Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: slEXLv6NtSdjdrnJ2c1Mb5Oxi0A558VJvWQQQPzPVA8=
Subject key identifier: A3:A7:5D:6B:86:43:DB:97:8B:BE:C5:6D:FB:BF:37:C2:F6:36:82:88
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 01A19769E4573563D4108671068BA4D69F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1A66
Signing time: Sun 01 Nov 2026 14:01:01 +0000
Manifest this update: Sun 01 Nov 2026 14:01:01 +0000
Manifest next update: Mon 02 Nov 2026 14:01:01 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: dn82wqGJZHx9gFioxkhFurpNFKMDON5df5qvSNaHoNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:69:e4:57:35:63:d4:10:86:71:06:8b:a4:d6:9f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Nov 1 14:01:01 2026 GMT
Not After : Nov 2 14:01:01 2026 GMT
Subject: CN=a3a75d6b8643db978bbec56dfbbf37c2f6368288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:aa:24:32:9a:e6:37:e2:ae:f6:ca:c2:20:
5f:74:2c:66:15:f8:ad:a6:38:ae:b8:37:00:b8:4c:
f0:82:21:8e:11:3a:25:23:e5:02:57:e7:5a:b4:3c:
d7:df:a4:b5:4c:15:39:8d:7c:60:b7:b4:87:c7:37:
a8:9b:96:db:1d:1e:37:d2:0f:94:9f:8e:ee:20:be:
b0:a6:a5:74:80:8d:f0:c2:86:e6:08:9a:2c:43:0f:
ee:16:e1:81:40:cd:3c:9b:49:5d:9c:c8:c0:7b:35:
c2:32:8e:5c:38:21:18:49:ad:3b:42:28:c8:0a:2b:
82:90:63:01:15:61:0f:f1:f4:a3:25:3b:06:cd:a3:
10:4c:12:7e:43:8b:12:cb:64:a5:9c:45:7a:a3:45:
de:bf:24:b2:f5:c5:bd:7a:3a:7c:e7:64:46:6b:c2:
fb:7d:53:33:10:0d:8d:3d:cf:28:68:de:c2:d8:19:
8b:e3:46:b2:af:9e:31:3d:b6:0c:56:bf:6a:57:9a:
b9:61:10:e9:19:0d:a8:bf:7a:3e:40:5f:ea:68:40:
e6:9b:3c:86:c2:42:86:4f:93:40:89:8c:f1:7d:a9:
28:8a:63:bd:4f:24:6f:ec:e2:ce:d0:0e:3d:b3:ab:
d5:d8:0a:3d:db:11:ff:21:ee:a2:28:1a:71:bc:e0:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A7:5D:6B:86:43:DB:97:8B:BE:C5:6D:FB:BF:37:C2:F6:36:82:88
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9c:b7:74:b8:af:da:87:30:a0:43:ef:0e:19:54:60:40:31:
85:95:a3:45:ef:b1:95:a5:19:13:4a:65:15:0d:d1:b6:8b:37:
b8:b8:d0:26:4b:45:97:ef:a7:97:f8:87:ce:6f:b9:ab:db:3b:
70:ab:92:b2:00:87:2d:07:2c:96:20:2b:38:20:6f:5f:7c:57:
70:7f:2c:08:d8:77:ae:47:6f:04:3d:59:04:c6:8b:b9:cb:2f:
3f:f6:72:df:da:4d:be:2d:06:2c:30:ba:d0:88:34:4b:3e:07:
de:8d:a8:93:38:72:45:43:9d:cf:2d:9f:e0:a0:e4:ec:c5:9f:
47:9a:7a:d4:80:cf:f3:80:7c:3f:24:02:ee:f0:7a:72:56:ff:
5b:64:0f:e1:09:88:f6:0b:52:1b:03:12:8c:f4:5b:7e:0d:33:
33:53:c3:25:5a:85:fe:dc:fa:ae:9c:ca:45:a1:e8:2d:7e:94:
45:9b:1e:7d:78:61:05:e8:0f:e4:76:cf:1a:5d:70:b6:68:54:
84:ec:76:91:01:90:0a:fc:9d:88:99:21:8b:53:fc:49:71:4a:
09:f9:62:a4:b4:c6:5b:0e:50:f7:19:ce:1f:91:41:1e:61:5a:
a3:42:87:5a:4a:09:90:20:87:7a:a1:62:11:60:ef:15:f1:b1:
4c:88:f8:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGXaeRXNWPUEIZxBouk1p9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTAxOWNiNTRkNzAwYTFiMWM1MGU4ZjkwZWJlZTJhNWVl
YTU3YmIwHhcNMjYxMTAxMTQwMTAxWhcNMjYxMTAyMTQwMTAxWjAzMTEwLwYDVQQD
EyhhM2E3NWQ2Yjg2NDNkYjk3OGJiZWM1NmRmYmJmMzdjMmY2MzY4Mjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7KqJDKa5jfirvbKwiBfdCxmFfit
pjiuuDcAuEzwgiGOETolI+UCV+datDzX36S1TBU5jXxgt7SHxzeom5bbHR430g+U
n47uIL6wpqV0gI3wwobmCJosQw/uFuGBQM08m0ldnMjAezXCMo5cOCEYSa07QijI
CiuCkGMBFWEP8fSjJTsGzaMQTBJ+Q4sSy2SlnEV6o0XevySy9cW9ejp852RGa8L7
fVMzEA2NPc8oaN7C2BmL40ayr54xPbYMVr9qV5q5YRDpGQ2ov3o+QF/qaEDmmzyG
wkKGT5NAiYzxfakoimO9TyRv7OLO0A49s6vV2Ao92xH/Ie6iKBpxvOBu6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOnXWuGQ9uXi77Fbfu/N8L2NoKIMB8GA1UdIwQY
MBaAFMWgGctU1wChscUOj5Dr7ipe6le7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQt
MzFhM2VjZjFiZGI2LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQtMzFhM2VjZjFiZGI2
LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5y3dLiv
2ocwoEPvDhlUYEAxhZWjRe+xlaUZE0plFQ3Rtos3uLjQJktFl++nl/iHzm+5q9s7
cKuSsgCHLQcsliArOCBvX3xXcH8sCNh3rkdvBD1ZBMaLucsvP/Zy39pNvi0GLDC6
0Ig0Sz4H3o2okzhyRUOdzy2f4KDk7MWfR5p61IDP84B8PyQC7vB6clb/W2QP4QmI
9gtSGwMSjPRbfg0zM1PDJVqF/tz6rpzKRaHoLX6URZsefXhhBegP5HbPGl1wtmhU
hOx2kQGQCvydiJkhi1P8SXFKCflipLTGWw5Q9xnOH5FBHmFao0KHWkoJkCCHeqFi
EWDvFfGxTIj4ag==
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:37:47 2026 by rpki-client