Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: OYsOIkAQDv4HEeQYHIFnO3wTVZmK0noTQpZrcdlIa70=
Subject key identifier: F9:5E:F5:A6:B3:9B:BD:64:B8:CD:45:B6:C1:B4:E4:9C:CE:9F:DC:90
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 01A1DF4C26DC4EE170C8B2EB28BECD46D591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 13:01:12 +0000
Manifest this update: Sun 15 Nov 2026 13:01:12 +0000
Manifest next update: Mon 16 Nov 2026 13:01:12 +0000
Files and hashes: 1: eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa (hash: YlsuBpQ4jmohvQqxKmhcIgBvEbbXIh+AX1kjTabOK9c=)
2: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: XmeIY/wSSA4xpGnTxy7DEeQxrn/lruZPE6aIJz0KZn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:26:dc:4e:e1:70:c8:b2:eb:28:be:cd:46:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Nov 15 13:01:12 2026 GMT
Not After : Nov 16 13:01:12 2026 GMT
Subject: CN=f95ef5a6b39bbd64b8cd45b6c1b4e49cce9fdc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:bb:d3:6f:51:58:85:c6:2a:b8:7a:53:69:
c9:dd:a0:c5:f6:a2:13:0b:6c:a4:b7:34:e1:49:8e:
77:db:d2:67:3b:21:6d:72:5a:2e:72:2c:b0:aa:eb:
cb:f7:d0:53:ad:8e:89:eb:5e:13:fb:7c:90:79:a2:
eb:a7:5a:50:60:66:6d:1d:d7:f7:9b:bb:eb:46:f7:
3e:00:2a:66:78:b1:79:1d:51:7b:57:fd:c7:de:63:
ac:83:21:07:1f:3f:1f:b2:f4:27:c2:eb:d6:21:47:
b5:73:7f:d4:33:af:46:6f:56:d5:f9:7b:5e:b0:ba:
50:62:75:ce:fc:4b:26:58:86:93:62:2f:b9:53:ab:
0b:7c:74:eb:82:44:9b:46:bc:be:8d:8c:fc:b9:b4:
23:0f:03:0e:45:83:18:d0:83:09:f6:d1:e7:2a:67:
3e:1a:c1:f3:54:8d:c2:b1:41:79:af:2e:b7:dd:0e:
bf:32:d8:07:d3:e5:f6:dd:ff:b9:4d:ec:8e:8f:2c:
26:df:40:2c:b3:b2:21:d4:72:3c:00:fe:73:d7:e2:
99:52:c6:1f:69:f1:d0:ff:36:cc:ba:78:00:97:49:
55:fc:73:8b:dc:87:1c:52:94:1a:33:4d:61:8e:98:
3b:9d:2c:88:08:58:07:02:38:42:f9:5e:58:90:5a:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5E:F5:A6:B3:9B:BD:64:B8:CD:45:B6:C1:B4:E4:9C:CE:9F:DC:90
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d7:12:bf:45:70:e9:51:19:6e:dd:bd:8b:a4:8b:2b:8d:b8:
e7:93:a3:bf:71:fa:2a:0d:4e:07:53:6b:04:f1:97:2a:50:d7:
31:b1:29:11:93:24:73:06:47:d3:7b:02:b1:85:c8:71:65:73:
c0:33:40:25:39:f5:03:7d:26:fd:90:26:19:3d:64:2d:24:8e:
58:f1:9d:14:6d:cf:1b:c8:39:97:06:f5:18:45:db:cf:bb:3b:
b0:74:76:b4:17:cf:ea:51:76:f2:6e:a9:3a:77:fc:36:8d:ef:
bf:a3:81:93:c3:c4:0f:61:a2:ba:0c:95:a9:83:9d:72:7d:86:
e8:c7:37:31:be:13:1f:9b:ec:72:e1:c4:d7:b1:61:5c:61:03:
d8:f0:70:e7:17:5b:bd:7a:93:49:94:ac:37:07:d5:ae:9f:da:
89:aa:ce:4a:7f:5c:e5:d9:6c:cd:57:25:72:4e:92:e3:d0:b0:
cf:86:7a:d2:fc:a6:91:65:30:ea:0a:f8:88:73:3d:f3:c6:2b:
1b:48:aa:f6:a1:a8:48:0e:47:9e:01:48:42:e5:36:b1:b3:29:
d3:ad:e7:d5:8e:48:b3:bc:6b:20:57:68:f5:e6:8e:84:ff:c6:
32:41:f3:24:83:08:9c:47:22:ca:40:51:e9:3f:d4:98:97:79:
0f:51:48:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTCbcTuFwyLLrKL7NRtWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MTVjZDNhY2YzYjZiMmQ1N2JjMzQ4NTY3NTgyNzUzYzlj
YzA5MzMwHhcNMjYxMTE1MTMwMTEyWhcNMjYxMTE2MTMwMTEyWjAzMTEwLwYDVQQD
EyhmOTVlZjVhNmIzOWJiZDY0YjhjZDQ1YjZjMWI0ZTQ5Y2NlOWZkYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBq7029RWIXGKrh6U2nJ3aDF9qIT
C2yktzThSY5329JnOyFtclouciywquvL99BTrY6J614T+3yQeaLrp1pQYGZtHdf3
m7vrRvc+ACpmeLF5HVF7V/3H3mOsgyEHHz8fsvQnwuvWIUe1c3/UM69Gb1bV+Xte
sLpQYnXO/EsmWIaTYi+5U6sLfHTrgkSbRry+jYz8ubQjDwMORYMY0IMJ9tHnKmc+
GsHzVI3CsUF5ry633Q6/MtgH0+X23f+5TeyOjywm30Ass7Ih1HI8AP5z1+KZUsYf
afHQ/zbMungAl0lV/HOL3IccUpQaM01hjpg7nSyICFgHAjhC+V5YkFqN2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPle9aazm71kuM1FtsG05JzOn9yQMB8GA1UdIwQY
MBaAFMcVzTrPO2stV7w0hWdYJ1PJzAkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEt
YWU4ZDg0MDAzZmYxLzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEtYWU4ZDg0MDAzZmYx
LzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotcSv0Vw
6VEZbt29i6SLK42455Ojv3H6Kg1OB1NrBPGXKlDXMbEpEZMkcwZH03sCsYXIcWVz
wDNAJTn1A30m/ZAmGT1kLSSOWPGdFG3PG8g5lwb1GEXbz7s7sHR2tBfP6lF28m6p
Onf8No3vv6OBk8PED2GiugyVqYOdcn2G6Mc3Mb4TH5vscuHE17FhXGED2PBw5xdb
vXqTSZSsNwfVrp/aiarOSn9c5dlszVclck6S49Cwz4Z60vymkWUw6gr4iHM988Yr
G0iq9qGoSA5HngFIQuU2sbMp063n1Y5Is7xrIFdo9eaOhP/GMkHzJIMInEciykBR
6T/UmJd5D1FIyw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:23:37 2026 by rpki-client