Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: bdq33QYL3urvruFyA+z/qmeGCjIU/g4Nnyg/Xj0wQyQ=
Subject key identifier: C0:66:A7:4F:1B:CD:6B:22:58:FF:69:EB:F7:78:C3:A2:E1:92:33:D6
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 01A147603DA98A3BDE4F06D5391CBADCA7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 15E1
Signing time: Sat 17 Oct 2026 01:00:51 +0000
Manifest this update: Sat 17 Oct 2026 01:00:51 +0000
Manifest next update: Sun 18 Oct 2026 01:00:51 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: qThPrLFLFdevajphse9WtvfY2623chUMJM01D5XpA6U=)
5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:3d:a9:8a:3b:de:4f:06:d5:39:1c:ba:dc:a7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Oct 17 01:00:51 2026 GMT
Not After : Oct 18 01:00:51 2026 GMT
Subject: CN=c066a74f1bcd6b2258ff69ebf778c3a2e19233d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:05:6d:60:c7:0b:9a:6c:ab:43:de:97:db:
3c:03:7e:df:92:32:af:03:b6:f0:e8:26:74:4f:a3:
03:89:4d:e9:d7:68:18:78:fe:19:a6:ca:4e:96:fe:
ae:e6:4c:29:b8:2f:e6:9a:c7:53:57:34:3c:53:7d:
9d:59:6f:e3:c6:04:f3:90:be:fe:f4:12:86:11:1c:
e2:45:6d:e5:b7:6b:a6:8c:69:c8:aa:1c:c1:a0:2e:
70:87:b6:5c:db:62:5f:96:93:1e:be:31:d6:5e:ee:
5c:18:23:e5:f6:f9:f2:ff:d8:04:4b:64:f7:5d:b4:
74:94:8b:6a:7d:1a:02:96:f1:50:8c:9c:b4:62:92:
69:fd:ae:b7:a6:7e:c4:c0:7d:d0:09:3b:bc:0b:41:
00:e3:97:88:77:30:ae:1a:03:58:76:b9:42:43:08:
d4:d2:c7:97:de:f5:35:46:ed:02:b2:53:99:ff:29:
42:c9:50:84:25:b5:db:ea:1c:61:b5:bf:bb:e4:a8:
0e:10:2c:fe:92:59:71:76:e0:35:39:ab:92:62:90:
08:9d:f1:11:40:7c:79:4f:e8:61:ef:48:32:30:b2:
a9:67:65:db:3d:c2:79:d9:71:a6:de:bf:86:d7:ed:
d0:93:70:fa:d5:4f:01:34:d8:4f:8c:39:ea:c4:47:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:A7:4F:1B:CD:6B:22:58:FF:69:EB:F7:78:C3:A2:E1:92:33:D6
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ca:ee:f6:5b:10:51:bc:02:df:b7:d2:ec:7b:18:00:f3:bd:
52:3f:a6:a6:84:fc:81:bb:b0:11:93:c5:06:ff:11:67:ce:e7:
17:02:57:6b:b7:a1:05:9e:10:f9:98:d5:6e:25:e8:73:4e:10:
20:a5:71:ea:75:ec:f4:1f:d6:fd:12:81:ff:09:d4:95:f5:6e:
05:69:f2:95:d8:74:86:42:8e:f8:c9:1c:c6:27:9d:4b:b0:d7:
03:de:69:9a:60:61:6a:46:ad:b9:f7:8b:02:9d:7e:31:86:2a:
8c:69:70:7c:ab:7b:81:65:94:46:bd:66:8e:9f:af:82:d2:22:
88:24:a5:d0:ee:29:21:42:95:d5:cd:93:fa:b6:0e:06:4d:d5:
8e:69:a8:75:b9:b4:04:1b:82:09:6b:f4:99:3e:e3:8a:e3:ab:
30:30:17:25:a1:b2:c8:de:33:d9:1e:e9:65:6b:8a:b7:60:02:
92:c7:61:b7:82:38:54:c3:24:d0:42:3e:ec:1b:25:8e:5e:20:
22:98:8e:ba:d7:65:1d:b5:a0:90:ba:18:5f:41:8d:eb:3c:e6:
35:4d:21:a1:d3:78:13:9c:2d:10:dd:bf:18:cf:02:84:e4:93:
da:fa:2e:72:97:be:82:37:03:da:44:33:1f:12:71:f2:d9:14:
e4:68:f1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHYD2pijveTwbVORy63KelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl
NWNmOTYwHhcNMjYxMDE3MDEwMDUxWhcNMjYxMDE4MDEwMDUxWjAzMTEwLwYDVQQD
EyhjMDY2YTc0ZjFiY2Q2YjIyNThmZjY5ZWJmNzc4YzNhMmUxOTIzM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hUFbWDHC5psq0Pel9s8A37fkjKv
A7bw6CZ0T6MDiU3p12gYeP4ZpspOlv6u5kwpuC/mmsdTVzQ8U32dWW/jxgTzkL7+
9BKGERziRW3lt2umjGnIqhzBoC5wh7Zc22JflpMevjHWXu5cGCPl9vny/9gES2T3
XbR0lItqfRoClvFQjJy0YpJp/a63pn7EwH3QCTu8C0EA45eIdzCuGgNYdrlCQwjU
0seX3vU1Ru0CslOZ/ylCyVCEJbXb6hxhtb+75KgOECz+kllxduA1OauSYpAInfER
QHx5T+hh70gyMLKpZ2XbPcJ52XGm3r+G1+3Qk3D61U8BNNhPjDnqxEdo3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBmp08bzWsiWP9p6/d4w6LhkjPWMB8GA1UdIwQY
MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt
NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx
LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsru9lsQ
UbwC37fS7HsYAPO9Uj+mpoT8gbuwEZPFBv8RZ87nFwJXa7ehBZ4Q+ZjVbiXoc04Q
IKVx6nXs9B/W/RKB/wnUlfVuBWnyldh0hkKO+MkcxiedS7DXA95pmmBhakatufeL
Ap1+MYYqjGlwfKt7gWWURr1mjp+vgtIiiCSl0O4pIUKV1c2T+rYOBk3Vjmmodbm0
BBuCCWv0mT7jiuOrMDAXJaGyyN4z2R7pZWuKt2ACksdht4I4VMMk0EI+7Bsljl4g
IpiOutdlHbWgkLoYX0GN6zzmNU0hodN4E5wtEN2/GM8ChOST2voucpe+gjcD2kQz
HxJx8tkU5GjxEw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 04:55:41 2026 by rpki-client