:12:6e:c3:7e:10:52:34:e2:
4b:f3:e2:2a:f3:80:51:54:0a:b0:a4:53:b8:f6:57:7d:7b:66:
a4:e7:56:52:0b:49:4f:d0:a8:89:87:da:a1:87:84:4d:24:a4:
de:15:06:97:db:17:39:aa:93:aa:a2:9e:5c:43:a8:cb:f9:6a:
8f:cc:8a:27:9a:cb:30:03:e2:65:e4:fc:63:ea:4a:ce:47:ce:
de:f4:50:fe:59:24:cb:6e:d8:de:02:a7:04:d8:16:f4:03:82:
d3:86:e3:c3:c7:98:06:97:03:6f:b7:cb:6c:b9:43:8b:c7:29:
d3:9c:69:df:9e:cc:50:25:86:73:41:a9:a7:84:b5:bb:34:08:
d9:7d:27:9d:a9:6d:95:89:b2:ea:6c:53:a0:96:32:59:26:a2:
eb:9e:e8:7a:4e:da:3a:79:6c:22:4c:a9:12:80:40:13:0a:6f:
dc:3b:0a:dd:20:3f:14:c0:3c:a8:79:de:80:f1:a5:a9:bd:d3:
25:3f:70:a9:5d:b1:5d:57:5f:6b:53:6d:f0:01:91:45:02:a2:
3d:b7:25:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg6DtXUHzcaow6VTXZbw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjYwOTI1MTcwMTE3WhcNMjYwOTI2MTcwMTE3WjAzMTEwLwYDVQQD
EygyZWU3MjY3OTFkYTI2ZGNlNTdhZWFjYWJhY2JiYTg2NTQ1YzQxMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme8E3SUwnwd4jGKS8fRAvLtlkXe/
FELTHu9exGCjnJYyb51hEyOIoVEzqiCzC0C91pIEMsyo6olSCKAXTsppk0agwRlC
P8c+ozN8k9K/U7GOhOZtZUbH71QFsoay62ofwWP0/MImvgxO3tia+iuFFvOwKHrt
TtfBTArV4ZTp9+lZK316ZnOMRbUa9ViJyT6DR5bdOvup2lYG4nOXXmRWnr5zaEP1
F10k+s2CoBZWv3aDbD6qiy6HNYbSioM2M2aUrWwRcL46YyZZGu26MHE7W4tTgAp+
d8DqpN2FSj46Cz0YUChCLsCBP0Vp4X39nFP/jRwd23KuzYJvbW/rxgPRMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7nJnkdom3OV66sq6y7qGVFxBG3MB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvfpntoa
egbqg0Zr9p1X5QQWnWmdjl3aVfU6IWYfPjbVGB+to9E0QJ9JujJFqhJuw34QUjTi
S/PiKvOAUVQKsKRTuPZXfXtmpOdWUgtJT9CoiYfaoYeETSSk3hUGl9sXOaqTqqKe
XEOoy/lqj8yKJ5rLMAPiZeT8Y+pKzkfO3vRQ/lkky27Y3gKnBNgW9AOC04bjw8eY
BpcDb7fLbLlDi8cp05xp357MUCWGc0Gpp4S1uzQI2X0nnaltlYmy6mxToJYyWSai
657oek7aOnlsIkypEoBAEwpv3DsK3SA/FMA8qHnegPGlqb3TJT9wqV2xXVdfa1Nt
8AGRRQKiPbcloA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:10 2026 by rpki-client