Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier: 4YRDR0jVSZ+k/k2n24yDhOXmoqLkUmrAOMsSphaeQNk=
Subject key identifier: 17:22:DE:F8:81:DB:09:BA:63:F1:E1:24:46:CC:96:41:54:51:AD:6B
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 01A1DC4B64D5CE0C2D284F267F76630BF5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number: 1357
Signing time: Sat 14 Nov 2026 23:01:30 +0000
Manifest this update: Sat 14 Nov 2026 23:01:30 +0000
Manifest next update: Sun 15 Nov 2026 23:01:30 +0000
Files and hashes: 1: 7auibiwx_22MxRnQ-1dVxUSmV08.roa (hash: I5taVHa7nFeZIiRWcVfBiMHapyCP1aSHqSZAvsnJ/h0=)
2: Huv8_F7CU0_Jslnzwh9x9lhwpc0.roa (hash: que/wANCXPBVboi+Ao6/Mhrzm4uO58lF/bE0KnuyKBc=)
3: TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa (hash: rGtYPfugPBoAr+vznSLu3abrcQ5ZUu7nfMCulcJMbYg=)
4: WbdWkBmU1v3RupxurBj9x05pMHo.roa (hash: R9jfiRZyTl1tiVQ4+yD+BgH5RpUwxYDYh/xfQEicvB0=)
5: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: QMvArdSYGHwGbSNRdYCYVTL01vnbrShxz2MI7fdFnqE=)
6: YcTggkw1dIIwon9zpxmI36qcgzY.roa (hash: hJIPq4cJhvmtr5AA2Y+pzfZ+vAbq2fL2IZZMCvtTNqY=)
7: wDhMGJ9NzXfEad9sT6Le_xs3iaE.roa (hash: zPKoEOiN3uariB64Rf296KkD/lWfDnDeFg2GGweepII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:64:d5:ce:0c:2d:28:4f:26:7f:76:63:0b:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Nov 14 23:01:30 2026 GMT
Not After : Nov 15 23:01:30 2026 GMT
Subject: CN=1722def881db09ba63f1e12446cc96415451ad6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:fd:39:9a:b8:12:cb:06:38:9e:43:be:d4:
db:a2:a9:d0:b4:09:f9:ce:83:aa:9d:24:5d:10:e1:
39:6d:20:63:be:43:72:94:e6:60:9c:5d:32:e5:fc:
db:c3:f1:61:21:1e:56:59:ab:e5:de:28:24:1f:ba:
11:52:16:f3:81:8e:7d:00:d1:62:4d:ea:3d:11:12:
40:08:f8:71:f2:e9:df:be:ad:76:9e:be:91:e5:b8:
dd:65:ef:85:9a:00:14:47:44:36:22:2d:0c:60:7f:
a5:1b:de:21:1d:de:a2:36:6b:89:54:e2:20:1b:2a:
5a:57:67:68:d8:da:2a:75:10:c0:53:c4:6f:d5:67:
df:96:a7:09:da:2a:b3:4d:39:9c:09:59:3c:33:89:
2b:f4:38:fc:12:08:cd:ec:74:66:80:7e:71:05:6c:
ef:33:19:fd:dd:1f:6b:77:99:25:47:f1:ca:73:26:
8f:86:85:03:2d:80:9d:fe:44:46:c6:73:36:98:86:
33:f1:24:1f:00:62:ea:2c:5a:bc:fe:7f:1c:70:c2:
ce:d9:d5:48:d6:ea:bc:4f:8a:b5:ee:e9:df:76:aa:
b6:80:95:a9:c9:fc:ce:77:c2:2a:ed:e1:1c:15:c7:
05:2f:8a:9f:7e:93:c1:21:05:c9:87:73:eb:d7:f5:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:DE:F8:81:DB:09:BA:63:F1:E1:24:46:CC:96:41:54:51:AD:6B
