Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: 2FVud4X2aOKD2Tk0more56rStGjNyMN5/BZ0pbeiO/k=
Subject key identifier: 49:17:0F:46:88:52:63:76:76:83:02:28:78:BB:35:F6:A3:DE:A3:6A
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 01A18487961322436F477CC81B290501B984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 03F4
Signing time: Wed 28 Oct 2026 22:00:40 +0000
Manifest this update: Wed 28 Oct 2026 22:00:40 +0000
Manifest next update: Thu 29 Oct 2026 22:00:40 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: ipEcm7ZUjW56siAOQIyqojRptDxXLvsay4B9yoLgGhY=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:87:96:13:22:43:6f:47:7c:c8:1b:29:05:01:b9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Oct 28 22:00:40 2026 GMT
Not After : Oct 29 22:00:40 2026 GMT
Subject: CN=49170f46885263767683022878bb35f6a3dea36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:0b:69:3e:64:f4:58:b3:af:63:a5:a1:09:
0d:66:15:8e:c7:f1:0b:82:f6:dc:8a:59:2d:eb:36:
7f:c8:ca:96:a1:a3:0a:ea:55:60:6b:12:4f:26:88:
f3:3b:14:a2:e1:41:b9:2f:1f:12:d3:6c:dc:ba:38:
9b:d8:88:08:99:f8:9a:9f:e0:dc:01:56:55:6d:e8:
78:26:c1:29:bc:bf:ae:16:38:d0:e2:40:9e:79:79:
1a:f9:3d:39:6d:8e:a7:65:29:ce:aa:0f:6f:57:8d:
b5:e6:eb:98:6d:b3:3a:fc:3a:c8:10:9a:3c:0c:cd:
21:8d:b0:0b:6e:f1:81:1b:a9:50:b4:cc:92:72:1e:
f5:e3:0a:07:ac:37:6d:a3:b3:d9:13:c5:4b:cf:5f:
67:3b:cf:da:68:7d:d8:bc:0a:2e:f6:72:5f:1f:1e:
5e:2b:d0:41:e4:b4:82:88:34:9d:e1:6a:6f:f7:34:
05:2b:5a:a7:78:56:cc:3e:48:89:da:51:14:ae:15:
4c:e2:a5:d8:34:5b:12:66:ff:6c:84:95:9a:c9:76:
86:6d:bf:89:8d:e0:42:8d:ba:55:ef:01:e6:cc:38:
74:56:d4:a4:71:68:7e:52:d2:41:3d:54:7b:07:93:
08:37:1b:55:6c:80:cd:82:1b:32:de:bc:f7:76:22:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:17:0F:46:88:52:63:76:76:83:02:28:78:BB:35:F6:A3:DE:A3:6A
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:30:a6:24:6c:0b:52:08:43:fc:e7:a5:e1:cd:f4:43:c1:33:
a2:24:c5:3d:1a:40:9a:df:b0:34:47:b3:f7:3a:3f:c3:e7:77:
8f:c3:76:d6:f2:e1:fa:b2:cf:33:80:c3:e4:91:d5:23:c1:8d:
5d:5c:e4:4a:78:13:54:6e:a8:b8:c8:a5:30:e0:5b:6c:81:df:
af:1d:cd:ef:da:a2:85:2a:d7:4f:34:10:d3:fa:c5:32:6d:14:
44:d0:30:e7:f9:e7:dc:02:bd:00:13:ca:50:98:be:df:77:05:
b8:05:59:79:a6:8e:3f:55:40:46:7b:31:e4:e6:17:f8:49:3d:
df:15:56:f5:5e:96:eb:cc:68:71:84:20:82:9b:b8:07:6f:9d:
9a:55:e7:f6:30:f0:ad:ac:01:73:70:8b:b5:52:c0:e6:ac:8e:
aa:8f:82:c3:06:8a:34:7e:22:f4:e6:07:fa:fb:c8:c7:34:19:
36:90:d8:b4:52:2f:a6:23:36:d5:55:31:f6:ff:d2:ef:c6:28:
10:af:fd:35:38:53:59:54:04:9d:27:8f:e5:a5:e9:05:ea:2c:
dc:07:79:a1:9f:39:29:f4:a0:c5:f1:15:8e:2a:60:e6:ce:e1:
7f:45:9b:43:80:de:84:1b:df:13:f2:f7:5c:f2:b6:a9:40:79:
51:22:03:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEh5YTIkNvR3zIGykFAbmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOGY0MGIxMjQ4ZGUzZGE1ZjVkNjA5N2Y4MTA2ODI5M2M0
YmVlZjcwHhcNMjYxMDI4MjIwMDQwWhcNMjYxMDI5MjIwMDQwWjAzMTEwLwYDVQQD
Eyg0OTE3MGY0Njg4NTI2Mzc2NzY4MzAyMjg3OGJiMzVmNmEzZGVhMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh8LaT5k9Fizr2OloQkNZhWOx/EL
gvbcilkt6zZ/yMqWoaMK6lVgaxJPJojzOxSi4UG5Lx8S02zcujib2IgImfian+Dc
AVZVbeh4JsEpvL+uFjjQ4kCeeXka+T05bY6nZSnOqg9vV4215uuYbbM6/DrIEJo8
DM0hjbALbvGBG6lQtMySch714woHrDdto7PZE8VLz19nO8/aaH3YvAou9nJfHx5e
K9BB5LSCiDSd4Wpv9zQFK1qneFbMPkiJ2lEUrhVM4qXYNFsSZv9shJWayXaGbb+J
jeBCjbpV7wHmzDh0VtSkcWh+UtJBPVR7B5MINxtVbIDNghsy3rz3diIRqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkXD0aIUmN2doMCKHi7Nfaj3qNqMB8GA1UdIwQY
MBaAFF2PQLEkjePaX11gl/gQaCk8S+73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEt
YmQ2NWZlZDY3ZGM2LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEtYmQ2NWZlZDY3ZGM2
LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjCmJGwL
UghD/Oel4c30Q8EzoiTFPRpAmt+wNEez9zo/w+d3j8N21vLh+rLPM4DD5JHVI8GN
XVzkSngTVG6ouMilMOBbbIHfrx3N79qihSrXTzQQ0/rFMm0URNAw5/nn3AK9ABPK
UJi+33cFuAVZeaaOP1VARnsx5OYX+Ek93xVW9V6W68xocYQggpu4B2+dmlXn9jDw
rawBc3CLtVLA5qyOqo+CwwaKNH4i9OYH+vvIxzQZNpDYtFIvpiM21VUx9v/S78Yo
EK/9NThTWVQEnSeP5aXpBeos3Ad5oZ85KfSgxfEVjipg5s7hf0WbQ4DehBvfE/L3
XPK2qUB5USIDpg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:59 2026 by rpki-client