Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: mc2Ur9DVOfaCy31/yKOL/dzyuJX1sYIAPVPDxsGNBYw=
Subject key identifier: 36:AE:D3:51:7B:1D:E4:98:D6:C0:7A:D2:CC:06:55:E8:49:1F:A6:5D
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01A105806C710E25B78D9B3B4AE1D633D867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0882
Signing time: Sun 04 Oct 2026 06:01:04 +0000
Manifest this update: Sun 04 Oct 2026 06:01:04 +0000
Manifest next update: Mon 05 Oct 2026 06:01:04 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: WC6oxvPQTnNR3vJN0HZ4j0OML3kLna093ZraCmNSTJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:6c:71:0e:25:b7:8d:9b:3b:4a:e1:d6:33:d8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Oct 4 06:01:04 2026 GMT
Not After : Oct 5 06:01:04 2026 GMT
Subject: CN=36aed3517b1de498d6c07ad2cc0655e8491fa65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:d9:c3:c7:1d:bf:ba:1f:a8:8f:dc:0c:07:
c4:23:6e:5b:1f:5f:88:d7:a1:b5:0c:85:52:7c:7e:
01:9c:79:5f:2d:a8:24:03:9f:c6:f2:c0:d8:36:cc:
b9:15:0b:d7:45:ae:2b:39:91:cc:2c:5f:76:bd:36:
cc:d1:50:ca:ba:3e:66:43:4a:92:01:c0:b9:4b:d1:
7c:a1:5d:f5:84:93:34:3e:df:45:01:f0:12:8b:52:
d1:5a:eb:01:12:c2:59:a4:37:0e:64:62:32:c3:c3:
be:37:05:19:31:bf:7b:3e:86:6c:8b:a5:c3:30:b3:
9c:55:e0:05:70:15:ac:36:d6:2a:cc:a3:51:14:10:
c6:ed:34:1b:b3:f6:17:77:73:24:8d:3b:dc:f1:aa:
01:f7:55:ba:8c:c9:63:f4:a6:af:02:a3:52:f1:19:
f0:7f:98:c9:76:07:30:e9:c0:7e:d7:cd:d4:99:a0:
d8:b1:ae:a3:ac:ff:b1:40:c4:90:5e:f1:77:c3:74:
89:82:81:ee:eb:58:aa:3a:69:59:59:91:d3:9e:7c:
8e:3c:dc:57:4c:ca:3b:d8:80:1e:74:8f:df:2f:6d:
68:0e:f3:6a:f3:51:f6:d8:6f:44:6f:09:86:6c:43:
f6:29:75:49:d2:1b:5a:f5:72:1f:44:35:18:02:0e:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AE:D3:51:7B:1D:E4:98:D6:C0:7A:D2:CC:06:55:E8:49:1F:A6:5D
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:8a:90:c8:7a:66:a9:63:c3:8d:74:d2:ce:c3:e8:b4:f5:
36:24:ee:7e:b1:a6:c7:88:2c:85:25:d6:f4:72:7c:f9:bb:4b:
f1:6d:aa:80:21:08:f4:59:18:12:7f:ad:db:af:b2:cd:c8:8a:
38:be:29:58:d0:ee:0d:a0:5a:27:1e:9d:f3:9a:d0:cb:61:b7:
87:e2:48:f9:3b:e3:44:2b:50:77:cf:18:40:4c:2b:4e:7f:74:
fb:56:9a:0c:cb:a6:95:64:99:1c:80:4c:12:7a:18:2d:87:ac:
2f:f8:ce:7f:ed:7c:cc:fe:21:66:34:25:84:e8:e3:32:d0:25:
ff:40:23:2b:f5:f0:02:4d:6d:82:ec:c3:bc:43:f1:25:51:31:
61:c9:ed:d0:69:56:b7:84:e3:06:05:7f:07:54:13:ae:1f:01:
28:a4:90:51:6d:94:84:55:a9:da:6d:14:c4:f2:a4:f4:1b:6e:
55:d1:87:9e:d9:32:d4:53:76:d1:ec:00:63:fc:4d:42:ff:38:
6d:fa:83:a2:42:fc:10:3a:e8:cd:79:96:4f:64:29:b1:d5:08:
08:01:5f:05:08:c7:c7:1d:b2:8c:68:a8:ab:e6:33:fd:39:30:
ed:3d:56:b7:2c:07:9c:22:68:42:94:f0:3c:ec:08:b2:df:0b:
53:ad:9e:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFgGxxDiW3jZs7SuHWM9hnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2U1YTJjZjZkMjgwMTVkYmNhYTI4NTBkMjAxM2IzNjVl
NGM5MzEwHhcNMjYxMDA0MDYwMTA0WhcNMjYxMDA1MDYwMTA0WjAzMTEwLwYDVQQD
EygzNmFlZDM1MTdiMWRlNDk4ZDZjMDdhZDJjYzA2NTVlODQ5MWZhNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFDZw8cdv7ofqI/cDAfEI25bH1+I
16G1DIVSfH4BnHlfLagkA5/G8sDYNsy5FQvXRa4rOZHMLF92vTbM0VDKuj5mQ0qS
AcC5S9F8oV31hJM0Pt9FAfASi1LRWusBEsJZpDcOZGIyw8O+NwUZMb97PoZsi6XD
MLOcVeAFcBWsNtYqzKNRFBDG7TQbs/YXd3MkjTvc8aoB91W6jMlj9KavAqNS8Rnw
f5jJdgcw6cB+183UmaDYsa6jrP+xQMSQXvF3w3SJgoHu61iqOmlZWZHTnnyOPNxX
TMo72IAedI/fL21oDvNq81H22G9EbwmGbEP2KXVJ0hta9XIfRDUYAg7lSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDau01F7HeSY1sB60swGVehJH6ZdMB8GA1UdIwQY
MBaAFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEt
OGQ2Zjc0ODNlNjMyLzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEtOGQ2Zjc0ODNlNjMy
LzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9qKkMh6
Zqljw4100s7D6LT1NiTufrGmx4gshSXW9HJ8+btL8W2qgCEI9FkYEn+t26+yzciK
OL4pWNDuDaBaJx6d85rQy2G3h+JI+TvjRCtQd88YQEwrTn90+1aaDMumlWSZHIBM
EnoYLYesL/jOf+18zP4hZjQlhOjjMtAl/0AjK/XwAk1tguzDvEPxJVExYcnt0GlW
t4TjBgV/B1QTrh8BKKSQUW2UhFWp2m0UxPKk9BtuVdGHntky1FN20ewAY/xNQv84
bfqDokL8EDrozXmWT2QpsdUICAFfBQjHxx2yjGioq+Yz/Tkw7T1WtywHnCJoQpTw
POwIst8LU62e9A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:54:45 2026 by rpki-client