Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: Hg8fOzVtA7Z0cwzjYM+0kZ9f3hPL7xRvVt/Hrr6MkpY=
Subject key identifier: 99:F8:D1:D0:A6:63:3B:14:54:3E:44:B3:D8:23:7F:9D:19:BF:70:71
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 01A17A0499308E05EA1183E63ED0C6666795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 16FB
Signing time: Mon 26 Oct 2026 21:01:24 +0000
Manifest this update: Mon 26 Oct 2026 21:01:24 +0000
Manifest next update: Tue 27 Oct 2026 21:01:24 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: 3tru2hSVvtpKC4IEWNDQllxLYsL/9HHL6GuaK7uQc/o=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:99:30:8e:05:ea:11:83:e6:3e:d0:c6:66:67:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Oct 26 21:01:24 2026 GMT
Not After : Oct 27 21:01:24 2026 GMT
Subject: CN=99f8d1d0a6633b14543e44b3d8237f9d19bf7071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:41:07:c5:fd:a4:85:1d:11:07:eb:36:75:
07:34:23:5e:86:33:4d:00:e1:06:8f:1b:92:c4:e1:
5c:23:45:72:4c:0c:f8:63:b2:91:d3:e4:5d:72:db:
a1:53:52:51:a9:15:40:8a:31:c3:66:85:cc:55:65:
2a:88:79:43:31:1b:f5:27:d1:ae:c0:4d:8b:78:bd:
c9:22:c2:75:ca:14:49:3c:01:61:a4:ed:33:b3:76:
90:66:12:e2:95:a1:d3:71:e0:50:eb:73:eb:68:29:
6e:eb:bd:3c:27:c1:32:13:9f:6a:5b:0e:c3:01:63:
00:88:51:dc:13:87:a0:e3:53:b9:ab:4c:15:df:72:
db:f2:cc:65:b9:c2:ab:26:02:70:6a:63:13:3f:8c:
f2:a8:c9:a7:31:43:83:d6:8c:d5:e4:4c:0e:5a:88:
95:2b:2b:8f:44:f9:6d:ab:2e:17:8c:b3:6a:6b:95:
03:9c:9d:4e:ed:38:c9:1a:1c:c8:4e:5e:22:66:ab:
c4:b4:bd:cb:6c:67:0e:6e:b8:7c:b5:17:37:af:c5:
6a:63:ab:4c:82:a8:26:59:b7:1c:38:ba:ef:6e:02:
c2:98:d0:a5:44:e2:2e:99:31:cb:b5:65:4b:dd:2b:
ef:e0:2a:a0:29:cb:77:0e:e1:1f:48:06:4e:9a:9d:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:D1:D0:A6:63:3B:14:54:3E:44:B3:D8:23:7F:9D:19:BF:70:71
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:50:1f:cf:b0:33:be:a6:55:1d:9d:ee:e7:84:d5:26:ff:
46:a0:9c:02:d1:92:76:e0:47:63:11:85:9c:01:83:98:6d:1f:
8d:77:21:c3:e7:3f:6e:07:52:41:0d:9e:42:09:7a:e8:4d:7f:
4b:aa:37:1a:1c:cf:af:0c:ea:60:d4:b5:75:42:d0:0f:78:e3:
1d:4d:ed:a2:5a:4f:b6:66:8d:67:93:99:c1:1f:03:3b:98:03:
2e:9f:ae:a7:10:86:25:f2:0c:f8:e2:0d:0a:01:c8:f7:4e:1d:
00:38:41:f2:72:f3:7f:14:0a:cd:74:f6:c0:bb:80:94:18:1e:
90:7d:99:b6:e5:a3:52:2c:86:1b:08:4b:c9:11:5f:9f:bc:b8:
32:d7:cf:df:85:78:2e:f2:03:dc:64:43:9b:1f:b4:3d:7d:92:
60:b7:6b:3b:b2:26:ca:86:9d:8b:68:00:7d:7d:62:94:45:49:
45:f0:2d:99:7d:14:cf:f7:d4:58:cb:34:aa:da:b7:c9:f8:0a:
1e:62:21:14:74:7d:5f:e8:85:59:bc:18:98:00:b6:b7:92:06:
68:0d:92:9a:84:6e:35:3b:5e:ae:1e:eb:9a:d6:57:be:70:42:
85:ba:97:70:22:b5:19:48:1d:87:12:45:f0:43:e6:18:0b:8b:
7b:9d:37:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BJkwjgXqEYPmPtDGZmeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi
MDJhMzcwHhcNMjYxMDI2MjEwMTI0WhcNMjYxMDI3MjEwMTI0WjAzMTEwLwYDVQQD
Eyg5OWY4ZDFkMGE2NjMzYjE0NTQzZTQ0YjNkODIzN2Y5ZDE5YmY3MDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul1BB8X9pIUdEQfrNnUHNCNehjNN
AOEGjxuSxOFcI0VyTAz4Y7KR0+RdctuhU1JRqRVAijHDZoXMVWUqiHlDMRv1J9Gu
wE2LeL3JIsJ1yhRJPAFhpO0zs3aQZhLilaHTceBQ63PraClu6708J8EyE59qWw7D
AWMAiFHcE4eg41O5q0wV33Lb8sxlucKrJgJwamMTP4zyqMmnMUOD1ozV5EwOWoiV
KyuPRPltqy4XjLNqa5UDnJ1O7TjJGhzITl4iZqvEtL3LbGcObrh8tRc3r8VqY6tM
gqgmWbccOLrvbgLCmNClROIumTHLtWVL3Svv4CqgKct3DuEfSAZOmp0AJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn40dCmYzsUVD5Es9gjf50Zv3BxMB8GA1UdIwQY
MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt
YjVmMGQyMTA1M2Y4LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4
LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeRQH8+w
M76mVR2d7ueE1Sb/RqCcAtGSduBHYxGFnAGDmG0fjXchw+c/bgdSQQ2eQgl66E1/
S6o3GhzPrwzqYNS1dULQD3jjHU3tolpPtmaNZ5OZwR8DO5gDLp+upxCGJfIM+OIN
CgHI904dADhB8nLzfxQKzXT2wLuAlBgekH2ZtuWjUiyGGwhLyRFfn7y4MtfP34V4
LvID3GRDmx+0PX2SYLdrO7Imyoadi2gAfX1ilEVJRfAtmX0Uz/fUWMs0qtq3yfgK
HmIhFHR9X+iFWbwYmAC2t5IGaA2SmoRuNTterh7rmtZXvnBChbqXcCK1GUgdhxJF
8EPmGAuLe503TA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:09:27 2026 by rpki-client