Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.mft (raw, json)
Hash identifier: cqfOwPA4M6gbYuie7+hp5irjrI4XOF4MUaIqz9GehO8=
Subject key identifier: 35:EC:7F:0C:3C:F1:8E:89:9A:2E:F2:5B:CE:76:46:DF:05:19:63:BD
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 01A1DA942AB4359C80C34C438DC1DE20B816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
Manifest number: 02A4
Signing time: Sat 14 Nov 2026 15:01:45 +0000
Manifest this update: Sat 14 Nov 2026 15:01:45 +0000
Manifest next update: Sun 15 Nov 2026 15:01:45 +0000
Files and hashes: 1: 3Owi7w8XHfa2ETQQJKxPe5_2S3M.roa (hash: WxZPvj4Y/uFWaukPSMrNh1kQZIcODKf/xbXFTKHA6tE=)
2: XSP6gsR1KG22BxT2A2Gg8crCPSM.crl (hash: +ljwFt7Ecrs+4i/AbFExfKrdOFinxQ87oQwvL9yCIKA=)
3: kHjyu0leWmEWJz4dGZNRuqPpKu0.roa (hash: xSmyUIXwxdKC/wUH6aKgbqf7oSMgpHlsL1OZu9Jw99Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:2a:b4:35:9c:80:c3:4c:43:8d:c1:de:20:b8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Nov 14 15:01:45 2026 GMT
Not After : Nov 15 15:01:45 2026 GMT
Subject: CN=35ec7f0c3cf18e899a2ef25bce7646df051963bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:81:70:de:50:5f:37:10:bb:cb:77:29:a4:
87:f3:85:f3:07:2b:12:8e:8e:db:c2:2f:8b:dd:6a:
60:cf:6d:ab:13:70:d7:24:38:1c:52:05:e5:77:6a:
28:39:c9:84:f0:e0:36:dc:c0:23:41:95:4f:14:d0:
14:b6:44:3c:e0:00:44:b2:de:e5:3e:12:97:e6:71:
7a:56:1d:aa:0c:44:cf:2d:6d:e9:d0:e2:85:bc:03:
4c:6f:b2:27:29:45:49:cd:91:dc:6d:6c:94:77:c2:
58:74:17:eb:44:33:75:4e:e7:ad:18:84:8f:cc:37:
3b:85:dd:a2:36:e2:cb:e8:f7:99:c0:8e:d5:3b:03:
5e:28:d7:f4:39:30:94:3d:89:8d:ef:d4:c5:5d:11:
d5:2a:05:35:25:02:e7:00:f2:07:4a:ab:e0:95:7f:
09:8a:97:3c:79:a7:3f:79:f5:92:6b:82:9c:c6:f0:
08:c3:a9:dd:22:40:63:8d:86:ab:2f:ec:89:56:b9:
f8:9d:85:e5:21:24:5e:db:51:86:29:17:fc:d0:27:
25:2a:78:ed:58:1f:a9:61:47:23:28:18:24:94:d5:
85:15:1b:90:3c:a9:da:07:9c:2a:0d:70:a2:ac:57:
d7:15:7f:a1:00:bf:7a:85:c3:45:60:c3:7c:ac:ae:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EC:7F:0C:3C:F1:8E:89:9A:2E:F2:5B:CE:76:46:DF:05:19:63:BD
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:50:45:b3:ad:a8:ac:ed:b1:19:73:e6:64:74:a0:c9:9a:ec:
dd:e6:3f:50:c0:f0:f5:24:85:9c:fa:0c:b5:35:3b:91:05:5b:
6b:de:85:1e:90:47:e5:3b:8b:48:54:92:48:17:4e:42:c7:e9:
