Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: +lb2g1ipK1syiUM2ihGhgyWoUXfPM3JOhj2IdWLF6Sc=
Subject key identifier: 4A:7B:17:22:C7:13:27:67:A9:92:D4:22:56:FD:DF:B3:E7:6C:C1:AC
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 01A17FD01ED12DF9B1696BE919D6A3D4297B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0EEC
Signing time: Wed 28 Oct 2026 00:01:48 +0000
Manifest this update: Wed 28 Oct 2026 00:01:48 +0000
Manifest next update: Thu 29 Oct 2026 00:01:48 +0000
Files and hashes: 1: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: HFM/y+IYGJjJY/NA5i8hzxSzrcTSWFsABKNr7najDlo=)
2: eO46gXXoSZwATk8MoN76YPpN1jQ.roa (hash: F/WomuEJ+uQlAxaPHkR6qqNqSNUL0B0LVxqFRNytneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:1e:d1:2d:f9:b1:69:6b:e9:19:d6:a3:d4:29:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Oct 28 00:01:48 2026 GMT
Not After : Oct 29 00:01:48 2026 GMT
Subject: CN=4a7b1722c7132767a992d42256fddfb3e76cc1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:73:47:4e:4a:ff:77:3d:ab:9c:a9:b2:31:
c7:2f:f2:4a:84:c6:23:a8:a4:07:14:eb:33:c8:27:
3c:b3:1f:e5:5c:15:4b:1d:f4:1a:c2:e5:d2:57:c6:
62:46:c7:92:b0:31:73:49:ab:ba:84:33:78:29:d8:
99:62:3b:7f:43:11:b5:57:88:7e:9c:0d:86:5e:a4:
ab:e0:a1:97:9f:92:79:51:2f:ee:41:9e:59:04:84:
7c:82:b0:38:a9:a7:e4:44:2e:6b:d9:0d:ed:14:35:
5a:bf:9d:9c:ea:82:ac:a7:66:29:9b:35:93:81:27:
7a:81:bb:78:41:19:ad:2d:1f:69:11:be:ae:c7:fc:
37:13:cd:90:d8:a5:28:91:ae:b1:d7:8f:88:a3:28:
d8:d2:5f:fa:76:94:3c:c0:56:ff:2e:02:e5:7b:7b:
f3:3e:9d:2b:41:fd:af:30:89:da:a8:3b:f3:a7:6b:
dc:c4:c4:ca:28:17:44:d6:cd:05:ec:a1:a6:2c:05:
3f:1f:74:a5:01:9c:12:3e:98:a6:92:bc:b3:00:aa:
a8:2a:47:ed:ee:7c:1b:dd:f4:7b:ce:0a:fa:bc:f4:
05:ee:ee:53:0c:fa:58:fa:c5:f7:71:97:2f:6f:8e:
6f:ba:c0:73:ac:e2:1b:b5:db:42:e3:e3:dd:37:9c:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:17:22:C7:13:27:67:A9:92:D4:22:56:FD:DF:B3:E7:6C:C1:AC
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:01:d0:b0:dc:80:86:6c:a9:ee:92:ae:b4:ed:2b:1d:20:00:
f0:54:d7:9e:13:6b:e2:b9:52:15:99:0a:c6:ad:4f:e0:d8:2c:
61:e1:7e:05:c5:b6:03:81:e0:9f:e0:f2:f0:cd:f0:42:c5:46:
eb:e1:d7:3d:2c:e3:a5:f7:c4:b6:d9:36:96:b3:f0:40:75:c6:
51:10:cf:22:8f:a1:e1:01:15:7c:0c:31:dc:e5:7a:1b:ba:39:
4e:b7:0d:83:0c:ff:97:f9:b8:66:dd:f3:1d:00:80:00:5c:95:
33:ea:53:3d:62:2a:79:42:90:e9:f9:99:76:3a:53:4d:00:1e:
3e:58:2c:8f:e2:3d:3c:6e:dc:4c:0a:ed:97:b4:10:fe:8a:ed:
f2:69:e6:28:82:5f:2a:86:92:3d:58:fc:ef:83:6b:fe:1c:0d:
6a:db:cc:f6:0e:e6:fb:39:66:88:3d:22:22:b3:ee:e6:43:ab:
5f:dc:aa:c3:d0:4d:ed:1c:cd:aa:7b:86:87:6a:36:16:0d:a6:
b7:a4:8b:b7:74:ad:62:f6:72:44:c0:c6:5d:80:77:85:d0:49:
9a:9c:5a:b7:c2:8b:bf:c4:96:41:40:70:06:f5:c0:c4:7d:fe:
56:e0:94:02:01:cb:bd:40:d7:a5:9f:a0:13:ec:4c:c3:10:9e:
44:99:b8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/0B7RLfmxaWvpGdaj1Cl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj
NGFlMTIwHhcNMjYxMDI4MDAwMTQ4WhcNMjYxMDI5MDAwMTQ4WjAzMTEwLwYDVQQD
Eyg0YTdiMTcyMmM3MTMyNzY3YTk5MmQ0MjI1NmZkZGZiM2U3NmNjMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTVzR05K/3c9q5ypsjHHL/JKhMYj
qKQHFOszyCc8sx/lXBVLHfQawuXSV8ZiRseSsDFzSau6hDN4KdiZYjt/QxG1V4h+
nA2GXqSr4KGXn5J5US/uQZ5ZBIR8grA4qafkRC5r2Q3tFDVav52c6oKsp2YpmzWT
gSd6gbt4QRmtLR9pEb6ux/w3E82Q2KUoka6x14+IoyjY0l/6dpQ8wFb/LgLle3vz
Pp0rQf2vMInaqDvzp2vcxMTKKBdE1s0F7KGmLAU/H3SlAZwSPpimkryzAKqoKkft
7nwb3fR7zgr6vPQF7u5TDPpY+sX3cZcvb45vusBzrOIbtdtC4+PdN5w97wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp7FyLHEydnqZLUIlb937PnbMGsMB8GA1UdIwQY
MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt
YmJlYjQ1NTBkOWU2LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2
LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAHQsNyA
hmyp7pKutO0rHSAA8FTXnhNr4rlSFZkKxq1P4NgsYeF+BcW2A4Hgn+Dy8M3wQsVG
6+HXPSzjpffEttk2lrPwQHXGURDPIo+h4QEVfAwx3OV6G7o5TrcNgwz/l/m4Zt3z
HQCAAFyVM+pTPWIqeUKQ6fmZdjpTTQAePlgsj+I9PG7cTArtl7QQ/ort8mnmKIJf
KoaSPVj874Nr/hwNatvM9g7m+zlmiD0iIrPu5kOrX9yqw9BN7RzNqnuGh2o2Fg2m
t6SLt3StYvZyRMDGXYB3hdBJmpxat8KLv8SWQUBwBvXAxH3+VuCUAgHLvUDXpZ+g
E+xMwxCeRJm46Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:43 2026 by rpki-client