Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: 0CAeKrQdgZWqTfJ3queLYcWSn4RCaamU9WQeKhj3jQI=
Subject key identifier: 17:A4:ED:77:94:20:AC:C5:99:EA:AD:CA:CD:3F:35:76:25:0E:E1:D5
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 01A03970F1C6A3602BCFDF986E5EBFA1A22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1A1E
Signing time: Tue 25 Aug 2026 15:01:38 +0000
Manifest this update: Tue 25 Aug 2026 15:01:38 +0000
Manifest next update: Wed 26 Aug 2026 15:01:38 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: V9IrB2RW4Yepm4/zfgcSKw/z1Enf7fMc4jvjRibEeOo=)
2: awXRcerSAP4jrgOUBQ68Ss0j_JE.asa (hash: 7H/s8bfQHFW6k1q0+FHWfKFzwz0TBvvLD09+Qjh3Rf8=)
3: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:70:f1:c6:a3:60:2b:cf:df:98:6e:5e:bf:a1:a2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Aug 25 15:01:38 2026 GMT
Not After : Aug 26 15:01:38 2026 GMT
Subject: CN=17a4ed779420acc599eaadcacd3f3576250ee1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:a8:5d:3a:ee:9a:49:1a:f3:aa:b5:48:5d:
64:6d:16:bc:8e:a7:cc:a6:fc:12:5d:c6:eb:78:b1:
77:ff:67:c6:b9:0f:56:cf:78:9b:a6:61:6b:40:9e:
51:0e:e3:83:18:9a:0f:62:0c:56:f0:ef:5b:84:d1:
fc:6a:c0:ed:1b:15:1a:f8:28:03:47:44:68:e2:97:
3c:a3:d7:90:e9:5c:85:3a:bb:4b:01:56:7e:67:f5:
80:5c:91:af:f1:29:1d:ad:37:83:b2:dc:4a:ed:51:
50:3c:09:8c:c2:fd:b5:7a:4c:1e:cf:86:05:95:16:
79:6c:89:ab:5f:db:d4:84:8e:22:5f:48:c6:53:f1:
e2:65:b0:43:16:f4:15:a8:ea:7c:7c:d3:b2:86:0c:
aa:11:ba:04:37:91:82:12:82:e5:a0:d2:27:a2:c8:
80:1e:87:e3:cc:f0:1b:3d:8d:61:c4:cb:8c:8b:ba:
6a:d1:66:06:83:df:a1:5f:81:ed:8a:fc:5c:c6:25:
33:a6:d0:86:6f:ee:2e:8a:59:9f:fc:40:6b:38:0b:
0f:5d:0a:d6:0b:fa:9d:16:8a:9e:8d:7f:ba:c7:27:
4e:0b:87:e6:01:75:33:3c:33:b1:19:c0:d7:5b:9a:
ab:c3:82:28:25:b4:5d:63:42:d8:7f:63:aa:cc:f4:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:ED:77:94:20:AC:C5:99:EA:AD:CA:CD:3F:35:76:25:0E:E1:D5
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:52:a2:76:49:0d:61:11:b5:3b:ca:38:a3:73:1d:6e:4b:2a:
74:cf:b5:07:e5:35:eb:89:08:53:b5:a8:60:20:0f:a1:9c:b3:
26:cc:c2:bf:18:6f:92:1b:5b:11:55:96:5e:86:b9:d4:7b:73:
fd:5d:52:4a:db:0f:96:aa:54:33:a3:f4:12:8c:73:54:da:80:
d6:57:a1:e4:d0:08:28:e9:03:b7:97:c2:5c:5b:33:2e:62:f2:
0f:63:dc:5e:d2:d5:37:9f:fc:53:43:8f:ea:27:e8:0c:60:87:
da:5a:6c:1c:27:ff:ea:94:81:30:5d:ab:cd:07:70:a3:9e:be:
88:e6:59:10:cb:bc:73:b4:a7:98:a1:1d:1f:60:0a:62:2c:e7:
09:ad:ad:cd:07:50:40:92:13:a1:74:06:cf:97:27:3e:ea:f7:
bc:bf:37:77:27:ad:cf:7c:40:b2:38:f1:f7:cb:60:b1:c8:2f:
04:c3:14:5a:29:3b:c8:c3:e5:bb:be:e5:5e:6c:39:39:3d:47:
a6:58:bb:23:bb:6f:0d:43:d4:57:c5:8e:69:4c:e7:0c:a7:c4:
36:21:07:34:b3:67:04:26:8a:a6:8e:ae:c3:06:3a:5c:ea:bb:
da:b4:fc:77:1c:22:1d:a5:5f:4b:72:e2:28:6b:92:aa:81:c4:
82:f8:51:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA5cPHGo2Arz9+Ybl6/oaIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1
ZTI2OWMwHhcNMjYwODI1MTUwMTM4WhcNMjYwODI2MTUwMTM4WjAzMTEwLwYDVQQD
EygxN2E0ZWQ3Nzk0MjBhY2M1OTllYWFkY2FjZDNmMzU3NjI1MGVlMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoCoXTrumkka86q1SF1kbRa8jqfM
pvwSXcbreLF3/2fGuQ9Wz3ibpmFrQJ5RDuODGJoPYgxW8O9bhNH8asDtGxUa+CgD
R0Ro4pc8o9eQ6VyFOrtLAVZ+Z/WAXJGv8SkdrTeDstxK7VFQPAmMwv21ekwez4YF
lRZ5bImrX9vUhI4iX0jGU/HiZbBDFvQVqOp8fNOyhgyqEboEN5GCEoLloNInosiA
HofjzPAbPY1hxMuMi7pq0WYGg9+hX4HtivxcxiUzptCGb+4uilmf/EBrOAsPXQrW
C/qdFoqejX+6xydOC4fmAXUzPDOxGcDXW5qrw4IoJbRdY0LYf2OqzPTOWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBek7XeUIKzFmeqtys0/NXYlDuHVMB8GA1UdIwQY
MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt
MGJhOTY3OWRlMmU2LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2
LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFKidkkN
YRG1O8o4o3MdbksqdM+1B+U164kIU7WoYCAPoZyzJszCvxhvkhtbEVWWXoa51Htz
/V1SStsPlqpUM6P0EoxzVNqA1leh5NAIKOkDt5fCXFszLmLyD2PcXtLVN5/8U0OP
6ifoDGCH2lpsHCf/6pSBMF2rzQdwo56+iOZZEMu8c7SnmKEdH2AKYiznCa2tzQdQ
QJIToXQGz5cnPur3vL83dyetz3xAsjjx98tgscgvBMMUWik7yMPlu77lXmw5OT1H
pli7I7tvDUPUV8WOaUznDKfENiEHNLNnBCaKpo6uwwY6XOq72rT8dxwiHaVfS3Li
KGuSqoHEgvhR1Q==
-----END CERTIFICATE-----
Generated at Tue Aug 25 23:43:31 2026 by rpki-client