Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
File: XLOiFF-bTUZgWCrca3NUlp4InKk.mft (raw, json)
Hash identifier: mLojFSeMblpeyUGi4I3Uup30GSQCiRTsu/hhDxIuuRA=
Subject key identifier: E8:5D:65:62:47:91:74:D3:FF:08:D6:BD:A7:5A:36:0C:EE:70:EB:66
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial: 01A0D2DE756E4CAFE871D48CBEAAAA457253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
Manifest number: 121D
Signing time: Thu 24 Sep 2026 10:03:09 +0000
Manifest this update: Thu 24 Sep 2026 10:03:09 +0000
Manifest next update: Fri 25 Sep 2026 10:03:09 +0000
Files and hashes: 1: 2Nc5AsSnBWzCuxjbHnI5SDdmCKE.roa (hash: IY9E1+Z/A+D4/xzAfwUZ6RBDyrzbb4T4cIqPhChpPt8=)
2: XLOiFF-bTUZgWCrca3NUlp4InKk.crl (hash: TI+SCmq4lOJKPmWcc1e6BOMaBvy29CeGN4r6okxVyP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:75:6e:4c:af:e8:71:d4:8c:be:aa:aa:45:72:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Validity
Not Before: Sep 24 10:03:09 2026 GMT
Not After : Sep 25 10:03:09 2026 GMT
Subject: CN=e85d6562479174d3ff08d6bda75a360cee70eb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2d:19:6a:e8:5a:16:ea:e1:da:8d:ea:d9:07:
d7:cd:f5:a4:ee:ab:e4:93:2f:a8:9d:a8:1e:6e:ec:
c3:2a:28:65:a3:52:bb:6d:ab:8e:ea:9e:0b:77:e6:
d5:5d:53:5c:47:f9:7d:11:3b:97:d3:9e:b6:3b:9f:
3d:95:82:86:e9:76:fe:54:32:75:e8:94:37:b4:03:
0b:bb:dd:fd:e2:ac:5f:b9:ad:d3:32:d2:d9:81:58:
f9:0e:15:79:ad:9c:50:b7:c8:18:a9:68:e8:01:0d:
b2:0a:cc:af:b8:eb:63:75:d2:e6:ea:98:50:8d:a9:
40:f1:19:10:93:1d:9c:11:ac:81:dc:8f:97:8c:38:
2c:52:ee:0e:d0:dc:6b:d7:12:a1:92:f1:b8:4c:04:
f7:c9:ef:d8:8c:64:aa:2a:3a:26:9f:2a:dc:3a:7e:
eb:07:a7:50:cd:94:95:79:dc:90:05:35:79:03:53:
7f:82:bb:85:c6:4c:08:1b:14:49:d0:be:fc:a7:eb:
96:83:23:52:49:e0:6f:61:9b:0b:56:c6:0c:9e:7c:
55:79:4b:94:05:1a:89:11:e4:31:53:12:a1:03:c8:
8f:a3:59:92:bb:77:91:cd:a3:c0:97:4f:98:e7:17:
19:5a:05:ce:00:1f:95:cc:03:13:73:3f:f2:04:ff:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:65:62:47:91:74:D3:FF:08:D6:BD:A7:5A:36:0C:EE:70:EB:66
X509v3 Authority Key Identifier:
keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c2:b8:7c:0e:38:70:08:6b:d6:da:7f:73:51:47:6b:24:96:
27:6d:63:34:d7:a6:00:72:15:81:c5:6a:64:13:6d:38:28:aa:
a4:b7:96:6b:2d:8e:c2:fd:54:af:95:07:86:23:f7:0c:61:58:
66:88:7e:b8:8d:9c:f7:a3:6d:89:14:9a:0d:b8:6c:12:85:53:
d4:97:db:bc:7f:15:12:f1:95:38:d7:cd:70:86:7c:41:7b:4f:
b0:48:8c:75:fd:90:63:77:44:6d:f3:53:3b:5d:c1:99:36:fb:
01:e7:8e:68:ad:a8:7f:62:df:cb:90:e4:b1:82:26:b3:0c:96:
08:eb:62:e4:c7:2c:be:b2:e1:ba:7a:e6:23:1f:8a:20:9e:00:
b0:41:9d:f8:c1:f8:1c:66:b9:2d:c5:50:e1:38:f0:4c:e7:c1:
c6:27:82:80:6d:9c:a3:aa:59:44:c9:86:07:ea:34:31:70:28:
43:8d:fd:8f:c3:8b:5b:ec:65:71:51:b0:d0:0d:59:9a:a6:91:
2b:6a:f4:e7:88:6b:cc:d3:36:19:2e:cb:40:39:e9:1e:81:fe:
b9:2a:a3:79:0c:7a:26:ca:4a:04:85:f3:ce:94:1c:76:77:c7:
b5:32:e1:90:17:b2:53:bb:f4:0a:96:3c:dd:fa:b4:c2:40:e1:
d5:a6:50:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3nVuTK/ocdSMvqqqRXJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjNhMjE0NWY5YjRkNDY2MDU4MmFkYzZiNzM1NDk2OWUw
ODljYTkwHhcNMjYwOTI0MTAwMzA5WhcNMjYwOTI1MTAwMzA5WjAzMTEwLwYDVQQD
EyhlODVkNjU2MjQ3OTE3NGQzZmYwOGQ2YmRhNzVhMzYwY2VlNzBlYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+i0ZauhaFurh2o3q2QfXzfWk7qvk
ky+onagebuzDKihlo1K7bauO6p4Ld+bVXVNcR/l9ETuX0562O589lYKG6Xb+VDJ1
6JQ3tAMLu9394qxfua3TMtLZgVj5DhV5rZxQt8gYqWjoAQ2yCsyvuOtjddLm6phQ
jalA8RkQkx2cEayB3I+XjDgsUu4O0Nxr1xKhkvG4TAT3ye/YjGSqKjomnyrcOn7r
B6dQzZSVedyQBTV5A1N/gruFxkwIGxRJ0L78p+uWgyNSSeBvYZsLVsYMnnxVeUuU
BRqJEeQxUxKhA8iPo1mSu3eRzaPAl0+Y5xcZWgXOAB+VzAMTcz/yBP8lzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhdZWJHkXTT/wjWvadaNgzucOtmMB8GA1UdIwQY
MBaAFFyzohRfm01GYFgq3GtzVJaeCJypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kMDY2MWMtY2ViYi00ZTIyLWIxOTct
MTM5ODAwYThjNzVmLzEvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kMDY2MWMtY2ViYi00ZTIyLWIxOTctMTM5ODAwYThjNzVm
LzEvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8K4fA44
cAhr1tp/c1FHaySWJ21jNNemAHIVgcVqZBNtOCiqpLeWay2Owv1Ur5UHhiP3DGFY
Zoh+uI2c96NtiRSaDbhsEoVT1JfbvH8VEvGVONfNcIZ8QXtPsEiMdf2QY3dEbfNT
O13BmTb7AeeOaK2of2Lfy5DksYImswyWCOti5McsvrLhunrmIx+KIJ4AsEGd+MH4
HGa5LcVQ4TjwTOfBxieCgG2co6pZRMmGB+o0MXAoQ439j8OLW+xlcVGw0A1ZmqaR
K2r054hrzNM2GS7LQDnpHoH+uSqjeQx6JspKBIXzzpQcdnfHtTLhkBeyU7v0CpY8
3fq0wkDh1aZQfQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:52:07 2026 by rpki-client