Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier: 94nmEzAWjS4tVeqIpcDSHs37FNX5WqQY54RDvqHGMRM=
Subject key identifier: 7E:02:B2:30:4B:0A:36:8A:6A:C5:DA:C1:A3:11:E3:5B:28:B0:CC:90
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 01A1DFF18C05D55AA5F8790B71A138C608B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number: 1116
Signing time: Sun 15 Nov 2026 16:01:51 +0000
Manifest this update: Sun 15 Nov 2026 16:01:51 +0000
Manifest next update: Mon 16 Nov 2026 16:01:51 +0000
Files and hashes: 1: J94Ph5ck7enH36KLAo0q7sehkDs.roa (hash: tFAQN7l0foOD5FNqpnDpo4ufVC2+YXU4Iia2mg6KkgY=)
2: oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa (hash: 4+asMob/DRGngq6GAVzO2x+uYasSdWuu4BCpYVlKFoo=)
3: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: TU+BcxetXIZrhsgVmXD/b2/vKMW7lg00kYd9gl8ZJEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:8c:05:d5:5a:a5:f8:79:0b:71:a1:38:c6:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Nov 15 16:01:51 2026 GMT
Not After : Nov 16 16:01:51 2026 GMT
Subject: CN=7e02b2304b0a368a6ac5dac1a311e35b28b0cc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:6d:97:e4:01:69:aa:60:ec:a6:0a:29:1c:
46:50:b9:ca:db:15:70:eb:52:f9:1a:ec:8c:7d:8c:
b7:32:3b:7f:1a:96:89:cd:97:ad:70:ad:3f:a8:0e:
f9:95:2a:8c:3e:05:11:56:16:dc:62:69:94:3a:02:
fa:e2:71:d5:9d:0f:5c:2d:09:a5:5a:68:64:6b:1e:
e5:5a:4c:12:4f:6d:86:f0:bb:f9:d2:4b:df:63:6f:
e0:5e:e9:6c:16:93:db:6d:40:aa:40:a0:16:fd:ac:
e6:ff:9a:08:1e:29:e9:ea:8e:06:a0:9f:e9:e2:8f:
f8:34:90:33:54:e7:94:b7:4f:23:b3:90:82:6e:4f:
ff:0f:23:33:c0:87:3b:93:1c:14:67:0d:f8:9d:d7:
73:68:04:5f:23:0e:34:8d:90:2f:bf:78:7c:27:51:
2d:99:a3:0e:2a:c0:78:ab:09:c6:75:f4:88:54:24:
4f:5e:0f:23:08:56:1b:58:e3:37:0c:5f:77:92:57:
a9:f5:fe:98:a8:8e:9a:da:77:1b:82:44:8e:9d:ab:
06:2a:a8:0b:d4:0e:26:05:4a:54:30:df:4e:c5:1a:
4f:45:c1:8a:da:87:c3:6b:5e:d3:ce:3a:a8:b3:ef:
f0:cd:73:06:f4:d2:dc:00:11:ad:1a:81:bb:24:57:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:02:B2:30:4B:0A:36:8A:6A:C5:DA:C1:A3:11:E3:5B:28:B0:CC:90
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:01:f0:8b:b3:13:b3:e1:d8:33:95:22:6d:fc:5f:60:1e:72:
53:6f:8f:9f:01:72:f7:a3:9e:af:38:6b:47:89:5d:f3:36:fa:
cf:73:c8:51:b7:6a:a3:7e:74:5e:d7:d1:e7:51:b8:73:51:07:
35:0d:e9:f6:a2:17:eb:60:8e:11:58:3b:aa:c4:88:88:83:10:
01:2b:48:ba:e1:ad:92:83:1a:4a:d9:00:0b:2d:1e:f7:9e:a3:
59:e7:c6:e0:57:9e:49:88:d8:e5:63:0b:69:6b:aa:e5:8f:0b:
87:44:d5:e2:64:e9:6d:89:61:d8:53:ca:3c:13:1c:ad:f8:a4:
f4:32:06:fc:f9:7a:b9:69:73:ce:f9:08:08:dd:6f:aa:3e:48:
6c:39:03:b3:60:d9:59:c2:c3:a2:42:36:ea:da:bb:07:99:cf:
78:3e:3a:a0:eb:f9:d8:a9:07:c0:2c:bf:94:b0:3a:52:ed:59:
6f:14:5f:5c:22:a1:cb:97:fb:60:5d:7a:05:c0:76:bf:e6:92:
43:6e:77:d0:28:b5:aa:0c:3f:59:94:c9:97:45:dd:73:59:a5:
f3:e8:54:87:3f:38:7e:75:3f:f3:3c:3e:6c:8f:d9:3b:db:39:
2c:f4:39:74:62:99:8e:06:f4:7a:b4:ea:c8:8e:c7:9a:86:0b:
76:06:bd:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8YwF1Vql+HkLcaE4xgi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1
NzcyMTMwHhcNMjYxMTE1MTYwMTUxWhcNMjYxMTE2MTYwMTUxWjAzMTEwLwYDVQQD
Eyg3ZTAyYjIzMDRiMGEzNjhhNmFjNWRhYzFhMzExZTM1YjI4YjBjYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTFtl+QBaapg7KYKKRxGULnK2xVw
61L5GuyMfYy3Mjt/GpaJzZetcK0/qA75lSqMPgURVhbcYmmUOgL64nHVnQ9cLQml
Wmhkax7lWkwST22G8Lv50kvfY2/gXulsFpPbbUCqQKAW/azm/5oIHinp6o4GoJ/p
4o/4NJAzVOeUt08js5CCbk//DyMzwIc7kxwUZw34nddzaARfIw40jZAvv3h8J1Et
maMOKsB4qwnGdfSIVCRPXg8jCFYbWOM3DF93klep9f6YqI6a2ncbgkSOnasGKqgL
1A4mBUpUMN9OxRpPRcGK2ofDa17Tzjqos+/wzXMG9NLcABGtGoG7JFfIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4CsjBLCjaKasXawaMR41sosMyQMB8GA1UdIwQY
MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt
YjhlYTE4ZWI3NWY0LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0
LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQHwi7MT
s+HYM5UibfxfYB5yU2+PnwFy96OerzhrR4ld8zb6z3PIUbdqo350XtfR51G4c1EH
NQ3p9qIX62COEVg7qsSIiIMQAStIuuGtkoMaStkACy0e956jWefG4FeeSYjY5WML
aWuq5Y8Lh0TV4mTpbYlh2FPKPBMcrfik9DIG/Pl6uWlzzvkICN1vqj5IbDkDs2DZ
WcLDokI26tq7B5nPeD46oOv52KkHwCy/lLA6Uu1ZbxRfXCKhy5f7YF16BcB2v+aS
Q2530Ci1qgw/WZTJl0Xdc1ml8+hUhz84fnU/8zw+bI/ZO9s5LPQ5dGKZjgb0erTq
yI7HmoYLdga94Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:57:45 2026 by rpki-client