Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
File: XeNpl3lT5b198zgXiKQlpXvBwlQ.mft (raw, json)
Hash identifier: DGMpnNgsfTNgSs3GdxRxhsxtdeHAq4axdn13jln6E5M=
Subject key identifier: 86:6D:A4:68:28:E1:1C:7E:5D:2E:17:DF:B0:FC:6B:DE:F6:0A:71:9C
Authority key identifier: 5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
Certificate issuer: /CN=5de369977953e5bd7df3381788a425a57bc1c254
Certificate serial: 01A10BEFEE03314A255CB9F10BCB0E686C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
Manifest number: 0104
Signing time: Mon 05 Oct 2026 12:00:35 +0000
Manifest this update: Mon 05 Oct 2026 12:00:35 +0000
Manifest next update: Tue 06 Oct 2026 12:00:35 +0000
Files and hashes: 1: XeNpl3lT5b198zgXiKQlpXvBwlQ.crl (hash: bqk/z174tihdbJKp1XkcO9xb9PoYEIg0EPi0yOD7IHc=)
2: gjzkvOpwo1VRhdor0ibZ6CC1RMY.roa (hash: rl9pYDDMx4wTP/iHtIkLTivkQb2U2V3qvKBigsxkyqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:ef:ee:03:31:4a:25:5c:b9:f1:0b:cb:0e:68:6c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de369977953e5bd7df3381788a425a57bc1c254
Validity
Not Before: Oct 5 12:00:35 2026 GMT
Not After : Oct 6 12:00:35 2026 GMT
Subject: CN=866da46828e11c7e5d2e17dfb0fc6bdef60a719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:39:fa:65:ae:d6:a0:6e:eb:ff:44:8c:87:
a9:ac:68:3f:bc:e7:a8:90:90:55:b8:7e:93:91:00:
f4:c9:7d:bf:bc:8b:bc:5f:ac:41:fe:1c:3a:07:44:
7e:da:d8:00:13:82:c5:2e:f7:1a:67:26:26:e2:b3:
c4:05:40:cf:df:ec:7c:81:1e:46:5b:d5:17:af:57:
99:85:18:de:e3:fe:b8:56:3d:ce:c0:72:61:76:f8:
c5:21:a2:6f:e0:d8:fc:65:65:f7:26:c9:8e:46:51:
63:ae:ba:e6:37:a3:dd:bc:2f:fd:f0:35:dc:04:81:
9e:f2:fc:11:fb:ac:d4:96:f1:f5:76:29:b5:26:f7:
d5:76:7a:80:1d:26:84:65:78:d6:07:d6:18:5a:c0:
47:03:9e:c1:ce:c8:83:3c:c9:36:38:ae:e8:70:f2:
d0:d9:70:4b:64:03:c9:66:42:bd:d6:cc:f3:a4:eb:
ba:12:6d:18:80:7a:7b:a6:02:a4:1b:ae:84:4d:df:
22:4a:bc:39:55:29:6e:3a:a9:2f:d5:63:ac:45:bd:
f2:53:fd:68:36:5d:22:f1:cb:86:27:9a:1e:cd:50:
d6:e1:a7:b5:89:1f:7e:91:14:9a:20:c7:f1:31:f5:
48:61:de:e8:3a:02:80:0f:d0:ee:4c:17:60:31:69:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6D:A4:68:28:E1:1C:7E:5D:2E:17:DF:B0:FC:6B:DE:F6:0A:71:9C
X509v3 Authority Key Identifier:
keyid:5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e2:f3:f3:70:2c:90:0c:94:4d:b1:b3:7f:cb:de:1e:55:9c:
28:13:45:d5:44:53:27:b1:80:78:35:cc:93:d9:61:23:b8:50:
