Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: Y0sJgrUuu3+TmeK9I7Lt1Txv2avFBM5Un2ZuE/6yqew=
Subject key identifier: 65:F4:01:7F:BC:81:6C:52:E3:9D:6B:3E:54:F4:34:9A:E5:23:54:9D
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 01A154AE5EBEC8125D436C9C5180C6886CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0FA2
Signing time: Mon 19 Oct 2026 15:01:15 +0000
Manifest this update: Mon 19 Oct 2026 15:01:15 +0000
Manifest next update: Tue 20 Oct 2026 15:01:15 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: vzKosPhqR1pkG3GSBEOo846REh2/2kaFIt3aRdDVFbM=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:5e:be:c8:12:5d:43:6c:9c:51:80:c6:88:6c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Oct 19 15:01:15 2026 GMT
Not After : Oct 20 15:01:15 2026 GMT
Subject: CN=65f4017fbc816c52e39d6b3e54f4349ae523549d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:72:84:cb:df:e5:58:f4:d9:a0:18:62:f9:
d9:87:41:b7:f5:43:52:22:23:2c:20:4b:6b:45:fe:
75:c3:85:9d:27:ba:bf:16:3e:eb:e8:24:40:4f:cb:
14:84:ea:8b:9e:67:2c:83:20:21:78:25:28:15:88:
7c:9f:c2:f7:9f:cb:cc:69:e8:92:2b:cd:2a:92:34:
2b:64:e1:19:92:f8:ff:e1:02:e0:df:e6:a8:7c:4e:
07:f3:c3:7e:6e:fb:23:42:07:2e:62:0d:18:68:6a:
f8:0b:25:1b:58:16:cd:a8:24:5a:6b:fc:bb:cc:ee:
e6:0b:f9:cb:b0:fc:16:4e:eb:8b:8c:a0:5d:46:95:
32:65:ff:43:e7:22:26:b5:4c:dc:8e:03:c9:ef:2b:
c2:99:90:ac:63:da:6d:8e:22:87:ac:aa:aa:9e:96:
fc:ae:dd:9f:0b:3e:63:3c:bd:9c:f8:d9:4e:dd:a5:
21:f1:ed:6d:2f:34:bc:e9:00:57:01:02:33:ea:08:
03:8c:f5:3b:6d:7c:09:65:34:2e:7a:45:0b:66:db:
78:0d:0c:d6:34:32:11:6d:03:8b:7e:0a:71:79:64:
12:a9:47:6f:04:3e:ba:94:ef:74:84:e9:a3:fc:ab:
f1:c1:2c:38:a8:c6:d4:d0:9f:97:cd:06:de:7b:db:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F4:01:7F:BC:81:6C:52:E3:9D:6B:3E:54:F4:34:9A:E5:23:54:9D
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fc:42:0c:5a:65:b5:6b:94:60:95:f4:5a:28:b1:f4:0f:66:
b2:4a:4d:7d:91:47:0c:90:74:24:3e:96:25:f3:4d:af:dc:1e:
71:45:c8:e8:31:98:98:b7:48:2b:bf:8e:a3:28:86:3e:5c:1c:
04:21:21:10:c4:00:2a:f0:5c:a3:e8:ad:96:5c:ae:fa:14:bf:
1a:d7:6f:da:25:02:66:7f:7e:78:5c:0e:d2:be:53:39:68:d4:
9e:a9:a0:f6:f7:4e:20:68:b2:95:de:f9:76:1c:4f:59:50:2d:
09:55:43:c5:f9:9a:2c:94:89:3f:7d:23:16:51:7d:75:ce:95:
c8:b6:ea:eb:93:f2:da:65:10:b8:25:10:0e:0a:ec:83:dc:3a:
de:f4:28:a6:4e:0f:7b:64:6e:18:02:bf:7a:d9:a0:62:24:62:
e7:04:e0:e4:8b:34:01:da:94:d8:92:41:9a:e2:da:ea:fc:f3:
69:00:a4:24:bf:77:15:c7:15:d7:b1:2c:bc:28:1f:0f:c2:82:
d6:07:6c:b6:c3:9b:ef:c9:57:1f:c0:3d:fc:fe:02:37:df:7c:
05:d3:6e:3a:f8:d8:36:1a:8b:c8:36:3a:d5:3d:ec:a1:b5:1e:
d4:f2:b4:92:b7:cf:0d:57:4c:b5:1c:f4:f1:76:17:fe:fd:80:
da:1c:4f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUrl6+yBJdQ2ycUYDGiGzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2
ZjYyZDYwHhcNMjYxMDE5MTUwMTE1WhcNMjYxMDIwMTUwMTE1WjAzMTEwLwYDVQQD
Eyg2NWY0MDE3ZmJjODE2YzUyZTM5ZDZiM2U1NGY0MzQ5YWU1MjM1NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvVyhMvf5Vj02aAYYvnZh0G39UNS
IiMsIEtrRf51w4WdJ7q/Fj7r6CRAT8sUhOqLnmcsgyAheCUoFYh8n8L3n8vMaeiS
K80qkjQrZOEZkvj/4QLg3+aofE4H88N+bvsjQgcuYg0YaGr4CyUbWBbNqCRaa/y7
zO7mC/nLsPwWTuuLjKBdRpUyZf9D5yImtUzcjgPJ7yvCmZCsY9ptjiKHrKqqnpb8
rt2fCz5jPL2c+NlO3aUh8e1tLzS86QBXAQIz6ggDjPU7bXwJZTQuekULZtt4DQzW
NDIRbQOLfgpxeWQSqUdvBD66lO90hOmj/KvxwSw4qMbU0J+XzQbee9tadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX0AX+8gWxS451rPlT0NJrlI1SdMB8GA1UdIwQY
MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct
NDAyMjM4NjM4ZWEzLzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz
LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvxCDFpl
tWuUYJX0Wiix9A9mskpNfZFHDJB0JD6WJfNNr9wecUXI6DGYmLdIK7+OoyiGPlwc
BCEhEMQAKvBco+itllyu+hS/Gtdv2iUCZn9+eFwO0r5TOWjUnqmg9vdOIGiyld75
dhxPWVAtCVVDxfmaLJSJP30jFlF9dc6VyLbq65Py2mUQuCUQDgrsg9w63vQopk4P
e2RuGAK/etmgYiRi5wTg5Is0AdqU2JJBmuLa6vzzaQCkJL93FccV17EsvCgfD8KC
1gdstsOb78lXH8A9/P4CN998BdNuOvjYNhqLyDY61T3sobUe1PK0krfPDVdMtRz0
8XYX/v2A2hxP2w==
-----END CERTIFICATE-----
Generated at Tue Oct 20 00:40:23 2026 by rpki-client