Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: bES1s+mKOFH+awJG6+bLEZrIzIhuPhVrxPvmyiVgYeU=
Subject key identifier: 84:E5:E0:EC:BB:B8:C0:B6:16:55:D2:2D:81:26:E4:F7:8C:0B:A5:21
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 01A1009165579FABDE55F7814FA41B36D14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 1544
Signing time: Sat 03 Oct 2026 07:01:30 +0000
Manifest this update: Sat 03 Oct 2026 07:01:30 +0000
Manifest next update: Sun 04 Oct 2026 07:01:30 +0000
Files and hashes: 1: 2GXp3bAaWM3wTgvjV8eCwVFexe4.asa (hash: hZQJ0WbwmhsDuDCzZWaSBDjdh67b2hIGAFsSqcCCZZ8=)
2: Q2eq3vQ27LdqIhXEwPYKtKFxrj8.roa (hash: w/CxsU35XsDW4qiiMK3VW7xr1QGFT3WBU9iNjApYbmk=)
3: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: gXhn84zNuYcEeEud7izs43K1MU+0crYYe4J0ThGz8KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:91:65:57:9f:ab:de:55:f7:81:4f:a4:1b:36:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Oct 3 07:01:30 2026 GMT
Not After : Oct 4 07:01:30 2026 GMT
Subject: CN=84e5e0ecbbb8c0b61655d22d8126e4f78c0ba521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:20:1f:4f:55:10:9a:4b:21:13:12:16:7f:
23:8b:88:56:3d:af:7c:53:02:a5:0b:69:30:81:ea:
19:8e:85:04:b5:6c:8a:70:81:80:98:a4:93:3d:66:
ea:c6:65:4a:99:67:02:ca:e8:88:76:51:e1:38:56:
ef:05:be:ff:19:f1:f2:08:d0:5f:1a:49:58:f6:22:
3c:6b:8f:28:85:d6:7e:67:9d:f4:12:10:76:4c:40:
39:ae:9c:b7:2c:b4:2e:f4:f2:80:42:7a:fa:93:97:
58:d0:9a:be:dd:37:a4:92:fd:16:38:98:2d:32:8e:
90:b3:32:27:1d:95:87:00:aa:f8:ed:48:96:75:b9:
d4:6b:39:ee:8b:c2:da:de:5c:08:45:f3:43:b4:28:
0b:a1:04:9c:e5:6f:c6:ae:f8:d7:ad:79:f6:70:fe:
6b:1d:f2:a1:e4:e1:c8:a8:3f:95:36:89:22:61:4d:
d9:00:45:3f:bc:44:bb:67:36:6f:ba:df:ff:f2:58:
fb:9f:ca:c3:c0:52:33:16:6e:b5:18:da:58:0b:6c:
49:1d:9f:33:d7:1e:ff:36:2f:48:89:fa:24:bd:a1:
e0:5c:8c:38:c4:ae:00:50:5f:83:16:97:f8:dd:8d:
6d:a9:a9:63:9e:64:8e:c4:eb:8a:79:7f:32:b9:2a:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E5:E0:EC:BB:B8:C0:B6:16:55:D2:2D:81:26:E4:F7:8C:0B:A5:21
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:25:e6:bd:73:ac:74:d3:22:e4:65:1c:58:6e:c5:07:c6:
d6:94:85:7b:9e:e1:4e:f4:b0:28:3c:0a:e5:7b:75:a5:f7:1f:
8a:bc:ad:eb:38:31:98:92:51:12:fd:44:28:d3:1b:bc:21:30:
65:34:8d:97:82:18:f4:fd:aa:c5:e2:96:49:63:78:b1:ea:89:
ed:e5:3c:d6:de:d4:67:27:ec:ad:9c:6e:0f:00:3e:9c:71:0b:
ae:c5:44:1a:10:9f:2f:0f:14:a4:97:d3:39:f2:72:b4:71:53:
89:56:89:19:b1:b5:ad:b2:09:b5:2a:62:fc:ee:b8:38:6d:d0:
1c:7a:38:df:b1:f9:a5:cb:04:be:26:51:96:63:9e:56:84:9d:
6c:07:8c:da:87:93:b5:d2:1e:1f:53:30:4e:70:60:08:ec:cb:
aa:3c:e8:f7:95:53:e3:e7:7b:49:ec:e4:cb:66:12:74:15:45:
f5:eb:ec:d5:52:d9:e5:0f:75:f9:92:74:09:a0:83:87:53:11:
9e:57:42:af:1c:2f:c0:2c:b3:22:8c:ba:6a:cc:26:1f:26:28:
dc:23:32:3f:66:14:25:69:57:37:ee:8b:36:16:30:c1:b3:5f:
a5:3f:3a:ed:35:61:8c:c6:4b:09:24:7f:50:8a:e5:87:6d:cc:
b8:43:83:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAkWVXn6veVfeBT6QbNtFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWI5YmVkOGY4ZDNkNTc5YmIwNTUyZTRmYzRiODE5ODY4
NjFlNjQwHhcNMjYxMDAzMDcwMTMwWhcNMjYxMDA0MDcwMTMwWjAzMTEwLwYDVQQD
Eyg4NGU1ZTBlY2JiYjhjMGI2MTY1NWQyMmQ4MTI2ZTRmNzhjMGJhNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJggH09VEJpLIRMSFn8ji4hWPa98
UwKlC2kwgeoZjoUEtWyKcIGAmKSTPWbqxmVKmWcCyuiIdlHhOFbvBb7/GfHyCNBf
GklY9iI8a48ohdZ+Z530EhB2TEA5rpy3LLQu9PKAQnr6k5dY0Jq+3Tekkv0WOJgt
Mo6QszInHZWHAKr47UiWdbnUaznui8La3lwIRfNDtCgLoQSc5W/GrvjXrXn2cP5r
HfKh5OHIqD+VNokiYU3ZAEU/vES7ZzZvut//8lj7n8rDwFIzFm61GNpYC2xJHZ8z
1x7/Ni9IifokvaHgXIw4xK4AUF+DFpf43Y1tqaljnmSOxOuKeX8yuSoUFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITl4Oy7uMC2FlXSLYEm5PeMC6UhMB8GA1UdIwQY
MBaAFF6bm+2PjT1Xm7BVLk/EuBmGhh5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQt
YTVhNWFkMDZlYjQzLzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQtYTVhNWFkMDZlYjQz
LzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1Ul5r1z
rHTTIuRlHFhuxQfG1pSFe57hTvSwKDwK5Xt1pfcfiryt6zgxmJJREv1EKNMbvCEw
ZTSNl4IY9P2qxeKWSWN4seqJ7eU81t7UZyfsrZxuDwA+nHELrsVEGhCfLw8UpJfT
OfJytHFTiVaJGbG1rbIJtSpi/O64OG3QHHo437H5pcsEviZRlmOeVoSdbAeM2oeT
tdIeH1MwTnBgCOzLqjzo95VT4+d7Sezky2YSdBVF9evs1VLZ5Q91+ZJ0CaCDh1MR
nldCrxwvwCyzIoy6aswmHyYo3CMyP2YUJWlXN+6LNhYwwbNfpT867TVhjMZLCSR/
UIrlh23MuEODQg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:30 2026 by rpki-client