ca:a6:c7:ed:e9:f0:be:7e:1b:2d:ed:65:e4:dd:90:3b:d3:4b:
cb:49:7d:01:6b:91:3e:f4:7b:bc:85:57:c1:95:0d:aa:37:bd:
27:19:f1:b9:8f:ea:bc:3a:3a:1f:ff:75:5e:62:59:b9:d9:6c:
73:0a:1a:60:af:7c:b5:83:78:be:44:1d:cb:d0:35:a8:f2:7c:
cc:e0:09:e7:1a:71:a9:91:70:04:e7:0f:df:18:56:4d:d7:bf:
d8:33:ff:26:50:41:ea:b9:7b:de:f1:50:a5:16:6e:26:7c:55:
c7:d6:3c:e9:db:97:dc:66:c9:fd:60:d8:b1:56:60:4c:cc:82:
f0:02:23:31:dc:a1:24:7a:e2:da:9d:e1:4b:56:19:c0:7a:0b:
fa:ce:77:07:2d:79:3a:7e:ad:97:a8:cf:7c:a1:d5:ef:16:ec:
2b:f7:ea:18:a9:9f:94:fe:90:bd:99:0e:32:48:ef:11:5a:2d:
03:8a:a8:b3:25:69:4d:3f:13:26:f9:3d:ee:84:71:c9:b3:c5:
41:ac:85:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHalCq0NZyAw0xDjcHeILgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMjNmYTgyYzQ3NTI4NmRiNjA3MTRmNjAzNjFhMGYxY2Fj
MjNkMjMwHhcNMjYxMTE0MTUwMTQ1WhcNMjYxMTE1MTUwMTQ1WjAzMTEwLwYDVQQD
EygzNWVjN2YwYzNjZjE4ZTg5OWEyZWYyNWJjZTc2NDZkZjA1MTk2M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhCBcN5QXzcQu8t3KaSH84XzBysS
jo7bwi+L3Wpgz22rE3DXJDgcUgXld2ooOcmE8OA23MAjQZVPFNAUtkQ84ABEst7l
PhKX5nF6Vh2qDETPLW3p0OKFvANMb7InKUVJzZHcbWyUd8JYdBfrRDN1TuetGISP
zDc7hd2iNuLL6PeZwI7VOwNeKNf0OTCUPYmN79TFXRHVKgU1JQLnAPIHSqvglX8J
ipc8eac/efWSa4KcxvAIw6ndIkBjjYarL+yJVrn4nYXlISRe21GGKRf80CclKnjt
WB+pYUcjKBgklNWFFRuQPKnaB5wqDXCirFfXFX+hAL96hcNFYMN8rK4rdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXsfww88Y6Jmi7yW852Rt8FGWO9MB8GA1UdIwQY
MBaAFF0j+oLEdShttgcU9gNhoPHKwj0jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFNQNmdzUjFLRzIyQnhUMkEyR2c4Y3JDUFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iZmNlOGQtMDE0Ny00N2VhLWEyNzkt
YjhmNTcwOGYyMzY5LzEvWFNQNmdzUjFLRzIyQnhUMkEyR2c4Y3JDUFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iZmNlOGQtMDE0Ny00N2VhLWEyNzktYjhmNTcwOGYyMzY5
LzEvWFNQNmdzUjFLRzIyQnhUMkEyR2c4Y3JDUFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVBFs62o
rO2xGXPmZHSgyZrs3eY/UMDw9SSFnPoMtTU7kQVba96FHpBH5TuLSFSSSBdOQsfp
yqbH7enwvn4bLe1l5N2QO9NLy0l9AWuRPvR7vIVXwZUNqje9JxnxuY/qvDo6H/91
XmJZudlscwoaYK98tYN4vkQdy9A1qPJ8zOAJ5xpxqZFwBOcP3xhWTde/2DP/JlBB
6rl73vFQpRZuJnxVx9Y86duX3GbJ/WDYsVZgTMyC8AIjMdyhJHri2p3hS1YZwHoL
+s53By15On6tl6jPfKHV7xbsK/fqGKmflP6QvZkOMkjvEVotA4qosyVpTT8TJvk9
7oRxybPFQayFrA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:40:59 2026 by rpki-client