Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: +JlJph3z990ZnZw+kAQ2ISgV3Ubu8U/hGvrDk8lR3dI=
Subject key identifier: D6:F5:99:F7:7D:2E:AF:C3:8E:47:5B:D0:4E:9C:38:2A:AC:4E:E2:DC
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01A002EF43D0C88BF3A95101897AAD38BE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1A0A
Signing time: Sat 15 Aug 2026 01:00:29 +0000
Manifest this update: Sat 15 Aug 2026 01:00:29 +0000
Manifest next update: Sun 16 Aug 2026 01:00:29 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: IaNiTJhvz4ffgPNPfh1cRfpvm7lOcWJftOw4+bgSJbw=)
3: swnpl4td9eb6_J81u2GZTHQvUnM.roa (hash: OzZo/a2puN3YVDYWaueHcqlnkjv3aKzrJf+DmBTG+js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:43:d0:c8:8b:f3:a9:51:01:89:7a:ad:38:be:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Aug 15 01:00:29 2026 GMT
Not After : Aug 16 01:00:29 2026 GMT
Subject: CN=d6f599f77d2eafc38e475bd04e9c382aac4ee2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:0d:7c:00:3d:0a:6c:37:08:d4:0d:c3:dd:
85:e3:e6:e4:66:ee:ad:15:c0:1f:66:28:8b:c9:4b:
30:ec:b9:fb:08:bd:2a:6c:0d:d4:d4:4b:e3:7f:4a:
47:97:87:ee:90:da:97:39:77:d0:60:4d:1a:27:19:
a6:cf:21:a5:ad:36:7e:12:c1:19:e2:a4:75:e2:cc:
23:71:5f:25:d7:1a:89:92:72:0b:c2:2b:de:5c:7e:
b4:db:1a:d0:49:74:c6:d8:4c:e7:e6:d3:c1:aa:e3:
1e:5f:ab:75:57:71:2a:bf:89:5b:8f:06:74:70:1a:
88:30:94:c2:f7:9a:f2:dd:f2:f1:44:42:64:ef:7d:
da:f5:75:c4:12:15:6f:96:72:56:89:a2:a7:41:84:
df:13:71:93:6b:40:07:72:45:30:27:d1:7c:d2:c7:
2b:7c:33:6b:91:e9:07:3e:43:3d:3e:53:ba:33:20:
03:ec:9f:b2:d8:d0:f0:6d:82:4a:1f:14:4f:88:45:
a6:53:45:81:d7:7e:09:0a:c4:9d:a6:be:3e:22:cb:
4d:60:80:d8:30:59:c1:cf:b9:4d:ad:3e:10:d7:17:
f2:ea:8d:28:4d:6c:3e:23:8b:94:ff:9d:44:66:1e:
07:82:f4:59:94:c9:c8:b0:fc:b3:f0:1f:7f:ff:2c:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F5:99:F7:7D:2E:AF:C3:8E:47:5B:D0:4E:9C:38:2A:AC:4E:E2:DC
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:df:32:db:ac:e8:90:73:8f:a4:1c:20:89:c5:8c:f1:8c:c5:
e9:24:72:e3:50:d8:8d:3f:13:ad:84:85:64:ab:8f:b3:08:ea:
a8:06:88:b9:aa:60:80:81:b1:93:79:97:09:3b:6f:3f:d5:99:
b5:58:74:71:b8:ff:3a:ba:aa:ed:03:23:72:85:ec:88:5e:92:
3e:19:7a:07:9b:84:35:13:4a:cb:d6:92:81:82:74:2f:d5:b6:
a3:2e:72:9c:95:9b:cc:0c:fa:a5:6d:34:6c:54:32:fa:cf:99:
15:11:5e:d4:3d:ea:f0:e7:3e:8a:42:2f:57:d2:9e:0d:b6:18:
2a:2a:3a:9e:e7:e4:75:ff:4b:57:56:d2:a5:7c:4d:e9:35:94:
a1:29:48:e1:d0:79:ce:ea:fb:2a:2c:f4:32:da:27:ae:62:49:
2f:e4:04:71:09:db:f4:71:b2:12:b0:60:f3:12:b0:ee:05:e4:
be:53:d6:9c:2e:12:e4:0a:a7:f4:3c:27:cf:92:2e:40:7b:44:
f1:2b:50:a7:ab:30:c3:6b:18:ba:00:88:d5:07:9d:52:5e:80:
03:0a:55:86:14:56:96:89:c1:44:f8:1b:d2:94:80:92:97:b9:
e3:37:b6:62:3f:5a:52:d7:cd:17:c1:42:54:9d:1f:bf:7d:be:
a0:4e:4d:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC70PQyIvzqVEBiXqtOL4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjYwODE1MDEwMDI5WhcNMjYwODE2MDEwMDI5WjAzMTEwLwYDVQQD
EyhkNmY1OTlmNzdkMmVhZmMzOGU0NzViZDA0ZTljMzgyYWFjNGVlMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpoNfAA9Cmw3CNQNw92F4+bkZu6t
FcAfZiiLyUsw7Ln7CL0qbA3U1Evjf0pHl4fukNqXOXfQYE0aJxmmzyGlrTZ+EsEZ
4qR14swjcV8l1xqJknILwiveXH602xrQSXTG2Ezn5tPBquMeX6t1V3Eqv4lbjwZ0
cBqIMJTC95ry3fLxREJk733a9XXEEhVvlnJWiaKnQYTfE3GTa0AHckUwJ9F80scr
fDNrkekHPkM9PlO6MyAD7J+y2NDwbYJKHxRPiEWmU0WB134JCsSdpr4+IstNYIDY
MFnBz7lNrT4Q1xfy6o0oTWw+I4uU/51EZh4HgvRZlMnIsPyz8B9//yyQsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb1mfd9Lq/Djkdb0E6cOCqsTuLcMB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed8y26zo
kHOPpBwgicWM8YzF6SRy41DYjT8TrYSFZKuPswjqqAaIuapggIGxk3mXCTtvP9WZ
tVh0cbj/Orqq7QMjcoXsiF6SPhl6B5uENRNKy9aSgYJ0L9W2oy5ynJWbzAz6pW00
bFQy+s+ZFRFe1D3q8Oc+ikIvV9KeDbYYKio6nufkdf9LV1bSpXxN6TWUoSlI4dB5
zur7Kiz0MtonrmJJL+QEcQnb9HGyErBg8xKw7gXkvlPWnC4S5Aqn9Dwnz5IuQHtE
8StQp6sww2sYugCI1QedUl6AAwpVhhRWlonBRPgb0pSAkpe54ze2Yj9aUtfNF8FC
VJ0fv32+oE5NIA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:31:55 2026 by rpki-client