Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: 8sG29KGqtGV2JB/A0CdAjGWETLup6A3t9Vqw3HM4ltI=
Subject key identifier: F7:DE:B0:02:1D:0E:88:E1:A6:A4:FF:B0:A4:6D:1F:69:83:8D:C6:FB
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 01A17D3CD2768680AAFCDB5B638DB520CB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 12:01:40 +0000
Manifest this update: Tue 27 Oct 2026 12:01:40 +0000
Manifest next update: Wed 28 Oct 2026 12:01:40 +0000
Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: cvXDTg8hE4U1e3W83Za1rY/Hh1trjMCDXkIsFEYb0Qc=)
2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:d2:76:86:80:aa:fc:db:5b:63:8d:b5:20:cb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Oct 27 12:01:40 2026 GMT
Not After : Oct 28 12:01:40 2026 GMT
Subject: CN=f7deb0021d0e88e1a6a4ffb0a46d1f69838dc6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:b6:d7:53:f9:e5:aa:fe:ad:28:31:9d:5f:
d4:c9:42:ce:4c:fb:7f:a8:39:5d:cd:36:72:c7:b6:
6e:14:e0:58:b0:ae:89:8b:ec:44:07:0b:15:d0:93:
e1:b7:c6:5c:b2:d8:42:cc:60:c3:ca:fb:2f:2e:c1:
16:c4:03:0f:25:cb:8a:1f:c2:f2:04:b9:d3:fe:e6:
ab:c7:8d:58:c6:f3:a3:ca:b3:1b:06:1f:36:60:bb:
cf:05:be:a2:bc:05:67:d5:21:d3:75:40:93:f0:f4:
fc:45:12:15:da:42:46:73:69:d5:b9:01:db:23:30:
44:c3:85:a5:1f:ff:a6:b9:a1:0a:ac:55:ac:d7:13:
37:42:03:4f:b8:7a:0d:cd:92:a7:e2:da:07:82:39:
44:6c:2c:02:6b:42:ab:2e:07:29:e1:8b:fa:83:08:
bd:96:d9:d8:1f:5d:87:e4:79:9e:af:66:cd:d4:7a:
02:91:a4:82:f5:d9:03:74:ea:3b:94:31:ea:80:ec:
4a:66:6f:60:d1:05:5b:12:fb:c7:09:c0:5a:3a:20:
7c:cc:7f:0d:2f:71:12:57:33:2a:e0:99:e6:7c:77:
fc:9c:ec:5a:1a:c6:b0:47:80:2c:33:70:1f:0c:bd:
16:0d:0f:61:ec:67:58:b7:7e:c2:4c:57:07:b5:a5:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:B0:02:1D:0E:88:E1:A6:A4:FF:B0:A4:6D:1F:69:83:8D:C6:FB
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:66:12:8f:75:58:f7:38:41:fe:7a:7a:5b:06:8a:fd:dc:b9:
66:be:03:ce:9d:48:03:1a:18:90:2b:a9:56:0e:00:b1:82:43:
78:7d:f5:49:61:d9:b4:3c:c7:94:41:4a:95:7e:92:c7:17:f9:
be:12:5c:12:94:4b:40:c8:cc:f9:25:69:20:9a:82:e1:55:70:
57:cf:00:f6:05:ad:f8:af:77:e3:cd:75:14:70:c6:83:e2:ca:
be:85:16:d9:52:1e:34:bc:e0:2f:ea:78:3d:3f:85:34:bc:5b:
c2:bb:b0:ea:9a:b4:3c:70:a9:09:03:9d:0c:5c:7e:a5:3a:e5:
e9:f5:6d:00:9b:63:66:e1:7e:ae:a5:02:f1:a5:83:3c:ae:8c:
46:7f:63:8d:8e:e1:62:56:82:aa:f1:29:29:d6:e1:43:45:f8:
b4:2f:09:5e:7a:d7:c0:7f:8e:2b:30:4d:1a:ac:ad:df:47:46:
95:64:2a:3d:b0:e0:85:df:cf:75:00:00:e9:aa:6d:0c:2e:3e:
e9:df:01:5b:7f:1f:4d:51:a5:b6:30:9f:82:9a:e3:b3:0f:c9:
73:f6:d1:cb:ff:7c:da:a8:28:fc:4a:f7:b8:35:69:91:28:5d:
6f:1b:05:95:bc:cd:21:38:bb:30:30:42:e0:43:d9:e4:5c:fa:
ef:5e:77:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PNJ2hoCq/NtbY421IMsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjY0OGYxMjkwZDQ0NzFiY2RiNTBiODJiZTRlZDkzMjAw
MzA5NGQwHhcNMjYxMDI3MTIwMTQwWhcNMjYxMDI4MTIwMTQwWjAzMTEwLwYDVQQD
EyhmN2RlYjAwMjFkMGU4OGUxYTZhNGZmYjBhNDZkMWY2OTgzOGRjNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM+211P55ar+rSgxnV/UyULOTPt/
qDldzTZyx7ZuFOBYsK6Ji+xEBwsV0JPht8ZcsthCzGDDyvsvLsEWxAMPJcuKH8Ly
BLnT/uarx41YxvOjyrMbBh82YLvPBb6ivAVn1SHTdUCT8PT8RRIV2kJGc2nVuQHb
IzBEw4WlH/+muaEKrFWs1xM3QgNPuHoNzZKn4toHgjlEbCwCa0KrLgcp4Yv6gwi9
ltnYH12H5Hmer2bN1HoCkaSC9dkDdOo7lDHqgOxKZm9g0QVbEvvHCcBaOiB8zH8N
L3ESVzMq4JnmfHf8nOxaGsawR4AsM3AfDL0WDQ9h7GdYt37CTFcHtaUYWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfesAIdDojhpqT/sKRtH2mDjcb7MB8GA1UdIwQY
MBaAFF4mSPEpDURxvNtQuCvk7ZMgAwlNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYt
ZjU1ZmNkZjk3ODQ2LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYtZjU1ZmNkZjk3ODQ2
LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2YSj3VY
9zhB/np6WwaK/dy5Zr4Dzp1IAxoYkCupVg4AsYJDeH31SWHZtDzHlEFKlX6Sxxf5
vhJcEpRLQMjM+SVpIJqC4VVwV88A9gWt+K934811FHDGg+LKvoUW2VIeNLzgL+p4
PT+FNLxbwruw6pq0PHCpCQOdDFx+pTrl6fVtAJtjZuF+rqUC8aWDPK6MRn9jjY7h
YlaCqvEpKdbhQ0X4tC8JXnrXwH+OKzBNGqyt30dGlWQqPbDghd/PdQAA6aptDC4+
6d8BW38fTVGltjCfgprjsw/Jc/bRy/982qgo/Er3uDVpkShdbxsFlbzNITi7MDBC
4EPZ5Fz67153jQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:34:56 2026 by rpki-client