Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
File: XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft (raw, json)
Hash identifier: 4eKwZeVG6gSGQMODd2Se4RxTyEmTMOsfKV+EYdDe5vo=
Subject key identifier: 59:51:91:61:C1:A1:E1:42:8F:20:2D:43:EA:A3:C3:67:20:4D:F8:92
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 01A1815063AF80046744DDA3E92E1428A92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 07:01:31 +0000
Manifest this update: Wed 28 Oct 2026 07:01:31 +0000
Manifest next update: Thu 29 Oct 2026 07:01:31 +0000
Files and hashes: 1: XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl (hash: V79ZeirXYnqnJdQrTlNnqtDmNYYdBFCWMK6gBHue/rA=)
2: dVeZzKDi_fO4mE5HHo16sVmtMMU.roa (hash: 1r2T0D/7NQ/zB+ziH9iXBQGlu0LN0IlUyw0vofrt4CI=)
3: lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa (hash: PQn0MUfrufkEibOpWiDwl2hJpMI+Yw+jzN0Z4rlm5DI=)
4: whybmoJ3UH-tZcQj28IxhxnuNWU.roa (hash: XoXTuKuWN/G+ZqFwydqG+jUtoRxuSHXL1j3ltwwohOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:63:af:80:04:67:44:dd:a3:e9:2e:14:28:a9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Oct 28 07:01:31 2026 GMT
Not After : Oct 29 07:01:31 2026 GMT
Subject: CN=59519161c1a1e1428f202d43eaa3c367204df892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:56:52:7f:bc:41:3e:05:10:13:0a:fd:36:
bc:b5:65:73:53:aa:78:96:d5:50:99:2e:70:f3:50:
fd:b0:ad:ef:98:0a:2e:ef:bd:51:5d:85:e8:f6:c9:
56:a7:9b:2e:33:11:88:10:54:cc:8f:7d:e0:b1:47:
6f:f6:5b:94:b0:f6:1f:1d:c5:fb:0f:1b:a9:be:ce:
9d:23:76:1d:8f:32:5c:ef:a1:80:11:7e:f5:37:d1:
68:5b:04:c5:58:c2:91:e1:5d:c6:b2:91:ca:73:a1:
0f:08:37:6d:8c:2a:30:a3:ae:b9:36:32:43:41:0a:
66:98:58:ea:de:63:9f:ea:ae:23:fc:02:d2:42:c9:
cd:0b:50:3f:31:56:de:99:fa:b6:13:65:17:36:2b:
f0:d0:4e:fb:d8:6e:5a:97:1b:ef:67:1f:59:a6:68:
03:4a:c2:d6:86:1f:01:58:c6:ad:13:c3:8b:fe:43:
08:d9:62:a4:5b:29:0c:d0:20:91:da:98:cf:26:62:
c1:55:14:67:2c:d9:a5:af:37:de:e2:28:5d:1a:9b:
bc:b0:3d:40:17:3c:cf:8a:2d:14:e4:72:b1:bd:e7:
33:65:10:c5:30:e8:ef:27:61:de:c6:9d:3b:0d:33:
cd:db:72:e9:c2:87:1d:be:ae:f1:a7:a2:5a:93:4d:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:91:61:C1:A1:E1:42:8F:20:2D:43:EA:A3:C3:67:20:4D:F8:92
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:df:ff:3c:92:29:23:5b:2f:9f:ea:93:e9:b6:b0:e3:4f:63:
2e:0b:69:8d:3b:ca:5d:3a:5a:5b:c2:33:52:c8:7b:0f:d0:a7:
a3:ab:e4:df:1d:c4:bd:ea:1b:fa:fb:51:a6:1c:77:0b:57:fa:
ab:75:33:da:c3:d3:56:96:2a:38:9e:4c:87:34:25:3c:04:76:
83:5e:24:42:f5:80:78:12:70:4d:6f:70:83:51:3b:fd:a5:5a:
4b:5d:35:6c:f2:ae:01:02:0c:4b:dd:a7:b5:21:03:d0:fc:52:
6b:a8:55:46:e2:ef:c9:d7:12:6c:3c:eb:9d:0d:73:f5:c7:f5:
d2:d5:5d:62:65:1a:4d:93:6a:80:5c:ca:ac:3c:c3:39:f8:3c:
75:b3:cb:d9:67:b5:01:2a:4f:8e:07:92:45:7e:25:40:bf:f7:
39:87:3e:be:2f:18:c6:06:e1:f9:92:20:d0:d8:79:b7:6d:e3:
08:7f:a7:29:88:6f:67:5a:89:31:dc:9f:7f:ea:5c:17:9b:5e:
03:43:36:43:3c:f4:74:bd:69:55:6e:42:d0:8a:f8:8f:f8:ec:
b2:d6:3a:16:2a:29:20:3e:83:2f:e6:28:64:bf:db:ce:f9:23:
e3:43:24:1a:f6:71:ee:05:9f:34:1d:c6:56:10:5c:2a:54:b2:
8a:4b:56:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBUGOvgARnRN2j6S4UKKkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2IwMDg5OGQ5YTk0NDVjNmNlZTYzN2EzNThmZTMyZmRk
ODU3MjEwHhcNMjYxMDI4MDcwMTMxWhcNMjYxMDI5MDcwMTMxWjAzMTEwLwYDVQQD
Eyg1OTUxOTE2MWMxYTFlMTQyOGYyMDJkNDNlYWEzYzM2NzIwNGRmODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH1WUn+8QT4FEBMK/Ta8tWVzU6p4
ltVQmS5w81D9sK3vmAou771RXYXo9slWp5suMxGIEFTMj33gsUdv9luUsPYfHcX7
Dxupvs6dI3YdjzJc76GAEX71N9FoWwTFWMKR4V3GspHKc6EPCDdtjCowo665NjJD
QQpmmFjq3mOf6q4j/ALSQsnNC1A/MVbemfq2E2UXNivw0E772G5alxvvZx9ZpmgD
SsLWhh8BWMatE8OL/kMI2WKkWykM0CCR2pjPJmLBVRRnLNmlrzfe4ihdGpu8sD1A
FzzPii0U5HKxveczZRDFMOjvJ2Hexp07DTPN23Lpwocdvq7xp6Jak00+kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlRkWHBoeFCjyAtQ+qjw2cgTfiSMB8GA1UdIwQY
MBaAFF3LAImNmpRFxs7mN6NY/jL92FchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEt
YTA0OTI1OTc1NzU0LzEvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEtYTA0OTI1OTc1NzU0
LzEvWGNzQWlZMmFsRVhHenVZM28xai1NdjNZVnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKN//PJIp
I1svn+qT6baw409jLgtpjTvKXTpaW8IzUsh7D9Cno6vk3x3Eveob+vtRphx3C1f6
q3Uz2sPTVpYqOJ5MhzQlPAR2g14kQvWAeBJwTW9wg1E7/aVaS101bPKuAQIMS92n
tSED0PxSa6hVRuLvydcSbDzrnQ1z9cf10tVdYmUaTZNqgFzKrDzDOfg8dbPL2We1
ASpPjgeSRX4lQL/3OYc+vi8Yxgbh+ZIg0Nh5t23jCH+nKYhvZ1qJMdyff+pcF5te
A0M2Qzz0dL1pVW5C0Ir4j/jsstY6FiopID6DL+YoZL/bzvkj40MkGvZx7gWfNB3G
VhBcKlSyiktW0g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:41:10 2026 by rpki-client