Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: JJ+dpLKGyeOKn+JoErj7K4q8HEdRUCfkTjxKGNT+Enw=
Subject key identifier: BF:17:F7:61:87:FF:02:BA:50:C5:71:34:D1:B0:B2:A3:CC:68:CC:75
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01A1287AD338C147BDE648C2C7530C6FA8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1AA5
Signing time: Sun 11 Oct 2026 01:01:40 +0000
Manifest this update: Sun 11 Oct 2026 01:01:40 +0000
Manifest next update: Mon 12 Oct 2026 01:01:40 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: Cirn+3+Z0HBs2HIL2DvxJWmyoQ/fQdwOBQmTp+8lGs8=)
3: l4QImOObZysd3ZnyZlrEsgrjht4.roa (hash: D4PFCUK0CjhbvSe1eoJTCIXJh8I+fx58ViRSrP71NaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:d3:38:c1:47:bd:e6:48:c2:c7:53:0c:6f:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Oct 11 01:01:40 2026 GMT
Not After : Oct 12 01:01:40 2026 GMT
Subject: CN=bf17f76187ff02ba50c57134d1b0b2a3cc68cc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:38:4c:68:3c:6a:f1:25:49:2c:cc:2a:27:
33:e3:bc:d5:b8:fc:7f:f2:12:31:5b:c7:a2:f4:65:
43:d2:33:89:25:9f:bc:fb:f7:7b:58:49:85:fb:cf:
39:f4:2a:06:ce:db:7b:f7:63:96:f9:53:e6:09:a3:
75:16:80:6f:a1:39:11:e2:e8:f3:59:ba:01:01:bb:
b0:16:a6:f1:ec:39:b7:5f:2b:43:47:fc:48:b6:f4:
fc:13:85:86:73:c1:7f:89:3c:fb:96:4b:49:c0:10:
5a:d6:ae:a4:6b:d5:99:dd:12:77:f1:92:07:47:0e:
e6:02:3f:d3:0c:9d:51:57:2c:75:12:f8:f8:2e:25:
d1:5b:34:bd:01:d6:46:50:5a:95:75:30:31:48:fa:
b5:05:ea:66:13:24:9f:4e:cb:db:90:14:14:4b:84:
3a:eb:49:c5:5a:71:01:6e:4a:24:55:0f:1b:a6:43:
52:18:7a:39:88:ac:2f:d0:d3:59:75:98:e1:9f:28:
5e:b0:9e:bd:45:7f:3b:fb:8f:b2:5e:b2:d3:c0:4d:
e2:b8:07:93:df:ad:d4:0e:a1:fc:79:cb:eb:24:7e:
54:cd:a4:e8:c7:9c:d9:81:65:d1:68:06:af:9d:37:
5b:30:70:80:e3:c4:ab:e8:75:3e:94:ae:62:0e:03:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:F7:61:87:FF:02:BA:50:C5:71:34:D1:B0:B2:A3:CC:68:CC:75
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:20:7b:12:42:fb:61:5e:0c:9d:66:90:21:18:05:6d:04:af:
9b:08:5f:f0:3a:99:fc:64:be:ae:e3:9f:fd:e3:25:fe:3c:54:
04:c8:36:15:3a:65:a6:c4:16:50:fe:9a:7e:c0:5b:62:15:08:
47:ed:78:df:2e:d0:fa:5f:e0:3c:a4:2e:90:b7:21:f0:e0:0e:
ae:45:ec:2f:f5:ca:ed:6a:9d:40:c8:a9:ef:89:aa:0f:f1:11:
a5:5f:79:33:17:73:99:b9:76:08:b4:18:53:a9:00:81:40:37:
6a:da:17:f7:25:e9:2d:6e:62:e8:b9:ac:07:3c:e1:de:34:81:
e7:45:0d:25:5a:e6:82:88:60:7f:a3:d7:c1:be:fc:93:3c:99:
0f:b7:5b:88:71:29:5f:eb:a4:2c:15:8f:e0:ce:9a:71:7c:49:
48:9b:09:fe:c6:2a:77:0b:07:29:44:83:04:d0:88:eb:87:9d:
4d:f4:11:af:b1:89:81:c1:de:8a:02:5f:17:4c:62:ba:23:7f:
8f:42:10:1f:89:71:b7:4c:97:0a:05:a3:66:20:90:d2:22:b2:
49:94:0b:94:a6:50:ce:6c:08:a6:18:ee:35:26:b3:cd:10:71:
62:ad:c8:2d:4b:e6:90:1d:85:4f:7d:85:7a:51:73:a9:a0:a5:
5d:5e:33:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoetM4wUe95kjCx1MMb6jvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjYxMDExMDEwMTQwWhcNMjYxMDEyMDEwMTQwWjAzMTEwLwYDVQQD
EyhiZjE3Zjc2MTg3ZmYwMmJhNTBjNTcxMzRkMWIwYjJhM2NjNjhjYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzic4TGg8avElSSzMKicz47zVuPx/
8hIxW8ei9GVD0jOJJZ+8+/d7WEmF+8859CoGztt792OW+VPmCaN1FoBvoTkR4ujz
WboBAbuwFqbx7Dm3XytDR/xItvT8E4WGc8F/iTz7lktJwBBa1q6ka9WZ3RJ38ZIH
Rw7mAj/TDJ1RVyx1Evj4LiXRWzS9AdZGUFqVdTAxSPq1BepmEySfTsvbkBQUS4Q6
60nFWnEBbkokVQ8bpkNSGHo5iKwv0NNZdZjhnyhesJ69RX87+4+yXrLTwE3iuAeT
363UDqH8ecvrJH5UzaTox5zZgWXRaAavnTdbMHCA48Sr6HU+lK5iDgPgsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8X92GH/wK6UMVxNNGwsqPMaMx1MB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyB7EkL7
YV4MnWaQIRgFbQSvmwhf8DqZ/GS+ruOf/eMl/jxUBMg2FTplpsQWUP6afsBbYhUI
R+143y7Q+l/gPKQukLch8OAOrkXsL/XK7WqdQMip74mqD/ERpV95Mxdzmbl2CLQY
U6kAgUA3atoX9yXpLW5i6LmsBzzh3jSB50UNJVrmgohgf6PXwb78kzyZD7dbiHEp
X+ukLBWP4M6acXxJSJsJ/sYqdwsHKUSDBNCI64edTfQRr7GJgcHeigJfF0xiuiN/
j0IQH4lxt0yXCgWjZiCQ0iKySZQLlKZQzmwIphjuNSazzRBxYq3ILUvmkB2FT32F
elFzqaClXV4zoQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:31:26 2026 by rpki-client