57:51:d3:ae:43:a6:52:ce:7c:a7:b4:cc:03:09:35:14:f5:87:
e0:b2:c6:c9:07:b9:26:4b:7b:c4:f3:db:1f:fb:a2:16:83:c8:
6a:7d:f9:a7:e5:07:90:fb:34:25:0d:7c:d4:41:db:2f:d2:79:
e8:be:b7:f4:b7:a4:d4:c6:73:2c:8b:50:76:37:0d:a7:2d:0b:
1a:55:d2:48:65:e8:c1:b5:7f:a8:e3:87:de:ca:50:fd:24:34:
64:14:a6:49:69:6d:42:f1:64:ba:17:ae:0a:a1:10:97:17:fe:
75:d3:70:eb:b2:a0:04:c8:56:05:5c:8f:81:20:61:98:61:04:
85:c2:fc:00:e6:ef:4a:67:d2:ad:28:f0:de:f0:79:ea:d7:76:
8c:8e:3c:78:47:ce:25:b9:e3:e1:f8:1b:01:fb:52:d0:de:bf:
e0:f3:bf:7f:5e:95:e4:94:5d:4d:42:37:10:ca:07:a6:11:56:
7f:72:16:00:4b:07:9f:d7:a8:d6:7a:5d:97:ee:62:03:86:58:
04:1c:cc:ef:9a:2a:98:70:79:fb:f3:d3:88:b9:66:0d:62:f4:
6f:ba:d8:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEL7+4DMUolXLnxC8sOaGxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTM2OTk3Nzk1M2U1YmQ3ZGYzMzgxNzg4YTQyNWE1N2Jj
MWMyNTQwHhcNMjYxMDA1MTIwMDM1WhcNMjYxMDA2MTIwMDM1WjAzMTEwLwYDVQQD
Eyg4NjZkYTQ2ODI4ZTExYzdlNWQyZTE3ZGZiMGZjNmJkZWY2MGE3MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn45+mWu1qBu6/9EjIeprGg/vOeo
kJBVuH6TkQD0yX2/vIu8X6xB/hw6B0R+2tgAE4LFLvcaZyYm4rPEBUDP3+x8gR5G
W9UXr1eZhRje4/64Vj3OwHJhdvjFIaJv4Nj8ZWX3JsmORlFjrrrmN6PdvC/98DXc
BIGe8vwR+6zUlvH1dim1JvfVdnqAHSaEZXjWB9YYWsBHA57BzsiDPMk2OK7ocPLQ
2XBLZAPJZkK91szzpOu6Em0YgHp7pgKkG66ETd8iSrw5VSluOqkv1WOsRb3yU/1o
Nl0i8cuGJ5oezVDW4ae1iR9+kRSaIMfxMfVIYd7oOgKAD9DuTBdgMWkV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZtpGgo4Rx+XS4X37D8a972CnGcMB8GA1UdIwQY
MBaAFF3jaZd5U+W9ffM4F4ikJaV7wcJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVOcGwzbFQ1YjE5OHpnWGlLUWxwWHZCd2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YmRmMzAtZjJhOC00NGZmLTg3Mzct
YTQ3MmZiMmQ0YzkwLzEvWGVOcGwzbFQ1YjE5OHpnWGlLUWxwWHZCd2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80YmRmMzAtZjJhOC00NGZmLTg3MzctYTQ3MmZiMmQ0Yzkw
LzEvWGVOcGwzbFQ1YjE5OHpnWGlLUWxwWHZCd2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+Lz83As
kAyUTbGzf8veHlWcKBNF1URTJ7GAeDXMk9lhI7hQV1HTrkOmUs58p7TMAwk1FPWH
4LLGyQe5Jkt7xPPbH/uiFoPIan35p+UHkPs0JQ181EHbL9J56L639Lek1MZzLItQ
djcNpy0LGlXSSGXowbV/qOOH3spQ/SQ0ZBSmSWltQvFkuheuCqEQlxf+ddNw67Kg
BMhWBVyPgSBhmGEEhcL8AObvSmfSrSjw3vB56td2jI48eEfOJbnj4fgbAftS0N6/
4PO/f16V5JRdTUI3EMoHphFWf3IWAEsHn9eo1npdl+5iA4ZYBBzM75oqmHB5+/PT
iLlmDWL0b7rYyw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:47:26 2026 by rpki-client