Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: 4IAhDjpcKLAR4BWcT9hqOjjA3upM0l1UjHbjIfCRSkA=
Subject key identifier: 70:4C:58:4C:71:18:92:74:E5:49:E0:AF:61:EE:40:72:BB:8E:23:E0
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 01A12BB2724F4D4E2582DA15B404B56E671B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 125C
Signing time: Sun 11 Oct 2026 16:01:17 +0000
Manifest this update: Sun 11 Oct 2026 16:01:17 +0000
Manifest next update: Mon 12 Oct 2026 16:01:17 +0000
Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: Mt8fv/p60aqF2E9ZluoQcg87EEJe8tI8Hd/UB8LQaK4=)
2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=)
3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:72:4f:4d:4e:25:82:da:15:b4:04:b5:6e:67:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Oct 11 16:01:17 2026 GMT
Not After : Oct 12 16:01:17 2026 GMT
Subject: CN=704c584c71189274e549e0af61ee4072bb8e23e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:39:2a:29:0d:65:c1:ca:fe:73:5a:f4:0b:
7a:b3:8e:11:43:a4:18:12:5a:a1:e8:37:7c:4e:5a:
17:27:53:9b:85:38:dd:d6:24:ca:74:82:e3:14:92:
7b:a2:a9:ab:bf:b1:fb:0b:fd:9e:84:0d:09:4e:48:
6d:d4:11:d7:b9:de:3d:d1:8e:41:55:f7:32:d7:04:
94:77:20:e8:f3:f0:80:88:75:65:77:ae:72:e1:87:
60:f1:21:ce:87:31:49:c6:a0:3d:59:ff:c2:fc:aa:
d6:58:8a:81:d5:ce:c8:a6:3a:d6:f4:eb:51:1f:71:
8b:d4:d2:e9:62:3f:d6:a9:3e:0e:81:36:b6:e0:ae:
80:ce:2f:05:25:36:24:b7:60:62:7d:8b:1d:ca:e8:
f2:46:0e:87:ae:0c:73:b8:2b:84:c8:46:c7:52:07:
46:85:3b:0b:c0:c7:8e:28:d4:e2:33:38:26:1e:3f:
d2:b5:a2:20:76:2f:68:f7:bd:a6:b8:9e:f0:a5:47:
79:7e:fc:a1:68:cc:58:60:ee:cf:4e:c4:70:04:7e:
29:a0:29:13:a9:ac:eb:3c:b9:23:79:54:d7:a3:46:
6b:1f:b2:e1:6e:3c:6d:4a:dd:6e:63:3f:f5:3d:3e:
60:1d:0c:cc:9f:34:3b:36:32:f3:55:43:52:77:b9:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4C:58:4C:71:18:92:74:E5:49:E0:AF:61:EE:40:72:BB:8E:23:E0
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:7a:d7:b8:5c:2b:89:d2:7c:b0:d7:f9:6e:18:0e:f5:8a:
f5:8b:90:e2:4a:15:fd:a5:9d:c2:d1:e4:a5:09:cb:eb:31:71:
45:f1:8f:1f:fb:f4:b2:a7:a4:1a:d9:fe:16:da:8b:21:f4:9d:
c9:15:d1:ca:4d:0d:fe:23:59:0c:62:78:c5:f2:8f:5c:70:d4:
fb:77:d5:6e:76:b8:69:40:bf:94:fb:64:16:65:cf:76:cf:ad:
de:c2:19:96:5a:03:1c:5a:9a:00:cb:63:1e:08:7e:1c:cc:c3:
53:24:6e:b4:57:f3:5d:d0:a0:ff:27:23:5d:03:05:9f:89:38:
1e:b5:0d:ce:2f:30:07:63:56:36:96:b9:f3:9c:3b:e4:6d:32:
f5:32:9c:e3:fb:15:45:d6:9d:05:7f:c0:0c:4d:e4:88:1c:a5:
b4:b2:cd:40:60:af:08:3e:21:b1:43:e1:28:fa:39:cd:08:68:
84:86:29:57:13:c1:bd:55:0c:01:67:10:31:55:68:95:c7:37:
13:c7:b4:9e:12:e7:5d:c1:38:8b:89:7c:c6:5a:d8:85:56:c1:
b4:f6:4e:da:1f:b9:c0:85:aa:a7:c8:a7:43:31:e0:28:e3:d6:
0d:55:63:59:78:d7:64:ec:1b:c9:9b:02:74:e0:da:3f:aa:16:
27:12:55:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErsnJPTU4lgtoVtAS1bmcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey
YTYwZGUwHhcNMjYxMDExMTYwMTE3WhcNMjYxMDEyMTYwMTE3WjAzMTEwLwYDVQQD
Eyg3MDRjNTg0YzcxMTg5Mjc0ZTU0OWUwYWY2MWVlNDA3MmJiOGUyM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD45KikNZcHK/nNa9At6s44RQ6QY
Elqh6Dd8TloXJ1ObhTjd1iTKdILjFJJ7oqmrv7H7C/2ehA0JTkht1BHXud490Y5B
Vfcy1wSUdyDo8/CAiHVld65y4Ydg8SHOhzFJxqA9Wf/C/KrWWIqB1c7IpjrW9OtR
H3GL1NLpYj/WqT4OgTa24K6Azi8FJTYkt2BifYsdyujyRg6HrgxzuCuEyEbHUgdG
hTsLwMeOKNTiMzgmHj/StaIgdi9o972muJ7wpUd5fvyhaMxYYO7PTsRwBH4poCkT
qazrPLkjeVTXo0ZrH7LhbjxtSt1uYz/1PT5gHQzMnzQ7NjLzVUNSd7nsywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBMWExxGJJ05Ungr2HuQHK7jiPgMB8GA1UdIwQY
MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt
ZjYwNzBhNGFkODNhLzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh
LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIh617hc
K4nSfLDX+W4YDvWK9YuQ4koV/aWdwtHkpQnL6zFxRfGPH/v0sqekGtn+FtqLIfSd
yRXRyk0N/iNZDGJ4xfKPXHDU+3fVbna4aUC/lPtkFmXPds+t3sIZlloDHFqaAMtj
Hgh+HMzDUyRutFfzXdCg/ycjXQMFn4k4HrUNzi8wB2NWNpa585w75G0y9TKc4/sV
RdadBX/ADE3kiByltLLNQGCvCD4hsUPhKPo5zQhohIYpVxPBvVUMAWcQMVVolcc3
E8e0nhLnXcE4i4l8xlrYhVbBtPZO2h+5wIWqp8inQzHgKOPWDVVjWXjXZOwbyZsC
dODaP6oWJxJV/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:42:16 2026 by rpki-client