Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: a4K9n9BalC86e2j7yNObykQc8qz2rQ//T0beD3QoiJY=
Subject key identifier: 26:3F:77:0B:B3:DA:8C:58:6B:17:83:1A:00:D5:48:8C:D3:D2:AE:63
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 01A0E7AEEDFD2C65974E2079DC4008DAA393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 105D
Signing time: Mon 28 Sep 2026 11:03:16 +0000
Manifest this update: Mon 28 Sep 2026 11:03:16 +0000
Manifest next update: Tue 29 Sep 2026 11:03:16 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: ni3Gu7VzTLrtp7yBRfPieUfKrgB6Fnqjn9XEVjmyyIM=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:ed:fd:2c:65:97:4e:20:79:dc:40:08:da:a3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Sep 28 11:03:16 2026 GMT
Not After : Sep 29 11:03:16 2026 GMT
Subject: CN=263f770bb3da8c586b17831a00d5488cd3d2ae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:5e:b6:2b:dc:f0:94:b7:e5:cb:1e:ca:53:
bd:3b:fc:0f:02:72:b7:9b:3a:69:74:5b:cd:0b:4e:
94:71:9a:71:25:30:a8:68:b5:7f:94:4e:27:9f:0b:
3f:ad:f7:c3:14:b0:d3:e6:e8:83:1a:29:8b:f2:3a:
54:59:a9:20:44:76:e3:5a:4d:fa:99:1d:86:dc:1a:
70:27:02:8d:3d:b3:8b:d4:84:b1:73:27:4d:a4:b0:
b3:88:37:74:7a:ae:d8:a0:4d:78:43:a7:d5:2e:75:
e4:80:cf:a4:4c:0c:b9:87:26:a5:f6:83:d5:0e:3b:
aa:14:0b:ce:e4:6d:4e:67:11:67:17:11:27:b7:24:
06:4a:18:89:dd:35:0e:e5:c7:d4:55:9e:67:66:6d:
7b:9a:6f:57:e0:46:91:ab:a0:b4:fa:a9:db:79:98:
45:4c:fe:4a:10:0e:5d:f6:37:a0:82:6e:3a:76:4e:
0d:68:e3:66:6e:a0:da:55:ef:ce:fa:4d:55:05:d2:
35:96:40:ab:82:8b:4c:6e:78:c7:94:9c:78:79:ca:
ca:86:9a:cc:b7:d4:65:95:08:ca:4d:39:be:d9:a5:
26:fa:4a:cd:0d:83:73:f5:a5:e0:20:b9:87:33:0d:
4d:e4:bc:09:72:3d:4a:2f:f5:c4:2b:84:97:9b:fd:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:77:0B:B3:DA:8C:58:6B:17:83:1A:00:D5:48:8C:D3:D2:AE:63
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a2:33:42:ab:13:3c:c0:cb:2b:e4:89:48:66:58:b2:29:a3:
ee:ad:46:b4:cd:6a:a7:56:a1:81:61:67:3a:f4:c2:c2:04:08:
1b:52:a3:ac:78:97:0a:18:b3:9d:55:07:ef:57:e8:b2:70:8d:
bc:cf:ac:b8:20:e5:1e:87:06:0d:6b:a2:40:9f:41:9c:25:99:
cc:38:66:9c:b5:95:5a:ea:7c:c3:2c:9d:93:f7:69:9a:dc:d4:
3c:76:2b:fb:62:e2:1f:2b:0e:3b:bc:81:05:df:4c:a3:cf:8b:
6d:02:f1:70:a0:4d:e8:eb:62:a8:3d:f4:6b:fc:a2:ee:a5:14:
27:66:80:a1:7d:ed:d7:7b:93:aa:e1:55:01:08:4a:d3:c6:9e:
2b:c7:9f:e3:52:fe:31:92:5f:05:7f:76:f1:20:c2:33:49:9b:
a7:42:73:0f:b8:20:51:69:82:d5:4a:e5:69:6c:17:a7:b1:39:
64:6b:57:af:57:11:c3:74:f2:75:74:26:0f:07:fa:c5:6e:cf:
49:73:f4:f9:60:26:fe:81:88:c8:4b:a1:3f:11:ed:29:d5:37:
b2:cc:a9:77:8a:09:1a:87:8b:18:6b:82:bf:8a:07:97:0d:26:
22:3d:b8:04:bb:75:f4:58:14:95:1e:fb:52:3b:b9:e0:53:94:
2c:95:78:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnru39LGWXTiB53EAI2qOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5
OTNjMDQwHhcNMjYwOTI4MTEwMzE2WhcNMjYwOTI5MTEwMzE2WjAzMTEwLwYDVQQD
EygyNjNmNzcwYmIzZGE4YzU4NmIxNzgzMWEwMGQ1NDg4Y2QzZDJhZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysFetivc8JS35cseylO9O/wPAnK3
mzppdFvNC06UcZpxJTCoaLV/lE4nnws/rffDFLDT5uiDGimL8jpUWakgRHbjWk36
mR2G3BpwJwKNPbOL1ISxcydNpLCziDd0eq7YoE14Q6fVLnXkgM+kTAy5hyal9oPV
DjuqFAvO5G1OZxFnFxEntyQGShiJ3TUO5cfUVZ5nZm17mm9X4EaRq6C0+qnbeZhF
TP5KEA5d9jeggm46dk4NaONmbqDaVe/O+k1VBdI1lkCrgotMbnjHlJx4ecrKhprM
t9RllQjKTTm+2aUm+krNDYNz9aXgILmHMw1N5LwJcj1KL/XEK4SXm/1PwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY/dwuz2oxYaxeDGgDVSIzT0q5jMB8GA1UdIwQY
MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt
YzY5ODcxZjVkMzA1LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1
LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKIzQqsT
PMDLK+SJSGZYsimj7q1GtM1qp1ahgWFnOvTCwgQIG1KjrHiXChiznVUH71fosnCN
vM+suCDlHocGDWuiQJ9BnCWZzDhmnLWVWup8wyydk/dpmtzUPHYr+2LiHysOO7yB
Bd9Mo8+LbQLxcKBN6OtiqD30a/yi7qUUJ2aAoX3t13uTquFVAQhK08aeK8ef41L+
MZJfBX928SDCM0mbp0JzD7ggUWmC1UrlaWwXp7E5ZGtXr1cRw3TydXQmDwf6xW7P
SXP0+WAm/oGIyEuhPxHtKdU3ssypd4oJGoeLGGuCv4oHlw0mIj24BLt19FgUlR77
Uju54FOULJV4mg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:39:37 2026 by rpki-client