Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier: AfhXRYSElSV2WIzRqjhyeYx+Q9Aum2edOZgueWueqSw=
Subject key identifier: 17:20:B6:9B:95:BA:02:68:33:05:3A:A4:04:D5:54:78:52:B9:03:13
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 01A17BF2062DA6C4EFB3B89373EDADFCDE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number: 198E
Signing time: Tue 27 Oct 2026 06:00:21 +0000
Manifest this update: Tue 27 Oct 2026 06:00:21 +0000
Manifest next update: Wed 28 Oct 2026 06:00:21 +0000
Files and hashes: 1: FmbJHLicsAmHpEbjvujEn2HOV3Y.roa (hash: mljbMsuIaVUTs05lmzHAA0bs6fKmFG4cLrVWq0mgVgs=)
2: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: q/uSIC/lc8GFqnJkebEpeBLfUBRL4BJC05FtIGuACYA=)
3: hmMpNTF4bbjoXMXom-wvfeJBPlA.roa (hash: J0hNGS9K9upyGPJ9j4AP0vH+buJiepp7d1wgo6erTZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:06:2d:a6:c4:ef:b3:b8:93:73:ed:ad:fc:de:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Oct 27 06:00:21 2026 GMT
Not After : Oct 28 06:00:21 2026 GMT
Subject: CN=1720b69b95ba026833053aa404d5547852b90313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:fc:00:05:d1:92:20:d1:c2:74:1b:be:fc:
ef:ef:88:d0:d9:fe:0a:f8:af:d5:99:d2:ba:4c:d1:
21:d1:fb:c4:6e:09:dc:00:93:bc:16:f8:4f:a2:f4:
d0:d5:45:49:1b:f0:5f:a0:33:3d:13:a1:74:48:2a:
3b:4f:a8:40:fd:0a:00:87:63:07:0e:86:48:fd:c7:
bc:bd:c4:d5:3c:17:a6:09:d0:67:9b:07:ef:9f:17:
0c:78:4e:ee:00:53:84:87:57:44:a4:33:e7:3a:01:
b1:ea:8e:7f:48:b3:37:68:04:17:cf:ca:70:7e:06:
2d:11:3b:04:b3:7f:78:fb:44:6f:8f:4f:e6:90:50:
40:3d:5a:e9:99:be:d8:9a:ca:27:60:47:01:6d:54:
f0:68:57:8e:ee:8d:53:b5:4b:b0:7a:9e:36:24:2d:
8b:89:c4:58:89:ea:41:13:35:be:6f:4d:bc:be:fb:
e2:6b:67:6a:c5:2e:55:13:fd:93:38:7c:e9:ea:d0:
e2:3a:d6:df:f0:53:d5:fb:89:04:53:bd:d4:94:79:
8c:6b:d5:a6:19:dd:ac:d0:85:3f:e4:fa:40:88:45:
80:dc:e0:21:89:33:03:bf:87:82:92:8b:18:77:a0:
3e:3b:f0:29:91:5f:8e:8f:70:d7:4e:75:8d:8b:46:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:B6:9B:95:BA:02:68:33:05:3A:A4:04:D5:54:78:52:B9:03:13
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:17:9d:14:1e:20:81:f6:0d:8e:10:c7:93:2d:cd:2e:1e:1e:
14:50:57:2a:0f:fd:96:0e:55:4a:b0:e5:c4:95:8a:c0:3a:82:
4a:82:91:05:e6:d0:a9:13:70:02:4f:42:b3:ea:7f:3b:9a:51:
34:cf:01:fd:3a:db:e3:ca:93:08:ea:93:6b:11:d2:08:34:b5:
22:44:0e:fb:a1:16:08:cb:a3:9c:be:65:5e:a2:29:fc:bb:ad:
a6:0d:f4:4a:0e:ed:ab:07:ac:1b:84:79:30:c4:8f:36:89:d3:
34:33:37:54:bd:ff:fd:ea:0e:4c:e4:d6:e4:f2:99:cd:54:7c:
89:f8:66:06:ca:1b:05:76:23:14:6f:3f:70:1d:93:11:a8:05:
0c:89:5a:37:7a:8f:1e:5f:17:1a:90:0c:86:f9:9d:ea:9d:af:
99:14:02:b8:26:d1:0f:9a:68:4d:f2:57:10:59:eb:84:32:32:
df:4b:a7:56:2e:96:76:c5:05:cf:18:81:57:bc:28:6c:29:45:
df:4b:e3:36:c8:3f:f6:2a:c3:0a:17:14:41:ed:35:65:53:ac:
e2:65:11:51:3c:43:ba:9b:22:a7:a3:19:db:bf:4a:d4:7b:b9:
4b:e5:cc:b8:12:cb:5c:fe:92:ab:7f:4b:a0:22:2a:b8:0a:4c:
56:ea:9b:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78gYtpsTvs7iTc+2t/N5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmE1N2UxNzA3ZTQzYjJmYTk3ZmNlYjA3OGE1ZDQ2MGU1
NmMxYmYwHhcNMjYxMDI3MDYwMDIxWhcNMjYxMDI4MDYwMDIxWjAzMTEwLwYDVQQD
EygxNzIwYjY5Yjk1YmEwMjY4MzMwNTNhYTQwNGQ1NTQ3ODUyYjkwMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg38AAXRkiDRwnQbvvzv74jQ2f4K
+K/VmdK6TNEh0fvEbgncAJO8FvhPovTQ1UVJG/BfoDM9E6F0SCo7T6hA/QoAh2MH
DoZI/ce8vcTVPBemCdBnmwfvnxcMeE7uAFOEh1dEpDPnOgGx6o5/SLM3aAQXz8pw
fgYtETsEs394+0Rvj0/mkFBAPVrpmb7YmsonYEcBbVTwaFeO7o1TtUuwep42JC2L
icRYiepBEzW+b028vvvia2dqxS5VE/2TOHzp6tDiOtbf8FPV+4kEU73UlHmMa9Wm
Gd2s0IU/5PpAiEWA3OAhiTMDv4eCkosYd6A+O/ApkV+Oj3DXTnWNi0aORwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcgtpuVugJoMwU6pATVVHhSuQMTMB8GA1UdIwQY
MBaAFF66V+FwfkOy+pf86weKXUYOVsG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2Mt
YjU5NzI3MDliYjAyLzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2MtYjU5NzI3MDliYjAy
LzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxedFB4g
gfYNjhDHky3NLh4eFFBXKg/9lg5VSrDlxJWKwDqCSoKRBebQqRNwAk9Cs+p/O5pR
NM8B/Trb48qTCOqTaxHSCDS1IkQO+6EWCMujnL5lXqIp/Lutpg30Sg7tqwesG4R5
MMSPNonTNDM3VL3//eoOTOTW5PKZzVR8ifhmBsobBXYjFG8/cB2TEagFDIlaN3qP
Hl8XGpAMhvmd6p2vmRQCuCbRD5poTfJXEFnrhDIy30unVi6WdsUFzxiBV7wobClF
30vjNsg/9irDChcUQe01ZVOs4mURUTxDupsip6MZ279K1Hu5S+XMuBLLXP6Sq39L
oCIquApMVuqbKw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:02 2026 by rpki-client