Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: Pkk4klZ94B9bgqxOuPcbcYKd6HhwD0EwLoumC8Sv3/0=
Subject key identifier: 45:C9:D3:82:1A:52:00:CC:A2:E6:B9:56:AA:C0:CC:0E:94:E5:3E:C2
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 01A128E8A0B0B431EF5ECB426150BC4883B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 16D1
Signing time: Sun 11 Oct 2026 03:01:36 +0000
Manifest this update: Sun 11 Oct 2026 03:01:36 +0000
Manifest next update: Mon 12 Oct 2026 03:01:36 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: PGUARfOY0z0cF1LWDc1JR57ffAOXOQ4JoMRi24do3es=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:a0:b0:b4:31:ef:5e:cb:42:61:50:bc:48:83:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Oct 11 03:01:36 2026 GMT
Not After : Oct 12 03:01:36 2026 GMT
Subject: CN=45c9d3821a5200cca2e6b956aac0cc0e94e53ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:53:c9:08:3e:ec:db:cb:87:07:ba:f2:a8:
77:6c:f9:d8:c5:3a:a9:c6:82:1a:10:04:fb:62:ce:
96:6c:0f:4d:ef:4b:50:02:e6:ec:ca:cd:a3:47:72:
fd:be:64:84:71:f4:69:39:61:9a:ca:88:48:54:42:
5d:77:2d:92:9b:23:3b:cc:ed:ed:a9:14:b7:72:94:
12:fc:06:54:0c:eb:e4:ee:ae:f1:35:33:56:da:b4:
83:dc:53:5f:df:91:48:81:86:ce:2e:69:1b:ac:81:
c9:14:b5:57:a0:2b:94:70:73:ff:92:ab:57:f1:0f:
86:60:33:7c:da:7b:b1:33:b3:a1:35:9a:fa:c4:60:
69:f7:37:f9:4e:47:5d:20:49:2b:e5:ec:13:c8:ec:
8b:7d:06:ab:1f:69:fd:cc:c5:88:68:4c:bf:49:90:
e5:c1:73:5b:67:1c:b2:6a:81:9a:49:84:95:9a:cd:
0c:fc:99:1d:e4:ec:c8:aa:8f:e1:56:f9:1b:4e:7b:
72:9d:0c:63:2f:45:37:d4:ed:1c:e0:b3:6f:d7:94:
02:2b:c7:ae:35:a0:2d:8d:f0:23:90:a8:e7:61:34:
03:01:10:01:fb:f3:fb:3e:2b:21:eb:c0:08:7b:8d:
c2:80:aa:9a:fe:db:15:b5:f2:5a:f3:55:f9:a5:33:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:D3:82:1A:52:00:CC:A2:E6:B9:56:AA:C0:CC:0E:94:E5:3E:C2
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1b:74:74:26:87:13:60:ab:fb:dc:ab:37:77:bb:37:44:bd:
38:06:d0:88:2b:68:c2:e7:74:9b:91:4f:5d:a0:0c:9c:0c:7b:
72:36:f8:d3:58:04:88:80:32:12:55:f9:08:68:24:57:c9:d4:
e6:70:7f:48:22:65:27:00:eb:48:c0:45:30:d9:ac:be:69:81:
55:5f:d1:65:82:31:5a:e6:e6:f4:b7:ff:03:f6:e9:73:a1:3f:
57:05:5b:3b:1e:7b:7b:79:69:85:92:37:a7:4e:12:77:aa:89:
77:e0:b4:03:97:d9:4c:4d:c7:af:b8:d7:f9:67:05:54:b4:25:
25:b6:29:2c:37:b4:a1:fe:c8:11:f5:35:f1:d2:60:25:0d:c3:
21:40:3c:4d:fa:a7:77:4a:3e:cb:a0:2b:c2:89:52:75:b6:3f:
41:fd:e5:65:74:70:aa:0c:cf:fa:85:4b:06:b4:9d:a1:26:2a:
00:8b:2e:d4:72:ae:30:b2:2e:0d:54:5e:48:d4:82:e1:3f:09:
16:25:ef:44:be:fb:26:ab:2c:bf:b2:2f:21:d9:30:5b:58:2f:
2c:6e:31:0e:55:a8:dc:e5:e8:76:9e:3f:22:12:d6:50:7c:84:
24:85:81:e9:ba:5d:5f:d0:19:68:66:6e:94:f1:d7:4e:8a:2b:
cf:43:ca:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEo6KCwtDHvXstCYVC8SIO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi
MDJhMzcwHhcNMjYxMDExMDMwMTM2WhcNMjYxMDEyMDMwMTM2WjAzMTEwLwYDVQQD
Eyg0NWM5ZDM4MjFhNTIwMGNjYTJlNmI5NTZhYWMwY2MwZTk0ZTUzZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXlTyQg+7NvLhwe68qh3bPnYxTqp
xoIaEAT7Ys6WbA9N70tQAubsys2jR3L9vmSEcfRpOWGayohIVEJddy2SmyM7zO3t
qRS3cpQS/AZUDOvk7q7xNTNW2rSD3FNf35FIgYbOLmkbrIHJFLVXoCuUcHP/kqtX
8Q+GYDN82nuxM7OhNZr6xGBp9zf5TkddIEkr5ewTyOyLfQarH2n9zMWIaEy/SZDl
wXNbZxyyaoGaSYSVms0M/Jkd5OzIqo/hVvkbTntynQxjL0U31O0c4LNv15QCK8eu
NaAtjfAjkKjnYTQDARAB+/P7Pish68AIe43CgKqa/tsVtfJa81X5pTPKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXJ04IaUgDMoua5VqrAzA6U5T7CMB8GA1UdIwQY
MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt
YjVmMGQyMTA1M2Y4LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4
LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRt0dCaH
E2Cr+9yrN3e7N0S9OAbQiCtowud0m5FPXaAMnAx7cjb401gEiIAyElX5CGgkV8nU
5nB/SCJlJwDrSMBFMNmsvmmBVV/RZYIxWubm9Lf/A/bpc6E/VwVbOx57e3lphZI3
p04Sd6qJd+C0A5fZTE3Hr7jX+WcFVLQlJbYpLDe0of7IEfU18dJgJQ3DIUA8Tfqn
d0o+y6ArwolSdbY/Qf3lZXRwqgzP+oVLBrSdoSYqAIsu1HKuMLIuDVReSNSC4T8J
FiXvRL77Jqssv7IvIdkwW1gvLG4xDlWo3OXodp4/IhLWUHyEJIWB6bpdX9AZaGZu
lPHXToorz0PKqw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:06:22 2026 by rpki-client