Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier: rzCWbCr733DZHCtLGsxKtdrLyEtqbM7NAgQsvLWD16w=
Subject key identifier: 84:47:17:86:50:96:40:9C:A4:04:2A:EA:EC:55:84:A6:2D:DA:6A:6E
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A1DCB8DECC9F43DEBF503853C72A5A11DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number: 1B16
Signing time: Sun 15 Nov 2026 01:01:05 +0000
Manifest this update: Sun 15 Nov 2026 01:01:05 +0000
Manifest next update: Mon 16 Nov 2026 01:01:05 +0000
Files and hashes: 1: 1_GujOxczMIwwsPIRuZZ135IW8Q.roa (hash: r9N1NX13HUSdP2RDEYVlg+KFesYDMAwBdVyxzf9SF0I=)
2: 5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa (hash: SMRdVTfHclZq4V+gvOodEyeG5zAH5sDMph36bqmt3rk=)
3: AtV2hA3YXGqznUtgR3uB6bOY8lI.roa (hash: E9jIH1WdWmHG5Hqaca5c+6ilzJbhu15ZC+JxJ/GcG+0=)
4: GqnKTDZ_mcrAatfkX8lGwoS2jzg.roa (hash: eSnwS1DQ7HdrWkTutWDxFLPnFL5oEqisvoEeBtrekYo=)
5: PDxCkfQyXaQDRzoiTpfHAu_SPc4.roa (hash: QfR0JtF2boxJ7z42cuWD2zkCq2bk8rsxpJr59VR8pDY=)
6: WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa (hash: TZOmAdpezSY7WR8DK0sxR8J5sP9pIOwu7JtZmeFi+dA=)
7: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: 760HZ0tsG4c/KVkhYJjG0kljvQBuBWwJPCubtepMmhA=)
8: gvzfKPjwNxS-AsBIh7ZgA5tTa0Q.roa (hash: j8wlfHeXoBqn/3pP04ScQRvLSMC6Ag5BftKcYosNfBM=)
9: hgl809tjaX7Gbv4DItgm3ScJV_4.roa (hash: 1spmr6hLWhe0MEAFi9Vr2mFMBf7qQUqSQroJeyohJqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:de:cc:9f:43:de:bf:50:38:53:c7:2a:5a:11:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Nov 15 01:01:05 2026 GMT
Not After : Nov 16 01:01:05 2026 GMT
Subject: CN=844717865096409ca4042aeaec5584a62dda6a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:db:30:30:df:14:aa:e2:1f:96:29:d7:6c:
4a:2a:98:df:42:46:32:20:aa:34:54:51:6b:37:9a:
7b:04:21:73:24:e8:a5:4d:8d:a5:e4:30:9d:c2:4d:
c3:5e:9d:c7:df:51:c5:18:72:4d:fb:7e:0b:e1:4d:
02:ef:47:68:eb:1e:17:c5:96:1a:23:1b:a4:9e:be:
32:d6:1e:70:55:8c:15:8a:35:5b:46:8e:8c:7f:66:
35:c4:b7:91:39:57:40:7f:ca:a8:1a:a4:08:dc:7f:
2d:38:fd:1d:03:73:15:f7:84:ce:c3:2a:66:61:2e:
c2:dc:c8:9e:c1:6e:e0:a8:b5:ba:b1:70:68:72:e3:
a8:59:9f:74:73:b1:ff:e8:b2:b5:33:39:22:31:0a:
f5:14:15:7b:c0:66:d1:06:2e:5a:8a:41:5b:5a:96:
09:37:39:c2:ba:cb:53:c8:a6:7b:7a:c5:b5:58:48:
6d:4d:48:84:f9:d6:44:8e:68:5a:cc:6b:96:09:78:
1f:b7:1f:b6:f3:9f:00:b0:af:bc:0f:7e:cd:2d:0b:
f6:f0:7e:ca:78:cc:99:bf:70:51:ac:df:20:fc:28:
ae:30:fb:99:30:22:a8:71:28:73:03:ac:c9:c6:be:
7f:63:e7:c8:a2:20:2e:b3:10:b2:af:a7:f8:f0:ec:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:17:86:50:96:40:9C:A4:04:2A:EA:EC:55:84:A6:2D:DA:6A:6E
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fc:88:95:aa:14:c7:80:fa:b1:cd:af:85:2c:82:65:18:4d:
89:66:88:7b:c9:b8:fe:b3:72:7f:d5:87:b2:3c:d7:38:41:1a:
b3:e4:85:d0:d1:da:4a:d9:90:cd:d4:72:06:7c:f5:e5:eb:17:
25:b2:18:8c:42:3e:3a:91:98:08:78:aa:4a:93:d0:59:da:dd:
30:02:3a:4e:5e:da:bf:fd:0b:11:1c:6c:b0:d6:21:d1:ab:4d:
5d:60:76:d2:29:1d:3f:e0:e3:29:25:61:9d:ee:c7:0e:9e:66:
40:b1:c6:44:cc:fc:00:af:e0:cc:ac:54:f9:3b:12:9a:68:1b:
50:70:7e:bd:bd:1d:dd:ab:51:c8:4a:4f:0b:de:3e:af:6d:55:
13:31:0b:96:2c:20:40:83:2c:eb:03:91:3f:e3:09:b0:f2:20:
b3:b7:5b:f1:48:83:7e:d9:23:a4:10:2a:b1:1b:a0:7d:dc:ed:
ba:8e:ce:fe:45:99:e8:92:d8:b9:82:b4:5a:4f:4f:77:a8:20:
fe:6b:49:89:36:2d:99:34:4a:d6:44:83:c0:1b:be:31:3b:1a:
bb:10:d1:8a:ed:00:bf:92:d1:f2:5d:c6:86:eb:24:be:3b:95:
7d:14:da:d8:a0:48:56:3e:f3:c0:48:20:34:1f:b1:85:eb:97:
7c:7e:60:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuN7Mn0Pev1A4U8cqWhHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2
OGIzN2UwHhcNMjYxMTE1MDEwMTA1WhcNMjYxMTE2MDEwMTA1WjAzMTEwLwYDVQQD
Eyg4NDQ3MTc4NjUwOTY0MDljYTQwNDJhZWFlYzU1ODRhNjJkZGE2YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OXbMDDfFKriH5Yp12xKKpjfQkYy
IKo0VFFrN5p7BCFzJOilTY2l5DCdwk3DXp3H31HFGHJN+34L4U0C70do6x4XxZYa
Ixuknr4y1h5wVYwVijVbRo6Mf2Y1xLeROVdAf8qoGqQI3H8tOP0dA3MV94TOwypm
YS7C3MiewW7gqLW6sXBocuOoWZ90c7H/6LK1MzkiMQr1FBV7wGbRBi5aikFbWpYJ
NznCustTyKZ7esW1WEhtTUiE+dZEjmhazGuWCXgftx+2858AsK+8D37NLQv28H7K
eMyZv3BRrN8g/CiuMPuZMCKocShzA6zJxr5/Y+fIoiAusxCyr6f48Owz5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRHF4ZQlkCcpAQq6uxVhKYt2mpuMB8GA1UdIwQY
MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt
NmM4ZmQ4NGJiNWY1LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1
LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPyIlaoU
x4D6sc2vhSyCZRhNiWaIe8m4/rNyf9WHsjzXOEEas+SF0NHaStmQzdRyBnz15esX
JbIYjEI+OpGYCHiqSpPQWdrdMAI6Tl7av/0LERxssNYh0atNXWB20ikdP+DjKSVh
ne7HDp5mQLHGRMz8AK/gzKxU+TsSmmgbUHB+vb0d3atRyEpPC94+r21VEzELliwg
QIMs6wORP+MJsPIgs7db8UiDftkjpBAqsRugfdztuo7O/kWZ6JLYuYK0Wk9Pd6gg
/mtJiTYtmTRK1kSDwBu+MTsauxDRiu0Av5LR8l3GhuskvjuVfRTa2KBIVj7zwEgg
NB+xheuXfH5gaA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:29 2026 by rpki-client