Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
File: XWsFtN3mw5OZctoT9iIH8ibeeSo.mft (raw, json)
Hash identifier: VxCXIJ2Fag9U0RO6pYThv9dDurFP+K+1YOJhuvb7U/U=
Subject key identifier: BA:F9:42:32:48:ED:EE:69:4C:79:BA:CF:F2:F6:71:57:D7:49:96:EE
Authority key identifier: 5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
Certificate issuer: /CN=5d6b05b4dde6c3939972da13f62207f226de792a
Certificate serial: 01A1005A6D81FA564A32D995BFC8C66894C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
Manifest number: FE
Signing time: Sat 03 Oct 2026 06:01:28 +0000
Manifest this update: Sat 03 Oct 2026 06:01:28 +0000
Manifest next update: Sun 04 Oct 2026 06:01:28 +0000
Files and hashes: 1: O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa (hash: Ws/iiURmVab3uVGnOVSnKwKNuJfPQAcJDFZkcNjz5Ks=)
2: XWsFtN3mw5OZctoT9iIH8ibeeSo.crl (hash: y5ywXVlLv18HsbPRzfu5hNgeSbaKvbREFfgmmFfJfV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:6d:81:fa:56:4a:32:d9:95:bf:c8:c6:68:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6b05b4dde6c3939972da13f62207f226de792a
Validity
Not Before: Oct 3 06:01:28 2026 GMT
Not After : Oct 4 06:01:28 2026 GMT
Subject: CN=baf9423248edee694c79bacff2f67157d74996ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:33:96:a2:38:ab:0c:71:65:8a:91:8d:74:
43:65:bd:9b:da:09:a1:34:61:7f:f1:bc:eb:a8:60:
79:3c:d9:44:26:05:d8:e8:9f:c5:de:c9:9a:31:da:
69:64:6b:67:78:5d:a0:bd:80:be:ce:6c:c4:e3:ab:
ce:dd:82:59:42:e0:ea:cf:13:d3:b7:f7:a0:28:fb:
fc:a1:f7:75:8e:4d:ff:7a:e9:bd:cf:d3:50:2f:15:
e9:e4:1c:02:a0:10:8c:72:89:41:69:fb:b2:11:19:
e7:51:b7:a8:cd:86:9e:d2:e4:e0:4a:82:b0:49:52:
37:08:00:68:3c:0c:cb:0e:79:f7:a3:b4:60:88:28:
23:0b:3c:cb:58:30:17:5b:96:59:2f:c7:5c:86:c7:
1a:4a:2d:2b:be:47:7a:cc:ae:e2:92:f5:75:e9:67:
ba:aa:46:cc:3d:11:a3:10:92:ef:0b:0c:1e:cd:ee:
36:84:7c:f7:61:f7:79:b7:9e:06:3d:b9:4f:df:ba:
5c:ff:e4:66:41:b1:dd:99:14:5a:a5:1c:91:2e:c4:
8d:89:f9:ae:46:d7:fb:25:a1:11:bb:92:c6:3e:c2:
74:05:89:f0:fa:4a:aa:e3:e6:1b:85:22:f9:4d:36:
3b:71:21:31:00:8c:ab:25:95:62:b3:67:2a:3d:64:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:42:32:48:ED:EE:69:4C:79:BA:CF:F2:F6:71:57:D7:49:96:EE
X509v3 Authority Key Identifier:
keyid:5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:27:ff:7d:7a:8c:51:ce:7d:20:6f:ee:71:26:b3:de:90:e8:
69:5c:8d:44:e6:06:1a:86:48:ac:7c:0b:8c:72:1a:18:30:61:
af:98:b1:0b:87:a4:50:e8:dc:79:34:8c:bc:7d:83:fd:51:83:
f5:47:17:72:a3:d3:d3:35:eb:48:1c:91:fc:fd:b2:29:84:29:
46:80:f6:34:d5:55:02:c3:c5:7c:45:c7:cb:6b:d1:ad:e2:5e:
e6:35:73:d4:0d:5a:04:ee:7b:ad:2b:26:ab:0d:45:72:25:e7:
da:40:b1:5c:c9:cc:84:47:8f:3d:db:ac:e1:6b:14:1a:b5:0e:
14:aa:53:1e:03:ab:48:f8:31:6f:ca:8a:f6:27:ec:5b:48:e6:
f1:be:90:eb:7b:f3:2b:27:3a:68:28:f0:9b:f7:25:41:71:fd:
bd:b0:4b:bf:68:82:5d:fc:4a:13:2b:e2:b9:2a:5b:e2:fd:34:
d2:a3:8d:bf:c5:2a:62:63:02:4e:58:26:90:15:f3:a2:0d:a0:
85:15:72:3b:e7:3e:c7:16:db:3c:fd:fa:37:fc:ca:61:5f:4c:
06:38:50:ce:d7:21:63:cb:03:f9:42:21:ed:f5:5b:b0:e2:26:
14:fd:73:7d:c0:86:0b:6d:40:3a:98:a8:33:a3:69:ce:fb:e2:
13:b7:55:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAWm2B+lZKMtmVv8jGaJTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmIwNWI0ZGRlNmMzOTM5OTcyZGExM2Y2MjIwN2YyMjZk
ZTc5MmEwHhcNMjYxMDAzMDYwMTI4WhcNMjYxMDA0MDYwMTI4WjAzMTEwLwYDVQQD
EyhiYWY5NDIzMjQ4ZWRlZTY5NGM3OWJhY2ZmMmY2NzE1N2Q3NDk5NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizYzlqI4qwxxZYqRjXRDZb2b2gmh
NGF/8bzrqGB5PNlEJgXY6J/F3smaMdppZGtneF2gvYC+zmzE46vO3YJZQuDqzxPT
t/egKPv8ofd1jk3/eum9z9NQLxXp5BwCoBCMcolBafuyERnnUbeozYae0uTgSoKw
SVI3CABoPAzLDnn3o7RgiCgjCzzLWDAXW5ZZL8dchscaSi0rvkd6zK7ikvV16We6
qkbMPRGjEJLvCwweze42hHz3Yfd5t54GPblP37pc/+RmQbHdmRRapRyRLsSNifmu
Rtf7JaERu5LGPsJ0BYnw+kqq4+YbhSL5TTY7cSExAIyrJZVis2cqPWTOKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr5QjJI7e5pTHm6z/L2cVfXSZbuMB8GA1UdIwQY
MBaAFF1rBbTd5sOTmXLaE/YiB/Im3nkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdzRnROM213NU9aY3RvVDlpSUg4aWJlZVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt
YjlkY2NhYjZkZjJlLzEvWFdzRnROM213NU9aY3RvVDlpSUg4aWJlZVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl
LzEvWFdzRnROM213NU9aY3RvVDlpSUg4aWJlZVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQif/fXqM
Uc59IG/ucSaz3pDoaVyNROYGGoZIrHwLjHIaGDBhr5ixC4ekUOjceTSMvH2D/VGD
9UcXcqPT0zXrSByR/P2yKYQpRoD2NNVVAsPFfEXHy2vRreJe5jVz1A1aBO57rSsm
qw1FciXn2kCxXMnMhEePPdus4WsUGrUOFKpTHgOrSPgxb8qK9ifsW0jm8b6Q63vz
Kyc6aCjwm/clQXH9vbBLv2iCXfxKEyviuSpb4v000qONv8UqYmMCTlgmkBXzog2g
hRVyO+c+xxbbPP36N/zKYV9MBjhQztchY8sD+UIh7fVbsOImFP1zfcCGC21AOpio
M6NpzvviE7dVFA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:39:20 2026 by rpki-client