Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: EYP4caQFbaDnrCREQAplkocs2P02rjNVeWpjUJd3DJ4=
Subject key identifier: 52:27:42:B0:B5:2A:98:88:93:AE:00:95:35:D0:77:22:20:9B:7B:3F
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 01A16FB7A9FB603607ECBC20FAE36651395C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 19AF
Signing time: Sat 24 Oct 2026 21:01:09 +0000
Manifest this update: Sat 24 Oct 2026 21:01:09 +0000
Manifest next update: Sun 25 Oct 2026 21:01:09 +0000
Files and hashes: 1: Oanj9HZBO6pjmAia4pctaEcwILk.roa (hash: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: iPMaymzoi/Y7lkBtVFuUP8+Lh0x6KkU1f9pctwXgXyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:b7:a9:fb:60:36:07:ec:bc:20:fa:e3:66:51:39:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Oct 24 21:01:09 2026 GMT
Not After : Oct 25 21:01:09 2026 GMT
Subject: CN=522742b0b52a988893ae009535d07722209b7b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:af:9b:6f:8b:e0:7e:35:ad:fe:94:b4:db:
b1:9f:b8:2b:41:2d:ec:db:12:f1:52:8c:e4:38:6a:
72:3a:2c:ce:44:c3:50:b5:2b:4d:fa:83:50:ad:f6:
00:aa:65:e9:eb:c0:50:7c:ca:64:d1:f6:39:22:87:
76:9c:3e:63:51:66:56:e5:60:3e:e8:20:5a:37:7e:
28:e5:5a:05:b8:7c:f4:d2:fd:f5:34:fd:e7:0d:46:
82:50:78:45:3a:d3:43:a3:6f:33:29:a6:6d:17:32:
58:06:cf:0b:f9:69:27:6d:1e:f6:57:af:37:3f:2c:
6e:1c:11:88:9f:aa:21:ce:0b:28:57:0d:a2:66:f2:
33:96:47:01:d3:5e:60:6e:12:6c:52:a1:78:8d:53:
a7:5b:16:14:91:77:36:04:50:d8:d1:21:47:d3:58:
a4:52:1b:23:f4:88:9f:a3:69:f2:d6:76:c9:3b:e0:
06:59:53:79:2d:2e:48:04:64:ea:e7:d3:38:63:a7:
99:7a:d7:2c:0a:bd:ac:e5:98:87:00:b7:ac:95:60:
f3:1d:44:10:34:88:c3:89:2c:e5:19:8a:9c:7f:8d:
2e:a8:01:a1:a3:8b:46:81:4b:36:fc:81:85:9a:9a:
c8:c8:91:d6:6f:c9:c1:72:94:b6:56:f8:7f:32:51:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:42:B0:B5:2A:98:88:93:AE:00:95:35:D0:77:22:20:9B:7B:3F
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f9:af:a3:ce:c0:8f:3b:df:d1:c8:18:6c:50:ad:7e:c2:08:
cc:b2:b1:56:99:71:d3:fe:8d:00:f7:6b:21:58:7c:c5:d0:eb:
bc:05:6b:78:5a:e4:82:49:5d:bd:43:b0:cf:44:47:57:df:b6:
55:5d:0c:77:ea:66:02:dd:ef:45:9c:e1:c5:58:95:5e:7a:03:
41:8a:5a:7e:7a:f3:4c:2a:a1:78:57:65:d9:76:ba:f9:4a:e3:
2b:cd:41:70:02:dd:e4:3e:af:5a:77:58:47:c7:9e:82:d0:7a:
92:d4:f5:4d:8d:f1:16:67:6c:15:95:dd:4e:1b:07:92:4a:ab:
0f:a8:51:e4:b9:ff:53:f5:57:d5:8b:55:a3:d1:7d:84:85:30:
08:a5:b0:cf:b4:1f:7d:5f:f8:45:bd:f1:49:b3:93:48:e9:8f:
0c:e7:20:57:50:fa:c5:36:db:c8:da:12:7e:d9:3b:f1:7a:f5:
76:38:fe:a2:5c:2b:f4:b0:b3:a6:45:5b:db:65:07:00:7d:d7:
e8:bd:a3:81:0f:ee:92:b0:61:b9:2e:02:f0:a6:69:25:2e:e3:
d3:9f:d5:b3:0b:61:65:ce:5e:f5:f1:53:9d:ee:0e:28:b0:f2:
c3:64:51:8f:0e:c8:89:b1:13:33:18:9a:7e:17:9d:fb:98:68:
0b:7b:48:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFvt6n7YDYH7Lwg+uNmUTlcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy
ZjU4ZTIwHhcNMjYxMDI0MjEwMTA5WhcNMjYxMDI1MjEwMTA5WjAzMTEwLwYDVQQD
Eyg1MjI3NDJiMGI1MmE5ODg4OTNhZTAwOTUzNWQwNzcyMjIwOWI3YjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMyvm2+L4H41rf6UtNuxn7grQS3s
2xLxUozkOGpyOizORMNQtStN+oNQrfYAqmXp68BQfMpk0fY5Iod2nD5jUWZW5WA+
6CBaN34o5VoFuHz00v31NP3nDUaCUHhFOtNDo28zKaZtFzJYBs8L+WknbR72V683
PyxuHBGIn6ohzgsoVw2iZvIzlkcB015gbhJsUqF4jVOnWxYUkXc2BFDY0SFH01ik
Uhsj9Iifo2ny1nbJO+AGWVN5LS5IBGTq59M4Y6eZetcsCr2s5ZiHALeslWDzHUQQ
NIjDiSzlGYqcf40uqAGho4tGgUs2/IGFmprIyJHWb8nBcpS2Vvh/MlE5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFInQrC1KpiIk64AlTXQdyIgm3s/MB8GA1UdIwQY
MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt
Mjc5ZjU5NGIzYTJmLzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm
LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/mvo87A
jzvf0cgYbFCtfsIIzLKxVplx0/6NAPdrIVh8xdDrvAVreFrkgkldvUOwz0RHV9+2
VV0Md+pmAt3vRZzhxViVXnoDQYpafnrzTCqheFdl2Xa6+UrjK81BcALd5D6vWndY
R8eegtB6ktT1TY3xFmdsFZXdThsHkkqrD6hR5Ln/U/VX1YtVo9F9hIUwCKWwz7Qf
fV/4Rb3xSbOTSOmPDOcgV1D6xTbbyNoSftk78Xr1djj+olwr9LCzpkVb22UHAH3X
6L2jgQ/ukrBhuS4C8KZpJS7j05/VswthZc5e9fFTne4OKLDyw2RRjw7IibETMxia
fhed+5hoC3tI6A==
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:10:26 2026 by rpki-client