Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
File: XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft (raw, json)
Hash identifier: whLAtiBLS0vU47plXa1sFAksvYrxJcjWkgYPFLQMYoE=
Subject key identifier: D4:DC:03:E3:EA:92:00:8E:E2:B5:C6:0E:A9:21:13:15:CE:58:FE:AC
Authority key identifier: 5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
Certificate issuer: /CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Certificate serial: 01A0E6D28FB42835C7695DE322CE6A1E3DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
Manifest number: 015A
Signing time: Mon 28 Sep 2026 07:02:33 +0000
Manifest this update: Mon 28 Sep 2026 07:02:33 +0000
Manifest next update: Tue 29 Sep 2026 07:02:33 +0000
Files and hashes: 1: 5AArOA0LkskA5tw5SWJx3j9Dv6g.asa (hash: g3ncVbCPorzKexZkECV8nZNdPxcAqa14QO98wuTocr8=)
2: XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl (hash: PMFbS6WOclUh2zvsUVqZ+dfS+8hERysMFM9mufVruYk=)
3: sZcKQ6cgnSFOArUoubXO-7UtF2w.roa (hash: i70yL5ZQtlkXeA37PkWypyq+6GqmS0P1o3XFiLGyrFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d2:8f:b4:28:35:c7:69:5d:e3:22:ce:6a:1e:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Validity
Not Before: Sep 28 07:02:33 2026 GMT
Not After : Sep 29 07:02:33 2026 GMT
Subject: CN=d4dc03e3ea92008ee2b5c60ea9211315ce58feac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:62:c7:25:ff:99:6c:5f:85:9e:de:ac:6e:
b3:64:91:e1:a0:14:55:04:11:c8:d6:63:72:6b:65:
48:50:a8:f3:eb:bf:d7:27:ba:84:97:51:a8:81:7d:
44:c5:26:64:a3:78:d8:d3:9f:fc:74:50:fd:31:9e:
4a:f9:ad:e9:22:d8:26:35:20:7a:b9:58:40:2c:9b:
ef:2b:d9:16:4c:69:72:c5:29:26:58:7d:a5:31:e9:
7c:59:4a:8b:fb:c3:d8:b5:c1:20:3d:d1:be:93:05:
40:16:29:1e:1f:ed:30:6f:87:ce:c4:93:e5:db:48:
50:95:4f:c5:6d:47:ac:ca:b0:42:8c:f9:ef:3c:74:
83:58:17:68:de:3a:92:f1:e3:50:60:30:26:79:fe:
b6:b8:f5:bc:0e:b4:9f:12:03:8e:6d:31:41:ae:f3:
5d:10:3c:ee:c1:c0:c5:c9:f5:07:fc:ce:99:b4:01:
f4:50:28:e4:b4:d0:e6:76:41:46:47:ee:a3:0c:45:
df:1c:e5:fb:cf:cc:37:60:a2:dd:c9:5d:61:79:98:
7e:b8:f7:54:ef:c6:7d:fa:5f:08:e6:a5:f2:1e:5c:
c0:02:91:fc:1f:bf:a9:5c:69:f1:9d:cf:a0:93:20:
90:60:1d:9c:34:9b:d9:31:b3:b3:5a:9b:a9:57:92:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:03:E3:EA:92:00:8E:E2:B5:C6:0E:A9:21:13:15:CE:58:FE:AC
X509v3 Authority Key Identifier:
keyid:5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:28:bd:15:b8:a4:55:f7:29:61:ef:9a:9c:16:26:1a:4c:e8:
