
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier: TlmBqSO4QvJd5DHA1Jmj7lfX66aZ31mA3tUodchGNfk=
Subject key identifier: 88:A7:DC:53:DB:EE:D0:94:E6:F8:52:FB:12:37:54:F2:D0:AD:EA:57
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01A12FC636FE8ADF35893BC135D09937ADF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number: 1ACF
Signing time: Mon 12 Oct 2026 11:01:21 +0000
Manifest this update: Mon 12 Oct 2026 11:01:21 +0000
Manifest next update: Tue 13 Oct 2026 11:01:21 +0000
Files and hashes: 1: 03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa (hash: so/wDftuCuhVwNVUjhg5MbT2/4hCaRH4nYQ0u3BjKb0=)
2: 4zySZiWhTUg_rSb8KoK0O9QlCnc.roa (hash: gFl6wOPf/Gu9CFX49zoLAcByVCFuRBnN0N7UMDgQVbw=)
3: 6okDW562ptIs4iN1y-WMYg-45jY.roa (hash: KaiRGaOivd7uFd01xG4Jps9z07e2u3NUoDlDSh+lkH4=)
4: BHlTz3-_hk0tMzZp-IRVezg5RNg.roa (hash: 3CAUKuO6yLGGc6BqD8YXI8xLV+Hesf2PBsRTTbbaRXY=)
5: Cw5SfyDzZSwcs1u004-BHBsZJ2k.roa (hash: dTjLGIgHzcuawJEo1z0MGCRL7Fj8URygA4AZ4Hforus=)
6: MSWZuKtBI4wlnUe3Uu6905OvveY.asa (hash: ys6e6XNvdIzKyQFokYPssOeUxdzEEaAdl3OSb2J4N60=)
7: T7EjLOUNjE599ece2DV4T26b9xY.roa (hash: fsf0dRPygHs9hSe02Kw5kkb/kNnztp8TK8bBIMk8jhU=)
8: UlJaOFnMpoO5SgKO7Th_pY-ZAjo.roa (hash: jUSX0KizK2PQI3mj5biaakX23YPg0NJIgDEQv+TXIfQ=)
9: WRCnuaJzRXm83oAAxB0GzCKosjw.roa (hash: Zlyy/Icbe5M8aCeFBu4UmwH/OngNWuHDogd3Lscyms4=)
10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: Kxw9nQqDIRhgUi45v3k45p2nWn+bg8nBVeTx7VL4TLY=)
11: b24MgnJElk0t0CZYGUPCS0WiBxQ.roa (hash: cWHhW2paDx5FRXzehDQT7p6siSal6c3Aqs94Jvc3VHg=)
12: f9ERBjEpHbN1pfhl_nyFiocjtUM.roa (hash: eOOBr7U1g+HNywPWJzzBaEPCZoT5835M09OomcowoyQ=)
13: fZO1V-C0cXhOHVvlHXa0vUYnHZ8.asa (hash: cgi6TIEFIyrc5AnWcFBoC5eGLvx0L0ViQ+5+kfaeFOU=)
14: hAf22SRJwgs0SWkdAxUs95Fa0v0.roa (hash: 7vak+mJ/sIQOwdjrAkPrbLJTSGMQ1rFuipgFbAcPiHo=)
15: jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa (hash: 0xPjFQyLdMuqT+l7cmEhhj8WC9rilD8CahSrHUjkdaE=)
16: k09qltBTafYPaN8mKEjySL8ft6A.roa (hash: MFuya8B+MwfIjFnhNi4ZBDH/cZzScHZPkCXENvMvREQ=)
17: nkrV5tLs-lefafrDVBSQgulDPOI.roa (hash: 9SSFucsxAfajh5jClHvePjClBs0ArUj4EcuwFRS1hBA=)
18: q7ejmoUa5CLp8FjjBu9-Afywcr0.roa (hash: g5mShwr6G9nNz1wO7zkLNb/6wzwAilrCOEifz/cQvrY=)
19: wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa (hash: DtOCWrW/1nLce+oLk7kSY37T9S5ZLMhN/Uio3q7OELI=)
20: xI9niScPVURzbD2atpgMk7GVunU.roa (hash: wBTDsm/pz9hBwb3Vy+BwrclzAnI72KZbmuOWlENCDso=)
21: yNIYxMnUO5naybwPyNyh5ewSWWc.roa (hash: JUSRTIxpmqX2Md1pS2aFTtzHv44wRgNWsPuej9W1PDw=)
22: yTtc9_cvInn7yvfcK78WqTzFBDM.roa (hash: GZqbLQNtSwfpqv55KNnGoj2TZ2D+L4eB5ErF2hLFt3Y=)
23: ztKZKXz5sSSd9mxS9EgI0poqAYg.roa (hash: nBdrQf8RxLCFFDAly/9t+zuqKEqOGBMYF3lSM61ag10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:36:fe:8a:df:35:89:3b:c1:35:d0:99:37:ad:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Oct 12 11:01:21 2026 GMT
Not After : Oct 13 11:01:21 2026 GMT
Subject: CN=88a7dc53dbeed094e6f852fb123754f2d0adea57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:30:f9:7c:28:a7:6c:79:1c:b9:1c:5c:5b:f1:
0e:7e:c2:87:a4:15:94:ab:ec:27:e6:49:3e:48:81:
08:6f:a4:04:5b:2f:6d:f9:fc:38:f5:8e:68:61:21:
d9:a2:cf:1e:5e:fe:ab:d1:49:7a:2b:05:e4:ff:af:
09:cf:58:87:61:d8:a0:91:1d:91:55:2e:f6:04:c8:
f6:5d:d2:27:c5:45:91:98:76:37:4c:d0:36:f7:1f:
75:f2:77:90:6e:b6:f4:65:40:6d:db:33:33:f7:c0:
5f:21:b0:c8:e7:c8:d9:a1:88:bf:34:0d:32:59:2d:
af:84:fd:b7:ab:0b:e1:65:70:cf:3d:05:57:e1:5a:
8e:53:6f:65:3c:26:14:ae:32:a2:92:c3:28:9a:27:
f6:30:8d:25:3e:d4:2b:2b:1d:cd:0c:0f:95:9f:e2:
66:08:9e:1c:9a:1d:cc:3d:23:98:50:3f:ee:a4:18:
5e:57:48:eb:3e:49:a1:4a:d1:8e:ef:68:0c:81:0f:
93:82:35:c7:f8:dd:c2:87:a3:2b:3d:51:09:ce:44:
6c:bc:46:59:8e:0e:24:1f:86:af:62:5a:f1:92:9a:
ab:d3:85:82:f6:e1:a1:55:be:15:6b:e8:0a:77:6b:
b1:91:a6:97:d5:c1:6d:d4:5f:97:e1:ec:b8:ec:64:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:DC:53:DB:EE:D0:94:E6:F8:52:FB:12:37:54:F2:D0:AD:EA:57
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:45:c6:b6:69:96:49:a1:f0:ad:60:1c:2f:03:72:a5:0b:9b:
70:cb:35:2e:e7:60:a2:07:d2:a8:cc:6d:b5:4d:73:06:e6:e4:
0b:dc:10:36:7a:46:97:be:2e:61:38:ba:f0:74:c4:83:47:3b:
3a:2e:52:c5:6f:0a:58:62:8e:a8:80:65:ef:d9:a1:7e:1b:79:
1d:94:5e:fa:0c:37:1c:28:31:09:07:55:ea:cd:df:8a:86:0e:
6e:bd:22:e7:10:51:1d:f8:ba:8d:97:8c:8a:a4:cf:d4:fe:43:
21:91:ac:37:2e:e4:8e:52:93:4f:c3:01:f6:6b:ab:43:41:2f:
1c:b5:aa:f4:2d:9e:70:dc:07:fc:b8:92:33:98:7d:27:c2:d8:
ed:8a:15:b2:92:5f:48:b4:f9:2e:91:07:a3:97:de:de:8d:da:
6d:d0:1a:da:cc:90:81:4f:0b:24:6a:15:3f:ef:f1:c2:06:fa:
30:0e:32:5a:e5:79:35:cd:b9:ef:5c:0a:5b:35:23:dd:62:26:
48:40:4c:76:3e:f5:aa:94:d6:d2:29:32:27:c5:5e:c6:c7:1d:
1d:30:96:61:08:a9:48:f8:81:da:29:ae:08:b3:ba:25:13:ab:
34:15:d4:2a:70:e0:9a:35:da:77:ef:76:68:14:ab:d0:b7:48:
c9:54:0b:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvxjb+it81iTvBNdCZN63zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh
NTAyNTAwHhcNMjYxMDEyMTEwMTIxWhcNMjYxMDEzMTEwMTIxWjAzMTEwLwYDVQQD
Eyg4OGE3ZGM1M2RiZWVkMDk0ZTZmODUyZmIxMjM3NTRmMmQwYWRlYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DD5fCinbHkcuRxcW/EOfsKHpBWU
q+wn5kk+SIEIb6QEWy9t+fw49Y5oYSHZos8eXv6r0Ul6KwXk/68Jz1iHYdigkR2R
VS72BMj2XdInxUWRmHY3TNA29x918neQbrb0ZUBt2zMz98BfIbDI58jZoYi/NA0y
WS2vhP23qwvhZXDPPQVX4VqOU29lPCYUrjKiksMomif2MI0lPtQrKx3NDA+Vn+Jm
CJ4cmh3MPSOYUD/upBheV0jrPkmhStGO72gMgQ+TgjXH+N3Ch6MrPVEJzkRsvEZZ
jg4kH4avYlrxkpqr04WC9uGhVb4Va+gKd2uxkaaX1cFt1F+X4ey47GR8VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIin3FPb7tCU5vhS+xI3VPLQrepXMB8GA1UdIwQY
MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt
YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh
LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkXGtmmW
SaHwrWAcLwNypQubcMs1LudgogfSqMxttU1zBubkC9wQNnpGl74uYTi68HTEg0c7
Oi5SxW8KWGKOqIBl79mhfht5HZRe+gw3HCgxCQdV6s3fioYObr0i5xBRHfi6jZeM
iqTP1P5DIZGsNy7kjlKTT8MB9murQ0EvHLWq9C2ecNwH/LiSM5h9J8LY7YoVspJf
SLT5LpEHo5fe3o3abdAa2syQgU8LJGoVP+/xwgb6MA4yWuV5Nc2571wKWzUj3WIm
SEBMdj71qpTW0ikyJ8VexscdHTCWYQipSPiB2imuCLO6JROrNBXUKnDgmjXad+92
aBSr0LdIyVQL1w==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:21:07 2026 by rpki-client