Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: eiDlnN3AXxp4DxCJcsZnaTWTAQiryiKdN0t/A0lLSKM=
Subject key identifier: 63:4E:2C:54:CE:50:AA:33:9B:92:B7:DC:31:4E:42:8D:41:2A:97:A1
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 01A1DF153BC3D58BE31B5055200C1E4DDFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 0AD3
Signing time: Sun 15 Nov 2026 12:01:13 +0000
Manifest this update: Sun 15 Nov 2026 12:01:13 +0000
Manifest next update: Mon 16 Nov 2026 12:01:13 +0000
Files and hashes: 1: LHKcw1T_xip-dQxjFBPkIK8lD-g.roa (hash: sNHczNheeTOetPwxKMLP2zssG5kyELZ3Q0OnzJ3Pj7k=)
2: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: jpV3SPs/PO81f7e/5ijkEyjE5e3fQtMeUpSW7yUVLNw=)
3: osisThlliKJSV60f8xbtmQw-3zw.asa (hash: lh085A0Aw0xioDb0KAwgTU5AE1K48amffPbgbggLPz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:3b:c3:d5:8b:e3:1b:50:55:20:0c:1e:4d:df:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Nov 15 12:01:13 2026 GMT
Not After : Nov 16 12:01:13 2026 GMT
Subject: CN=634e2c54ce50aa339b92b7dc314e428d412a97a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:ad:6b:5a:75:a4:46:14:52:91:96:30:d2:
16:a0:7f:28:8e:b6:0d:8d:61:9c:f0:5a:3e:85:29:
d7:ae:28:8a:89:aa:c6:08:6e:05:8c:ed:e9:a5:b7:
e9:70:70:99:76:15:ae:f9:90:af:19:35:b4:b8:0a:
9e:86:fa:3b:5b:1a:bc:ab:56:84:fd:e6:81:b5:55:
42:34:24:19:c9:c9:e0:8f:a2:5a:ff:35:78:b6:05:
3a:37:9d:59:9d:18:28:3b:68:45:1f:ce:6a:ac:15:
2c:0b:c8:47:73:63:7b:19:54:80:c4:00:3e:5b:ea:
77:d7:31:6b:b9:d4:c8:0c:f3:bc:fd:04:02:fd:14:
c0:cd:16:2b:08:8e:45:35:f3:89:e9:7c:24:c7:b9:
4a:44:7a:3e:ea:af:35:00:60:a6:d9:52:c3:c8:8c:
c9:ff:9e:1d:7b:5d:8c:94:8b:6d:a7:4f:1c:b6:0a:
da:f1:b9:dd:a8:61:d9:9f:73:73:01:c7:3e:4c:d7:
57:f4:2c:03:d2:ba:f2:5d:7c:3a:3f:11:7e:0a:8c:
65:a7:99:2a:3d:36:1d:d9:e2:5d:24:ad:c5:76:66:
ff:f7:40:a1:66:58:7a:08:8d:e9:93:e3:90:0e:7f:
69:39:cf:47:06:2f:b8:23:57:c5:94:19:89:78:85:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:2C:54:CE:50:AA:33:9B:92:B7:DC:31:4E:42:8D:41:2A:97:A1
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:97:47:b9:10:fe:dd:6c:2d:a3:a8:3a:db:19:d0:51:4a:
4c:c5:49:5d:bd:ad:de:68:27:61:70:4d:c2:42:8a:d1:ad:25:
3d:28:7c:f8:28:04:8f:0e:a6:59:70:5f:49:06:05:c3:20:10:
94:38:5c:15:d6:c9:b0:13:9c:19:48:c0:f2:21:89:97:24:fd:
99:48:0f:5e:4f:55:8a:d4:23:35:c3:6a:8c:cc:1b:63:6b:d0:
60:c2:2b:7b:99:06:a9:7a:8f:3a:4b:40:a5:6b:3e:c8:9b:82:
da:ea:67:7c:1a:c7:5b:80:65:fc:23:8d:a9:2a:f7:9c:4f:97:
d9:d7:99:92:c0:be:b2:9c:d5:5e:69:17:a1:03:42:f2:d2:ea:
f8:78:d5:6e:62:83:36:70:24:21:e7:51:d7:1e:d2:ba:61:b3:
7a:79:bd:1a:62:02:24:d4:b7:8a:b0:f7:79:80:85:46:f6:79:
3f:9b:10:05:21:30:ce:9c:3b:d8:20:e0:00:d7:2d:2c:a9:9f:
46:f2:c3:32:60:d5:b1:4f:11:09:be:06:ba:92:2b:dd:fc:12:
24:28:f1:5f:5e:c9:e6:b3:b8:bc:b2:0e:57:b9:df:c5:b1:e0:
6e:67:7b:ba:a8:56:b7:f7:3f:36:cc:0e:e9:b9:1e:e7:84:b6:
5d:06:63:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfFTvD1YvjG1BVIAweTd+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTRkNTFhMzI0N2IxN2Y2Zjk2YTBjY2UyNTMwMTkyZGM5
Zjc0MjIwHhcNMjYxMTE1MTIwMTEzWhcNMjYxMTE2MTIwMTEzWjAzMTEwLwYDVQQD
Eyg2MzRlMmM1NGNlNTBhYTMzOWI5MmI3ZGMzMTRlNDI4ZDQxMmE5N2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA076ta1p1pEYUUpGWMNIWoH8ojrYN
jWGc8Fo+hSnXriiKiarGCG4FjO3ppbfpcHCZdhWu+ZCvGTW0uAqehvo7Wxq8q1aE
/eaBtVVCNCQZycngj6Ja/zV4tgU6N51ZnRgoO2hFH85qrBUsC8hHc2N7GVSAxAA+
W+p31zFrudTIDPO8/QQC/RTAzRYrCI5FNfOJ6Xwkx7lKRHo+6q81AGCm2VLDyIzJ
/54de12MlIttp08ctgra8bndqGHZn3NzAcc+TNdX9CwD0rryXXw6PxF+Coxlp5kq
PTYd2eJdJK3Fdmb/90ChZlh6CI3pk+OQDn9pOc9HBi+4I1fFlBmJeIVWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNOLFTOUKozm5K33DFOQo1BKpehMB8GA1UdIwQY
MBaAFF5U1RoyR7F/b5agzOJTAZLcn3QiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy82NTI0ZjYtNTMyMC00Njg2LWE1YzMt
NzJlMWZjNGEzMDZlLzEvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy82NTI0ZjYtNTMyMC00Njg2LWE1YzMtNzJlMWZjNGEzMDZl
LzEvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEe2XR7kQ
/t1sLaOoOtsZ0FFKTMVJXb2t3mgnYXBNwkKK0a0lPSh8+CgEjw6mWXBfSQYFwyAQ
lDhcFdbJsBOcGUjA8iGJlyT9mUgPXk9VitQjNcNqjMwbY2vQYMIre5kGqXqPOktA
pWs+yJuC2upnfBrHW4Bl/CONqSr3nE+X2deZksC+spzVXmkXoQNC8tLq+HjVbmKD
NnAkIedR1x7SumGzenm9GmICJNS3irD3eYCFRvZ5P5sQBSEwzpw72CDgANctLKmf
RvLDMmDVsU8RCb4GupIr3fwSJCjxX17J5rO4vLIOV7nfxbHgbmd7uqhWt/c/NswO
6bke54S2XQZjhA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:34:46 2026 by rpki-client