Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: tCW1iG/h8N8rawbgDEK4O7/q3s1aLJOsmP6fIfyiElY=
Subject key identifier: 13:B8:CF:88:9D:B1:F2:53:F9:27:23:A4:74:DC:DD:34:F1:1B:09:E3
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 01A17F98E9AD8F88E0BF1C5539FBD790CEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 09DF
Signing time: Tue 27 Oct 2026 23:01:30 +0000
Manifest this update: Tue 27 Oct 2026 23:01:30 +0000
Manifest next update: Wed 28 Oct 2026 23:01:30 +0000
Files and hashes: 1: OBYyhiA-o_Lu_Sii3K0csw4HB8Q.roa (hash: losaCS7PxxPceDw56uDFnzA7tz476/wdte0ltw/SmOk=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: YsBbqfZtnUFe5cZyzbFosMdz/iezouPAUFlxx9vPGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:e9:ad:8f:88:e0:bf:1c:55:39:fb:d7:90:ce:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Oct 27 23:01:30 2026 GMT
Not After : Oct 28 23:01:30 2026 GMT
Subject: CN=13b8cf889db1f253f92723a474dcdd34f11b09e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:5c:eb:ca:04:71:e6:5c:69:71:5e:d8:82:
ce:99:f4:38:8b:ad:26:96:b9:2e:bf:f3:a9:e8:0c:
34:72:ee:e3:eb:09:d9:6a:a5:d4:97:0c:79:86:df:
f7:eb:df:dd:d3:f2:5e:f3:d7:6e:82:7c:c1:02:c5:
d7:65:b7:5f:df:24:6b:d7:c6:41:21:b0:a3:96:28:
72:f2:33:5a:3f:56:0f:28:b8:2b:bb:05:04:fe:15:
79:3f:7f:05:7f:ba:5b:06:78:9b:a3:0e:41:f4:80:
83:16:e5:dd:ac:4f:cf:0c:4a:9b:8c:a7:65:5a:fd:
f3:0d:a5:89:89:c9:56:38:e7:94:87:a2:f5:49:1a:
33:38:74:55:5f:ca:47:18:6b:a0:d3:3b:1f:ce:ae:
80:aa:ad:06:33:62:62:da:49:21:26:fa:28:82:80:
29:bf:9f:66:72:39:90:bd:7d:3d:db:65:25:7f:ae:
72:8a:64:14:79:e5:09:b8:56:fb:57:bc:1d:70:8f:
aa:29:9a:ee:86:a0:cf:20:3b:81:d1:42:05:48:c9:
0d:0a:3c:4e:bb:c7:ad:da:dc:30:f2:48:9f:18:36:
bf:70:10:b7:1c:5c:af:63:6a:dc:91:87:53:8f:a9:
23:d1:c4:70:c6:b5:91:1e:d0:45:c5:ec:d7:8c:95:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B8:CF:88:9D:B1:F2:53:F9:27:23:A4:74:DC:DD:34:F1:1B:09:E3
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:87:80:12:b4:4d:a6:f5:04:27:ef:52:b9:d5:eb:78:b1:86:
d8:50:d9:ca:47:f5:bc:9a:53:03:a5:94:e3:31:1c:45:99:14:
e3:d4:e0:83:c9:e7:47:62:64:1a:01:85:fa:b8:c5:2f:6e:e4:
8b:24:95:30:0c:8a:70:39:7c:2c:1f:12:38:25:b4:77:b3:43:
f7:3f:b8:92:1e:29:db:6e:a0:a2:a3:a8:12:70:78:aa:84:13:
87:5d:1b:3f:67:2a:34:3c:7f:af:71:96:ca:cc:0d:81:df:ae:
6f:a3:ab:7f:fc:5b:90:7d:93:a8:17:6a:1f:05:7a:6f:4e:68:
fa:d2:73:db:c6:17:68:3f:1e:aa:af:1f:12:0d:c1:93:3e:5a:
da:c6:ae:04:01:3a:97:3b:aa:d3:20:10:1e:b7:d8:b9:f8:46:
95:dd:3d:8e:27:31:85:37:77:d7:bd:00:8e:87:db:5c:43:c9:
7f:b7:fb:0c:13:45:9b:1b:6a:bf:ae:5a:18:6e:a6:30:f1:fb:
19:d9:6c:d2:2c:b6:99:55:bb:82:9d:17:c0:f2:41:2a:b2:60:
fb:ae:ec:19:42:d9:5c:74:37:d5:16:10:44:d5:70:fd:3c:49:
11:e2:a0:56:31:fd:5d:40:ad:be:6d:3d:6b:fe:18:36:ec:ee:
da:81:0f:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/mOmtj4jgvxxVOfvXkM6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YzRiM2FlNTlkOTgxZjI1MGNjODdkYWI1OTc4NTRhYmVk
N2EzMDAwHhcNMjYxMDI3MjMwMTMwWhcNMjYxMDI4MjMwMTMwWjAzMTEwLwYDVQQD
EygxM2I4Y2Y4ODlkYjFmMjUzZjkyNzIzYTQ3NGRjZGQzNGYxMWIwOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMFc68oEceZcaXFe2ILOmfQ4i60m
lrkuv/Op6Aw0cu7j6wnZaqXUlwx5ht/369/d0/Je89dugnzBAsXXZbdf3yRr18ZB
IbCjlihy8jNaP1YPKLgruwUE/hV5P38Ff7pbBnibow5B9ICDFuXdrE/PDEqbjKdl
Wv3zDaWJiclWOOeUh6L1SRozOHRVX8pHGGug0zsfzq6Aqq0GM2Ji2kkhJvoogoAp
v59mcjmQvX0922Ulf65yimQUeeUJuFb7V7wdcI+qKZruhqDPIDuB0UIFSMkNCjxO
u8et2tww8kifGDa/cBC3HFyvY2rckYdTj6kj0cRwxrWRHtBFxezXjJVF0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBO4z4idsfJT+ScjpHTc3TTxGwnjMB8GA1UdIwQY
MBaAFMXEs65Z2YHyUMyH2rWXhUq+16MAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYt
ZWRkZjUyN2U4ZjJkLzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYtZWRkZjUyN2U4ZjJk
LzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoeAErRN
pvUEJ+9SudXreLGG2FDZykf1vJpTA6WU4zEcRZkU49Tgg8nnR2JkGgGF+rjFL27k
iySVMAyKcDl8LB8SOCW0d7ND9z+4kh4p226goqOoEnB4qoQTh10bP2cqNDx/r3GW
yswNgd+ub6Orf/xbkH2TqBdqHwV6b05o+tJz28YXaD8eqq8fEg3Bkz5a2sauBAE6
lzuq0yAQHrfYufhGld09jicxhTd3170AjofbXEPJf7f7DBNFmxtqv65aGG6mMPH7
Gdls0iy2mVW7gp0XwPJBKrJg+67sGULZXHQ31RYQRNVw/TxJEeKgVjH9XUCtvm09
a/4YNuzu2oEP/A==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:32 2026 by rpki-client