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b4:9d:ce:f5:f6:a9:51:f5:22:e5:6c:5c:06:ff:25:ec:c8:
72:d7:7b:59:b7:9f:04:04:54:f6:80:c9:25:21:73:db:8d:92:
07:32:eb:7b:86:31:f1:36:cd:75:64:fa:32:f7:80:fa:97:c4:
77:cd:57:2d:c9:3f:a9:99:4e:01:6a:32:8a:99:b5:32:7f:56:
a4:35:1d:c8:d6:3b:1e:75:c1:31:4e:2a:3e:b5:26:65:ad:90:
f6:29:33:11:f3:7b:a7:2e:8b:da:02:a3:ca:b5:b6:6b:4e:5e:
df:f9:6c:c7:be:78:98:69:14:8e:66:18:92:1a:0b:02:98:0d:
9f:8d:1b:9a:a2:32:26:e6:ab:c4:ba:36:dd:6a:12:f7:9a:e8:
04:f5:dc:89:74:c6:08:ba:e3:bd:ac:6a:76:0c:c0:66:7c:36:
86:38:c0:c0:c6:21:37:42:cd:24:fb:ce:43:42:7a:b8:3d:51:
a6:7a:5b:a1:62:a0:4e:f3:39:ab:8b:67:d7:03:9e:96:de:eb:
e7:2c:87:31:da:b2:8d:0c:a1:f0:8d:f8:e6:bc:b3:51:aa:17:
4a:49:d2:e6:d3:16:bd:45:70:0a:b9:c7:7f:8f:f9:2f:75:fb:
f2:de:08:dd:02:51:36:16:99:fe:0f:6b:fe:44:d3:64:45:29:
11:30:f6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcS2TVzgwtKE8mf3ZjC/XjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDIyNmE3MDRjZjYyMGViMjAwMGYyN2U3YTkxOWNlNzMw
OTkxYmUwHhcNMjYxMTE0MjMwMTMwWhcNMjYxMTE1MjMwMTMwWjAzMTEwLwYDVQQD
EygxNzIyZGVmODgxZGIwOWJhNjNmMWUxMjQ0NmNjOTY0MTU0NTFhZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQD9OZq4EssGOJ5DvtTboqnQtAn5
zoOqnSRdEOE5bSBjvkNylOZgnF0y5fzbw/FhIR5WWavl3igkH7oRUhbzgY59ANFi
Teo9ERJACPhx8unfvq12nr6R5bjdZe+FmgAUR0Q2Ii0MYH+lG94hHd6iNmuJVOIg
GypaV2do2NoqdRDAU8Rv1WfflqcJ2iqzTTmcCVk8M4kr9Dj8EgjN7HRmgH5xBWzv
Mxn93R9rd5klR/HKcyaPhoUDLYCd/kRGxnM2mIYz8SQfAGLqLFq8/n8ccMLO2dVI
1uq8T4q17unfdqq2gJWpyfzOd8Iq7eEcFccFL4qffpPBIQXJh3Pr1/XmNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBci3viB2wm6Y/HhJEbMlkFUUa1rMB8GA1UdIwQY
MBaAFF8CJqcEz2IOsgAPJ+epGc5zCZG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAt
NzVkOWNlNWI4ZDljLzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAtNzVkOWNlNWI4ZDlj
LzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7SdzvX2
qVH1IuVsXAb/JezIctd7WbefBARU9oDJJSFz242SBzLre4Yx8TbNdWT6MveA+pfE
d81XLck/qZlOAWoyipm1Mn9WpDUdyNY7HnXBMU4qPrUmZa2Q9ikzEfN7py6L2gKj
yrW2a05e3/lsx754mGkUjmYYkhoLApgNn40bmqIyJuarxLo23WoS95roBPXciXTG
CLrjvaxqdgzAZnw2hjjAwMYhN0LNJPvOQ0J6uD1RpnpboWKgTvM5q4tn1wOelt7r
5yyHMdqyjQyh8I345ryzUaoXSknS5tMWvUVwCrnHf4/5L3X78t4I3QJRNhaZ/g9r
/kTTZEUpETD2+g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:44:46 2026 by rpki-client