Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: aBdhwKElecJNxsvDy2nuGL+WlaFilhOPHZWr5It9ckI=
Subject key identifier: 25:3C:8F:5D:0A:6C:B4:99:14:12:BB:12:FF:6D:AE:C9:6F:C9:41:7E
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 01A10135E6B65BC0FF9DCBDC4536B01C3AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 10:01:11 +0000
Manifest this update: Sat 03 Oct 2026 10:01:11 +0000
Manifest next update: Sun 04 Oct 2026 10:01:11 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: zw6SJytCvASyKHuKHikgJWB1TORtaPAdx2+Zq7cIU9M=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:e6:b6:5b:c0:ff:9d:cb:dc:45:36:b0:1c:3a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Oct 3 10:01:11 2026 GMT
Not After : Oct 4 10:01:11 2026 GMT
Subject: CN=253c8f5d0a6cb4991412bb12ff6daec96fc9417e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:96:74:f5:7f:8e:6c:a9:ca:0e:da:f5:b5:
e2:e0:12:d8:11:90:e8:f2:91:eb:6b:76:9d:c1:10:
42:09:3c:d6:ba:de:bc:50:0f:58:1b:c5:0e:d3:bf:
8a:0e:65:48:3d:1b:54:85:d8:c0:65:9c:cd:a3:cc:
82:ac:a3:da:80:fc:fb:01:a0:f2:eb:fd:0c:9b:6f:
05:4e:c8:ea:09:02:dc:d9:a3:2e:c3:35:8c:f8:e3:
19:39:6f:f7:26:ab:fb:08:08:67:bf:dd:33:8f:b4:
fe:81:03:7a:58:f6:2e:7a:84:36:24:8c:f7:ea:ab:
b7:ef:9f:70:fe:62:41:34:08:66:3e:8b:b5:57:d1:
20:7e:c8:a8:24:d1:c7:14:a3:0e:c4:c7:a9:64:e5:
5f:5c:4e:45:f0:f3:b4:33:56:0a:6e:42:13:9b:e9:
4f:20:e6:40:52:39:12:9d:81:fe:d5:c0:2d:5b:33:
cd:9a:16:8d:eb:e3:ff:9e:11:39:48:1b:f7:cf:3a:
cb:7b:72:eb:34:80:18:e7:09:df:de:85:19:e5:a8:
74:51:fd:e1:ee:bb:5a:a0:77:29:e1:1e:a9:84:18:
e9:30:d5:ce:81:a4:a8:fb:c2:e8:fa:ef:d9:28:a2:
be:33:a3:4e:73:48:ba:77:dd:b7:d7:f2:35:39:b8:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:8F:5D:0A:6C:B4:99:14:12:BB:12:FF:6D:AE:C9:6F:C9:41:7E
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:59:55:34:9a:2b:23:25:04:42:0d:a1:42:04:35:cc:2a:e5:
62:55:43:9b:23:99:05:ff:93:42:0c:48:e4:af:38:15:45:27:
60:d2:cc:1d:4d:5d:88:2e:13:bf:24:c8:cf:76:8b:52:e6:46:
91:43:89:2b:8e:30:61:1c:00:aa:d0:d5:93:53:c9:16:e7:2b:
a0:b1:6f:1e:7f:08:b9:72:7f:30:1f:43:fe:ad:90:da:4f:60:
25:ed:52:e8:1e:80:b1:b9:fd:e2:5f:d6:04:56:ae:2b:b9:ba:
67:24:17:a7:bb:4f:09:af:02:1f:92:f6:bc:e1:b7:19:f5:e8:
2e:e2:af:ba:70:db:30:c4:62:d8:ab:1d:d8:ef:76:bd:93:61:
6e:68:97:a1:d7:85:8b:86:77:f4:94:67:a8:c4:24:23:11:75:
e1:c3:d4:27:69:1e:92:3d:dc:91:5a:ee:86:02:0a:b3:bf:65:
87:88:78:2b:fd:b8:dc:d8:8f:85:5c:91:e5:c6:04:ed:4a:1d:
1d:48:84:25:c2:ed:1c:66:a1:3c:4f:2e:42:90:f6:e0:5f:87:
d0:e1:72:08:d4:c5:2c:de:9e:45:2b:10:53:da:ce:26:37:0f:
74:34:63:89:57:8e:3a:a0:8d:3e:fb:ff:bd:90:ce:93:42:d7:
f6:92:b5:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNea2W8D/ncvcRTawHDrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1
MWYyMWYwHhcNMjYxMDAzMTAwMTExWhcNMjYxMDA0MTAwMTExWjAzMTEwLwYDVQQD
EygyNTNjOGY1ZDBhNmNiNDk5MTQxMmJiMTJmZjZkYWVjOTZmYzk0MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgSWdPV/jmypyg7a9bXi4BLYEZDo
8pHra3adwRBCCTzWut68UA9YG8UO07+KDmVIPRtUhdjAZZzNo8yCrKPagPz7AaDy
6/0Mm28FTsjqCQLc2aMuwzWM+OMZOW/3Jqv7CAhnv90zj7T+gQN6WPYueoQ2JIz3
6qu3759w/mJBNAhmPou1V9EgfsioJNHHFKMOxMepZOVfXE5F8PO0M1YKbkITm+lP
IOZAUjkSnYH+1cAtWzPNmhaN6+P/nhE5SBv3zzrLe3LrNIAY5wnf3oUZ5ah0Uf3h
7rtaoHcp4R6phBjpMNXOgaSo+8Lo+u/ZKKK+M6NOc0i6d9231/I1ObhGZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU8j10KbLSZFBK7Ev9trslvyUF+MB8GA1UdIwQY
MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt
YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5
LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASllVNJor
IyUEQg2hQgQ1zCrlYlVDmyOZBf+TQgxI5K84FUUnYNLMHU1diC4TvyTIz3aLUuZG
kUOJK44wYRwAqtDVk1PJFucroLFvHn8IuXJ/MB9D/q2Q2k9gJe1S6B6Asbn94l/W
BFauK7m6ZyQXp7tPCa8CH5L2vOG3GfXoLuKvunDbMMRi2Ksd2O92vZNhbmiXodeF
i4Z39JRnqMQkIxF14cPUJ2kekj3ckVruhgIKs79lh4h4K/243NiPhVyR5cYE7Uod
HUiEJcLtHGahPE8uQpD24F+H0OFyCNTFLN6eRSsQU9rOJjcPdDRjiVeOOqCNPvv/
vZDOk0LX9pK1WQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 18:38:41 2026 by rpki-client