Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: Y9ePHWJ2HIBEnlI9cGvoo3U+eema3Vh+JWJDiLbySMA=
Subject key identifier: FB:1F:9F:73:74:56:18:66:6B:D3:4E:34:A2:D0:57:A7:F2:A7:CB:43
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 01A1DF4C9472335CD0C293CDB57ACC5982A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 13:01:40 +0000
Manifest this update: Sun 15 Nov 2026 13:01:40 +0000
Manifest next update: Mon 16 Nov 2026 13:01:40 +0000
Files and hashes: 1: 5i2TAh2og4TXto7xyAcopWr_UMg.roa (hash: ZekBhPcyoCd+84YvBPa87l2ubLNdolD6vu0bwY9F0iY=)
2: 8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa (hash: Hl1lQvcDtC+ikOs/Ko0nJQFgSRezGLcK7o1ZONxr73k=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: MoiO7811RIMemVKAHvqrjmU8yxIWs6YivHspnUh+PeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:94:72:33:5c:d0:c2:93:cd:b5:7a:cc:59:82:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Nov 15 13:01:40 2026 GMT
Not After : Nov 16 13:01:40 2026 GMT
Subject: CN=fb1f9f73745618666bd34e34a2d057a7f2a7cb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:d5:8d:d4:6a:73:5a:dd:45:1d:97:25:5e:
e4:4d:2b:34:23:d8:4e:f6:94:57:44:1f:7e:2a:93:
f1:dc:ff:0d:d5:b1:21:97:e4:71:72:bb:08:27:f5:
16:a1:a8:d7:5d:54:33:e8:ec:b8:f6:f9:0a:a5:94:
c8:0f:c8:82:a6:fd:d0:fc:3a:a8:69:02:de:36:25:
dc:ff:e8:99:d8:9d:1c:0a:89:3e:89:25:55:7b:ab:
30:73:03:1b:f9:b5:d2:b6:55:c1:73:2f:ac:3c:62:
31:54:85:4d:c0:5f:80:b4:a3:16:1e:04:0d:80:8b:
b8:fd:a2:20:dc:ea:00:ec:44:29:11:5f:f6:4d:a1:
8d:19:29:dd:79:67:8f:68:3f:fe:59:20:d4:be:99:
57:e8:83:56:fe:d0:7b:ce:26:e7:b8:d4:21:c8:d1:
9a:eb:a1:15:e9:38:02:8d:a1:f2:f1:ba:a3:20:93:
68:a2:cd:16:18:37:96:61:64:4a:cc:ef:97:b0:5c:
72:cf:50:ec:fb:15:65:8e:d0:50:7a:c9:7f:a1:6a:
ae:bf:bb:d6:a9:7c:8b:b0:40:03:7b:35:64:2f:98:
2c:b9:c9:34:28:df:15:d4:88:17:88:6b:64:ef:c5:
59:f5:a3:06:80:b1:d7:9b:d8:98:9a:12:bf:5d:1a:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:9F:73:74:56:18:66:6B:D3:4E:34:A2:D0:57:A7:F2:A7:CB:43
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:37:31:af:b2:ba:4f:67:71:c9:d7:2a:bc:67:21:ef:7f:
8e:76:41:9c:35:b4:24:5b:5c:7c:69:16:53:62:1a:07:53:ad:
3e:c6:5b:1e:04:34:1a:22:a9:87:bf:56:91:aa:77:a7:e2:5a:
f3:54:5c:db:7b:aa:0e:f7:a7:cd:19:e6:fb:3f:65:fd:ea:87:
a0:12:d6:6b:2c:83:3c:cd:aa:ca:10:d9:e7:5f:2e:18:b0:49:
e1:19:67:fe:74:b0:78:a2:ba:c8:1b:79:10:44:31:65:d7:30:
8d:79:b2:be:ff:9d:42:83:99:31:1f:10:18:79:4b:ae:7e:8f:
5d:33:71:4c:5a:c2:cf:27:88:75:a5:6f:ca:12:b1:ce:d5:f4:
f6:44:e0:53:e4:31:3b:db:87:87:7e:49:d4:f7:be:bd:ac:88:
0c:20:9b:09:ea:b7:1d:d8:d7:02:34:d7:69:87:de:62:3b:fe:
d8:d1:79:a1:39:bd:d3:fd:39:b7:21:f1:25:00:2d:ca:17:3c:
b9:12:63:d8:35:5a:d4:6b:6c:70:80:72:d3:54:1e:8b:ba:93:
09:af:c7:b2:e5:8a:52:f8:f5:ff:fe:15:67:52:23:84:31:0c:
53:56:18:31:d7:ff:79:3f:cb:53:09:6d:27:ce:a1:d7:c9:b9:
66:62:00:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTJRyM1zQwpPNtXrMWYKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNWQ4Njk3NGE3YjYyNDE5MmVjOGQ4MzRjZjI5MDZlMTMw
MmU0MzEwHhcNMjYxMTE1MTMwMTQwWhcNMjYxMTE2MTMwMTQwWjAzMTEwLwYDVQQD
EyhmYjFmOWY3Mzc0NTYxODY2NmJkMzRlMzRhMmQwNTdhN2YyYTdjYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDPVjdRqc1rdRR2XJV7kTSs0I9hO
9pRXRB9+KpPx3P8N1bEhl+RxcrsIJ/UWoajXXVQz6Oy49vkKpZTID8iCpv3Q/Dqo
aQLeNiXc/+iZ2J0cCok+iSVVe6swcwMb+bXStlXBcy+sPGIxVIVNwF+AtKMWHgQN
gIu4/aIg3OoA7EQpEV/2TaGNGSndeWePaD/+WSDUvplX6INW/tB7zibnuNQhyNGa
66EV6TgCjaHy8bqjIJNoos0WGDeWYWRKzO+XsFxyz1Ds+xVljtBQesl/oWquv7vW
qXyLsEADezVkL5gsuck0KN8V1IgXiGtk78VZ9aMGgLHXm9iYmhK/XRrhTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsfn3N0Vhhma9NONKLQV6fyp8tDMB8GA1UdIwQY
MBaAFFxdhpdKe2JBkuyNg0zykG4TAuQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEt
YmQ4MDJmYzRhYTk0LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEtYmQ4MDJmYzRhYTk0
LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKh43Ma+y
uk9nccnXKrxnIe9/jnZBnDW0JFtcfGkWU2IaB1OtPsZbHgQ0GiKph79Wkap3p+Ja
81Rc23uqDvenzRnm+z9l/eqHoBLWayyDPM2qyhDZ518uGLBJ4Rln/nSweKK6yBt5
EEQxZdcwjXmyvv+dQoOZMR8QGHlLrn6PXTNxTFrCzyeIdaVvyhKxztX09kTgU+Qx
O9uHh35J1Pe+vayIDCCbCeq3HdjXAjTXaYfeYjv+2NF5oTm90/05tyHxJQAtyhc8
uRJj2DVa1GtscIBy01Qei7qTCa/HsuWKUvj1//4VZ1IjhDEMU1YYMdf/eT/LUwlt
J86h18m5ZmIARg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:58 2026 by rpki-client