Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: OMMHvXCMUDQTSkdDjbC2JILNFcaJX1TlC6ojQwnH5bA=
Subject key identifier: FB:D8:34:6B:F3:BF:9D:40:33:56:F1:2A:F0:17:59:E4:B0:62:7D:0C
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01A0D7CD3AEC1D3F8680DD15ABE82CDD9DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0D3A
Signing time: Fri 25 Sep 2026 09:02:26 +0000
Manifest this update: Fri 25 Sep 2026 09:02:26 +0000
Manifest next update: Sat 26 Sep 2026 09:02:26 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: yWrdKbGPD00Ck6GHPCc3AsTVwABSOlPrlTfuCRqDRcs=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:3a:ec:1d:3f:86:80:dd:15:ab:e8:2c:dd:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Sep 25 09:02:26 2026 GMT
Not After : Sep 26 09:02:26 2026 GMT
Subject: CN=fbd8346bf3bf9d403356f12af01759e4b0627d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:b1:ec:b9:38:f1:85:2a:4a:44:04:fb:90:
c2:46:36:1f:90:28:fc:30:e6:91:4a:fe:25:1e:4e:
05:3a:78:59:85:ff:79:5b:e8:ed:d8:fd:95:92:64:
b8:cd:cb:f3:f4:ab:a9:ec:1a:cf:ec:94:b6:5e:3b:
7e:53:87:b1:4d:84:09:f8:be:80:7f:60:77:c0:44:
93:01:b0:df:9c:18:44:77:98:3f:fa:f1:b1:04:c4:
f7:57:28:32:b0:c7:28:ff:1e:ff:8a:fa:85:3d:a5:
33:b5:d4:03:d0:2d:d8:73:d3:f6:8e:9f:78:07:d3:
2c:df:11:46:e0:1e:ea:d8:50:8c:5d:da:0b:13:e1:
d5:2c:8f:c3:39:44:8d:ca:49:65:ea:a5:89:64:f0:
cc:5b:24:d8:ba:53:04:56:39:3f:e5:fa:96:37:c4:
6c:31:2c:e9:e2:e4:81:2b:db:c1:d9:31:f9:14:d0:
c7:03:3b:64:1a:c0:c4:8a:65:92:61:ec:32:29:ae:
d4:7a:fd:ef:8f:32:fa:d0:20:8f:58:fb:a1:1b:a0:
06:8d:11:7b:d5:60:db:ad:7a:12:93:64:cf:a8:25:
e7:91:b6:c3:86:42:b5:02:d0:d4:f8:c1:7b:37:53:
72:be:13:f8:53:50:2e:ed:34:49:91:35:e2:b1:f8:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D8:34:6B:F3:BF:9D:40:33:56:F1:2A:F0:17:59:E4:B0:62:7D:0C
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:dd:93:a3:40:3c:91:a5:52:45:20:eb:26:da:c6:9d:25:
16:bf:c2:3c:b1:c9:c4:02:38:f0:19:71:6a:1b:4e:d7:45:b3:
c6:df:36:3f:c8:de:08:28:1a:95:f1:ee:91:91:22:f2:6f:c0:
a4:ea:91:74:4f:13:36:a6:b4:1f:ab:dd:f6:5f:56:00:4a:a1:
e3:90:2f:75:99:b0:30:e1:69:33:34:13:7c:49:3a:a7:ae:91:
bc:e2:97:78:08:20:2f:79:25:74:30:7f:2c:b4:30:42:31:d3:
c0:1d:b2:02:4b:9c:04:a9:a5:74:e8:68:d7:39:48:e2:c9:ca:
1e:e2:51:3d:b0:f7:e5:20:a6:97:44:74:5d:98:27:94:cb:fb:
e1:91:59:54:4a:9b:54:e2:5f:0d:d4:e4:2f:bc:08:f7:bb:e3:
24:ee:20:1d:1e:0a:48:4b:e7:5c:eb:cc:ff:8c:5a:ed:1a:58:
d7:8f:4b:98:0b:c4:58:df:22:66:8e:f6:12:ce:8d:b4:5d:7b:
93:05:9d:4c:f4:4a:0c:4a:d7:4a:02:37:39:6c:02:03:cd:94:
0a:bc:5e:b4:20:3c:b0:93:c2:19:a7:ea:01:0b:77:fa:04:32:
a9:8d:84:29:a8:41:9a:dc:e4:7d:87:8c:d2:ca:57:1f:81:c9:
e1:2a:5e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzTrsHT+GgN0Vq+gs3Z38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl
NzkzNWEwHhcNMjYwOTI1MDkwMjI2WhcNMjYwOTI2MDkwMjI2WjAzMTEwLwYDVQQD
EyhmYmQ4MzQ2YmYzYmY5ZDQwMzM1NmYxMmFmMDE3NTllNGIwNjI3ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV2x7Lk48YUqSkQE+5DCRjYfkCj8
MOaRSv4lHk4FOnhZhf95W+jt2P2VkmS4zcvz9Kup7BrP7JS2Xjt+U4exTYQJ+L6A
f2B3wESTAbDfnBhEd5g/+vGxBMT3VygysMco/x7/ivqFPaUztdQD0C3Yc9P2jp94
B9Ms3xFG4B7q2FCMXdoLE+HVLI/DOUSNykll6qWJZPDMWyTYulMEVjk/5fqWN8Rs
MSzp4uSBK9vB2TH5FNDHAztkGsDEimWSYewyKa7Uev3vjzL60CCPWPuhG6AGjRF7
1WDbrXoSk2TPqCXnkbbDhkK1AtDU+MF7N1NyvhP4U1Au7TRJkTXisfhezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvYNGvzv51AM1bxKvAXWeSwYn0MMB8GA1UdIwQY
MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt
MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw
LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrndk6NA
PJGlUkUg6ybaxp0lFr/CPLHJxAI48BlxahtO10Wzxt82P8jeCCgalfHukZEi8m/A
pOqRdE8TNqa0H6vd9l9WAEqh45AvdZmwMOFpMzQTfEk6p66RvOKXeAggL3kldDB/
LLQwQjHTwB2yAkucBKmldOho1zlI4snKHuJRPbD35SCml0R0XZgnlMv74ZFZVEqb
VOJfDdTkL7wI97vjJO4gHR4KSEvnXOvM/4xa7RpY149LmAvEWN8iZo72Es6NtF17
kwWdTPRKDErXSgI3OWwCA82UCrxetCA8sJPCGafqAQt3+gQyqY2EKahBmtzkfYeM
0spXH4HJ4SpepQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:22:50 2026 by rpki-client