Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: ZQ9CAJb1B/TPOrCs3la79ZA1TbFoOKMgP8/rmMIEwPw=
Subject key identifier: 99:31:C9:D6:DC:C4:04:92:2D:B5:97:C8:9F:99:B0:CC:F4:0C:3B:E6
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 01A17EBCC2514D48A3F4DEDF842CDC6F5E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 1728
Signing time: Tue 27 Oct 2026 19:01:02 +0000
Manifest this update: Tue 27 Oct 2026 19:01:02 +0000
Manifest next update: Wed 28 Oct 2026 19:01:02 +0000
Files and hashes: 1: 9EktXdyZJh18u-aW7yKS4HoPavo.roa (hash: rjDqPIBakWvnRieCU3x6qlMyDbDmiCMZb+0A8kLnWdc=)
2: cPX1K7h-wlaCr7zmE40f44WojxI.roa (hash: Q/KPZCaK+pTYPECUWe3LbMeOLvb3gqHt7TrGMiKZCx4=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: PNuf/VAQn161foxfTLrVErZgdZYqzyyGVWQaCL2S9SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:c2:51:4d:48:a3:f4:de:df:84:2c:dc:6f:5e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Oct 27 19:01:02 2026 GMT
Not After : Oct 28 19:01:02 2026 GMT
Subject: CN=9931c9d6dcc404922db597c89f99b0ccf40c3be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:49:a6:ab:0e:95:34:ff:db:85:b7:c0:dd:
74:93:c5:4b:80:de:07:26:39:5f:71:3d:6f:7c:11:
b6:24:69:26:63:69:2d:c6:84:84:52:87:d9:4d:e6:
06:ac:b3:d5:f1:81:48:44:62:95:e5:70:7a:8c:1e:
b9:40:c7:ae:82:87:3c:0f:54:a6:a8:5a:10:5f:f2:
1a:be:c5:ef:fa:02:d2:9d:9c:4b:55:1a:9e:10:a3:
c2:25:a5:92:9c:ca:3d:cc:34:82:bb:fe:59:0c:ee:
aa:cb:1c:55:3f:16:3c:6f:6b:30:27:e7:a9:b6:6a:
43:c1:12:6e:04:5f:32:fb:5e:0f:95:03:93:16:c5:
ca:cf:cc:ef:85:ac:2b:1b:59:6c:48:e0:a5:5c:72:
b3:bc:3c:7c:6b:b2:f8:ce:6d:8f:15:51:f1:5b:9a:
bc:3f:c5:a9:ab:56:23:17:27:50:08:d1:96:26:2f:
52:1f:ac:11:50:d4:54:1f:ac:34:20:c8:05:5d:02:
eb:8c:ce:6a:35:20:7c:f6:8a:54:5c:90:8f:e1:f6:
d9:e7:63:63:d9:91:c7:a8:e8:2f:4e:1e:c0:87:83:
9c:0d:3f:a4:ea:c4:c9:12:58:d4:4c:25:04:fd:5f:
49:7b:d2:5e:67:2e:5e:56:7f:0e:0d:ca:ed:9e:c1:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:C9:D6:DC:C4:04:92:2D:B5:97:C8:9F:99:B0:CC:F4:0C:3B:E6
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:d8:45:aa:1c:db:cb:ab:56:a1:c2:b8:47:ec:95:9a:a0:
59:2d:5e:50:6d:8d:39:dd:99:5e:01:a6:a5:9b:4f:3d:b5:ab:
be:a5:fc:3f:6c:ec:a4:5e:f1:12:3e:43:19:30:35:30:ab:d5:
44:8c:e3:f2:43:31:d9:03:d0:8c:c0:22:70:54:59:89:33:73:
d1:59:e5:3a:61:4d:2e:c5:3a:22:a1:6d:89:6e:c9:6c:bb:dd:
dc:a7:d3:25:be:4f:19:bd:5e:ca:92:59:9d:f1:2b:80:6c:18:
fd:63:6b:0a:c1:9f:64:58:b7:bf:1f:15:b7:f2:e5:12:e6:eb:
ee:b4:4a:f4:40:7a:cb:1e:2f:c4:04:b2:2f:7d:ae:7d:4c:4b:
39:19:46:f5:be:98:05:ba:f9:9a:db:9d:2a:97:71:4b:74:2b:
9f:be:cf:91:9e:a9:ba:eb:54:fd:a0:b3:f1:e8:f3:26:41:8f:
c4:a3:0a:e5:5e:1c:6f:4d:f5:ce:70:2c:82:a5:75:7f:07:83:
e6:5a:2b:e5:55:6b:c7:d6:df:87:47:24:1e:a7:78:ce:21:fc:
f5:41:0c:7f:d0:9e:4a:e6:ea:54:9e:f2:80:b4:19:be:96:31:
44:e7:19:0d:71:e2:23:ce:50:7b:8c:4a:ca:2d:8f:9e:e2:72:
d2:c9:f3:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+vMJRTUij9N7fhCzcb15iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjYxMDI3MTkwMTAyWhcNMjYxMDI4MTkwMTAyWjAzMTEwLwYDVQQD
Eyg5OTMxYzlkNmRjYzQwNDkyMmRiNTk3Yzg5Zjk5YjBjY2Y0MGMzYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDJJpqsOlTT/24W3wN10k8VLgN4H
JjlfcT1vfBG2JGkmY2ktxoSEUofZTeYGrLPV8YFIRGKV5XB6jB65QMeugoc8D1Sm
qFoQX/IavsXv+gLSnZxLVRqeEKPCJaWSnMo9zDSCu/5ZDO6qyxxVPxY8b2swJ+ep
tmpDwRJuBF8y+14PlQOTFsXKz8zvhawrG1lsSOClXHKzvDx8a7L4zm2PFVHxW5q8
P8Wpq1YjFydQCNGWJi9SH6wRUNRUH6w0IMgFXQLrjM5qNSB89opUXJCP4fbZ52Nj
2ZHHqOgvTh7Ah4OcDT+k6sTJEljUTCUE/V9Je9JeZy5eVn8ODcrtnsEr3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkxydbcxASSLbWXyJ+ZsMz0DDvmMB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3PYRaoc
28urVqHCuEfslZqgWS1eUG2NOd2ZXgGmpZtPPbWrvqX8P2zspF7xEj5DGTA1MKvV
RIzj8kMx2QPQjMAicFRZiTNz0VnlOmFNLsU6IqFtiW7JbLvd3KfTJb5PGb1eypJZ
nfErgGwY/WNrCsGfZFi3vx8Vt/LlEubr7rRK9EB6yx4vxASyL32ufUxLORlG9b6Y
Bbr5mtudKpdxS3Qrn77PkZ6puutU/aCz8ejzJkGPxKMK5V4cb031znAsgqV1fweD
5lor5VVrx9bfh0ckHqd4ziH89UEMf9CeSubqVJ7ygLQZvpYxROcZDXHiI85Qe4xK
yi2PnuJy0snzUA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:13:01 2026 by rpki-client