Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier: hJEKwuZ8amRyk77LOuMkiNpqhRjq2NqvMprckrC3z64=
Subject key identifier: 85:5B:31:10:8B:31:50:DD:92:5B:56:F6:30:3B:F3:6B:E1:2B:F9:7F
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 01A054E7004901418A0C640552088E272991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number: 153B
Signing time: Sun 30 Aug 2026 23:00:20 +0000
Manifest this update: Sun 30 Aug 2026 23:00:20 +0000
Manifest next update: Mon 31 Aug 2026 23:00:20 +0000
Files and hashes: 1: 46eH9Cj2ZoAvvZOdO1gLEixXty0.roa (hash: nutrSegvu5QxeGV6g/QuVOtrzFyb4Km/JeoI/dWaXRo=)
2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: S1tL9uuvY7vufSyEojhwtWTVLlXEuCnekxynz1Mga+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:e7:00:49:01:41:8a:0c:64:05:52:08:8e:27:29:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Aug 30 23:00:20 2026 GMT
Not After : Aug 31 23:00:20 2026 GMT
Subject: CN=855b31108b3150dd925b56f6303bf36be12bf97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:29:96:e3:4c:21:6b:d8:2b:08:0b:07:fd:
9f:86:18:30:a5:72:6f:56:85:d4:ba:6d:74:4f:6e:
29:da:c6:78:0b:b6:42:72:15:ad:65:d0:2f:d2:55:
00:8a:03:05:a6:47:a7:74:1a:99:9d:b5:0a:47:5e:
66:9f:2e:ac:87:2d:a8:3c:ea:8f:2b:cb:ce:a8:2c:
06:e6:66:a0:6b:21:32:df:1c:e4:16:7b:e1:be:f3:
b4:05:69:cc:37:81:e3:d9:00:4d:18:89:e4:c9:c9:
dc:d6:15:4b:9e:84:ca:e6:77:19:84:ce:df:a8:66:
09:3d:18:cd:a4:bb:5f:0a:4a:6e:de:66:1e:64:63:
e2:0a:e7:88:8d:01:11:58:08:30:3e:d6:97:59:ff:
82:c3:28:96:be:63:46:4d:db:7b:19:47:9a:4a:e2:
b0:8f:6e:20:6a:74:b7:8e:0e:d7:6d:5f:36:01:8f:
48:fd:ee:3a:16:c4:ad:75:99:1a:df:53:43:8f:84:
a9:5a:2d:71:61:de:32:67:b6:44:c6:14:87:a8:56:
ba:07:73:ff:94:16:99:9c:9b:3d:35:14:8b:8e:bc:
6e:a6:ef:e1:2a:03:59:4d:a4:92:78:5f:51:10:8b:
b8:8f:26:76:d5:93:4f:0e:4e:b3:da:ab:f1:5f:9e:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:31:10:8B:31:50:DD:92:5B:56:F6:30:3B:F3:6B:E1:2B:F9:7F
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:88:69:22:32:dc:2e:7c:e4:16:ab:eb:8c:1a:22:18:bd:
81:d3:6d:38:7d:4d:e5:b0:c2:10:63:38:8a:d0:92:bc:04:d9:
2c:67:8b:7e:5e:2d:df:c2:ac:a9:ed:a5:0d:e4:ad:a2:82:5f:
93:32:cf:00:1e:2b:9c:24:17:9f:19:36:18:a6:6d:11:49:a3:
1d:33:48:b8:02:26:7f:aa:10:a0:56:83:13:64:25:7d:59:05:
84:6e:1d:8a:a1:42:e8:2c:a5:e5:85:79:8d:86:54:e2:72:47:
b5:cb:3c:62:ef:4d:db:9f:b6:63:7e:01:9b:0e:72:67:d2:8e:
89:6f:f3:13:14:e1:91:93:c2:f4:d4:00:74:52:95:f6:2d:76:
a2:cf:98:3b:ac:09:db:f3:1d:83:c0:f1:14:09:e8:3f:a9:34:
e9:39:87:44:54:91:2d:a6:e6:d6:a1:61:4e:e5:6b:64:62:0f:
b0:ad:53:b5:c2:ca:d1:22:c6:6a:3a:26:8a:c1:ea:6a:1d:12:
1d:77:f8:d7:ef:a5:a4:43:64:08:0b:3b:62:00:e5:53:ef:86:
10:fe:ee:94:d6:e5:5b:4b:8d:73:71:bd:bc:ee:01:10:cc:9b:
3e:fa:54:e1:47:41:e7:44:48:97:c8:27:16:6e:aa:1b:56:f9:
09:15:4b:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBU5wBJAUGKDGQFUgiOJymRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzc0NDY3ZTIxODQ5NTI0OTQzZDJiZDQ1OTAxMDcyMGYz
ZTIwZTQwHhcNMjYwODMwMjMwMDIwWhcNMjYwODMxMjMwMDIwWjAzMTEwLwYDVQQD
Eyg4NTViMzExMDhiMzE1MGRkOTI1YjU2ZjYzMDNiZjM2YmUxMmJmOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKkpluNMIWvYKwgLB/2fhhgwpXJv
VoXUum10T24p2sZ4C7ZCchWtZdAv0lUAigMFpkendBqZnbUKR15mny6shy2oPOqP
K8vOqCwG5magayEy3xzkFnvhvvO0BWnMN4Hj2QBNGInkycnc1hVLnoTK5ncZhM7f
qGYJPRjNpLtfCkpu3mYeZGPiCueIjQERWAgwPtaXWf+CwyiWvmNGTdt7GUeaSuKw
j24ganS3jg7XbV82AY9I/e46FsStdZka31NDj4SpWi1xYd4yZ7ZExhSHqFa6B3P/
lBaZnJs9NRSLjrxupu/hKgNZTaSSeF9REIu4jyZ21ZNPDk6z2qvxX5455QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVbMRCLMVDdkltW9jA782vhK/l/MB8GA1UdIwQY
MBaAFF53RGfiGElSSUPSvUWQEHIPPiDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMt
YWE0MDA1MzJkYWViLzEvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMtYWE0MDA1MzJkYWVi
LzEvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQj+IaSIy
3C585Bar64waIhi9gdNtOH1N5bDCEGM4itCSvATZLGeLfl4t38Ksqe2lDeStooJf
kzLPAB4rnCQXnxk2GKZtEUmjHTNIuAImf6oQoFaDE2QlfVkFhG4diqFC6Cyl5YV5
jYZU4nJHtcs8Yu9N25+2Y34Bmw5yZ9KOiW/zExThkZPC9NQAdFKV9i12os+YO6wJ
2/Mdg8DxFAnoP6k06TmHRFSRLabm1qFhTuVrZGIPsK1TtcLK0SLGajomisHqah0S
HXf41++lpENkCAs7YgDlU++GEP7ulNblW0uNc3G9vO4BEMybPvpU4UdB50RIl8gn
Fm6qG1b5CRVLLg==
-----END CERTIFICATE-----
Generated at Mon Aug 31 08:38:12 2026 by rpki-client