Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
File: XLOiFF-bTUZgWCrca3NUlp4InKk.mft (raw, json)
Hash identifier: hk93rFwGo4Hw4/6yu8f//kjkSL1m6YeaY5ELLfw2Gt0=
Subject key identifier: DF:C7:80:41:E7:74:BD:84:03:38:60:B0:98:34:A4:44:7E:80:B9:5B
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial: 01A1DB700B5C9B9BB69570CC2AC25C6F0494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
Manifest number: 12A6
Signing time: Sat 14 Nov 2026 19:01:55 +0000
Manifest this update: Sat 14 Nov 2026 19:01:55 +0000
Manifest next update: Sun 15 Nov 2026 19:01:55 +0000
Files and hashes: 1: 2Nc5AsSnBWzCuxjbHnI5SDdmCKE.roa (hash: IY9E1+Z/A+D4/xzAfwUZ6RBDyrzbb4T4cIqPhChpPt8=)
2: XLOiFF-bTUZgWCrca3NUlp4InKk.crl (hash: tia9xOJkddH+aE+BFRvnm4BL1eZSgooxq//zJGChDW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:70:0b:5c:9b:9b:b6:95:70:cc:2a:c2:5c:6f:04:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Validity
Not Before: Nov 14 19:01:55 2026 GMT
Not After : Nov 15 19:01:55 2026 GMT
Subject: CN=dfc78041e774bd84033860b09834a4447e80b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:21:4b:b7:62:3c:dd:9c:97:64:db:03:f5:
70:b6:fe:2a:ca:6a:5c:a7:3f:56:d8:cd:fa:53:2f:
db:a9:fa:4f:1d:00:ca:d2:4e:f3:b3:94:4d:b4:00:
5b:12:3c:c3:e6:70:9b:54:4c:48:95:a1:ef:48:b3:
2d:47:73:70:5a:8f:f6:5f:0d:1c:e6:a7:bb:22:5b:
26:ae:c1:56:56:8d:c1:49:c3:c9:6d:bf:a1:45:00:
d6:e8:29:21:57:76:46:51:78:7c:d7:83:8a:ba:5b:
e9:a1:0a:2c:ea:70:5a:77:94:89:a1:0a:27:c8:92:
a1:bf:b5:a8:97:b4:73:bd:7b:56:a3:57:af:9c:4b:
8e:69:d3:77:c2:9b:9e:1a:a4:a9:23:13:f8:2a:5d:
8b:af:0e:02:0c:23:0a:0a:04:c1:c4:95:0e:96:a2:
8b:1c:5e:60:42:33:10:b4:ab:06:cb:fa:76:78:14:
d8:3c:35:d8:99:56:ab:fc:66:cd:02:b0:e9:0d:d6:
68:4f:a3:9f:04:52:a9:11:51:3c:c3:0d:17:a4:5f:
88:c3:4f:51:dd:15:9a:69:ef:e9:12:74:3e:01:3e:
ec:0d:66:4d:3d:6c:75:ea:a1:d5:c9:3a:1d:9e:da:
6a:21:bc:30:2c:a6:0a:26:0b:54:bc:96:0e:7b:92:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:80:41:E7:74:BD:84:03:38:60:B0:98:34:A4:44:7E:80:B9:5B
X509v3 Authority Key Identifier:
keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fe:e3:b1:88:67:77:72:a1:08:d2:d3:a2:53:0e:f8:2f:82:
d1:f2:25:12:b9:45:9b:05:3e:28:62:38:5d:d1:fb:94:90:a4:
de:7a:4b:ee:a6:fa:ea:fe:00:12:25:67:10:57:9b:8b:a0:f2:
c8:b4:58:97:11:94:1d:75:27:e5:de:5d:9f:07:28:17:1a:a6:
98:3d:82:5e:d5:c8:14:ac:11:26:ff:c0:e7:53:5c:aa:99:cd:
db:c9:c0:75:7b:d8:78:48:13:fa:69:f4:c6:f1:22:8e:47:de:
1e:34:bf:3e:40:f0:67:90:73:16:b3:c3:c1:6e:03:52:ed:29:
d2:fe:80:af:94:bd:6a:a6:c9:a8:b6:f5:e2:60:ca:03:bb:53:
e2:a1:d3:15:4c:6f:f7:d1:c8:00:b8:2d:e4:89:27:32:99:94:
81:33:2e:36:83:b5:7d:61:25:9e:c1:b5:20:13:6a:c1:c4:b6:
4e:39:f2:d0:1e:07:e2:25:84:06:39:ab:41:08:7e:e0:dd:1c:
c0:4d:44:47:7d:71:71:c6:ce:e7:1d:72:ec:08:30:27:9a:69:
c5:1e:f2:11:86:ff:da:c8:68:ee:23:fb:15:89:3d:d4:3a:40:
53:31:a2:23:44:e2:e1:67:d8:0e:7a:e4:1c:84:2c:4d:e5:6f:
bf:92:0e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbcAtcm5u2lXDMKsJcbwSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjNhMjE0NWY5YjRkNDY2MDU4MmFkYzZiNzM1NDk2OWUw
ODljYTkwHhcNMjYxMTE0MTkwMTU1WhcNMjYxMTE1MTkwMTU1WjAzMTEwLwYDVQQD
EyhkZmM3ODA0MWU3NzRiZDg0MDMzODYwYjA5ODM0YTQ0NDdlODBiOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRghS7diPN2cl2TbA/Vwtv4qympc
pz9W2M36Uy/bqfpPHQDK0k7zs5RNtABbEjzD5nCbVExIlaHvSLMtR3NwWo/2Xw0c
5qe7IlsmrsFWVo3BScPJbb+hRQDW6CkhV3ZGUXh814OKulvpoQos6nBad5SJoQon
yJKhv7Wol7RzvXtWo1evnEuOadN3wpueGqSpIxP4Kl2Lrw4CDCMKCgTBxJUOlqKL
HF5gQjMQtKsGy/p2eBTYPDXYmVar/GbNArDpDdZoT6OfBFKpEVE8ww0XpF+Iw09R
3RWaae/pEnQ+AT7sDWZNPWx16qHVyTodntpqIbwwLKYKJgtUvJYOe5IRHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/HgEHndL2EAzhgsJg0pER+gLlbMB8GA1UdIwQY
MBaAFFyzohRfm01GYFgq3GtzVJaeCJypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kMDY2MWMtY2ViYi00ZTIyLWIxOTct
MTM5ODAwYThjNzVmLzEvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kMDY2MWMtY2ViYi00ZTIyLWIxOTctMTM5ODAwYThjNzVm
LzEvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALv7jsYhn
d3KhCNLTolMO+C+C0fIlErlFmwU+KGI4XdH7lJCk3npL7qb66v4AEiVnEFebi6Dy
yLRYlxGUHXUn5d5dnwcoFxqmmD2CXtXIFKwRJv/A51NcqpnN28nAdXvYeEgT+mn0
xvEijkfeHjS/PkDwZ5BzFrPDwW4DUu0p0v6Ar5S9aqbJqLb14mDKA7tT4qHTFUxv
99HIALgt5IknMpmUgTMuNoO1fWElnsG1IBNqwcS2Tjny0B4H4iWEBjmrQQh+4N0c
wE1ER31xccbO5x1y7AgwJ5ppxR7yEYb/2sho7iP7FYk91DpAUzGiI0Ti4WfYDnrk
HIQsTeVvv5IODA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:32:07 2026 by rpki-client