35:e0:90:91:63:5c:62:d0:f2:e3:56:38:04:63:2e:e4:07:d4:
16:9e:b4:16:7c:42:79:64:35:8c:41:dd:c7:cf:4c:99:4b:bd:
cc:d8:d9:c7:66:78:82:78:36:b3:09:58:db:b1:b4:c6:30:df:
10:a6:ce:57:d4:97:46:06:7d:38:6d:8c:82:5e:d0:43:a0:26:
d6:48:f7:a8:c3:ef:02:3c:4d:5c:73:c0:57:45:ee:a3:11:ca:
98:fa:d3:2e:47:7f:11:3a:4b:75:32:26:6b:17:17:d7:ff:16:
a0:a9:7a:8d:14:66:50:7f:0c:83:25:2b:36:fb:b2:3c:c8:d3:
ab:89:04:d5:04:cf:ab:c3:b7:bf:dd:24:e9:28:13:5f:77:30:
7e:08:e1:e6:53:49:17:b8:f3:5f:57:fc:ef:01:49:29:6e:b9:
6e:a3:d8:1d:6e:e7:0b:bd:de:76:be:cb:30:2f:d3:fe:3d:8e:
76:8f:e5:57:6f:f0:6f:d3:40:75:ae:63:19:ff:92:88:88:b7:
31:5e:e3:b0:7f:91:27:a0:25:ad:c2:e7:73:aa:2e:01:2c:53:
37:49:05:b9:06:f3:33:17:50:52:3a:20:67:bd:33:28:14:ca:
5e:d3:47:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDm0o+0KDXHaV3jIs5qHj37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTVkZjM4NjBiMjRkZGJiYTU3M2VkMDQ4ZDRhNzIzMGJm
NWIxYTIwHhcNMjYwOTI4MDcwMjMzWhcNMjYwOTI5MDcwMjMzWjAzMTEwLwYDVQQD
EyhkNGRjMDNlM2VhOTIwMDhlZTJiNWM2MGVhOTIxMTMxNWNlNThmZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqftixyX/mWxfhZ7erG6zZJHhoBRV
BBHI1mNya2VIUKjz67/XJ7qEl1GogX1ExSZko3jY05/8dFD9MZ5K+a3pItgmNSB6
uVhALJvvK9kWTGlyxSkmWH2lMel8WUqL+8PYtcEgPdG+kwVAFikeH+0wb4fOxJPl
20hQlU/FbUesyrBCjPnvPHSDWBdo3jqS8eNQYDAmef62uPW8DrSfEgOObTFBrvNd
EDzuwcDFyfUH/M6ZtAH0UCjktNDmdkFGR+6jDEXfHOX7z8w3YKLdyV1heZh+uPdU
78Z9+l8I5qXyHlzAApH8H7+pXGnxnc+gkyCQYB2cNJvZMbOzWpupV5LJwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTcA+PqkgCO4rXGDqkhExXOWP6sMB8GA1UdIwQY
MBaAFF7l3zhgsk3bulc+0EjUpyML9bGiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVYZk9HQ3lUZHU2Vno3UVNOU25Jd3Yxc2FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83ZTRkY2EtMTgzMi00N2Y1LWEwZDAt
NWIyNWY3YmE3MDVjLzEvWHVYZk9HQ3lUZHU2Vno3UVNOU25Jd3Yxc2FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83ZTRkY2EtMTgzMi00N2Y1LWEwZDAtNWIyNWY3YmE3MDVj
LzEvWHVYZk9HQ3lUZHU2Vno3UVNOU25Jd3Yxc2FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyi9Fbik
VfcpYe+anBYmGkzoNeCQkWNcYtDy41Y4BGMu5AfUFp60FnxCeWQ1jEHdx89MmUu9
zNjZx2Z4gng2swlY27G0xjDfEKbOV9SXRgZ9OG2Mgl7QQ6Am1kj3qMPvAjxNXHPA
V0XuoxHKmPrTLkd/ETpLdTImaxcX1/8WoKl6jRRmUH8MgyUrNvuyPMjTq4kE1QTP
q8O3v90k6SgTX3cwfgjh5lNJF7jzX1f87wFJKW65bqPYHW7nC73edr7LMC/T/j2O
do/lV2/wb9NAda5jGf+SiIi3MV7jsH+RJ6AlrcLnc6ouASxTN0kFuQbzMxdQUjog
Z70zKBTKXtNH0w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:07 2026 by rpki-client