Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: K5+letYeqzntM/2vDu0o6te9YfkWkNxU658EpXCz4kI=
Subject key identifier: 20:72:C3:A5:CC:4C:EF:F4:A3:94:1D:28:9C:4C:9A:1A:64:DF:F4:6C
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 01A119ABC07270380C5D05E694CE40D24946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 04:00:48 +0000
Manifest this update: Thu 08 Oct 2026 04:00:48 +0000
Manifest next update: Fri 09 Oct 2026 04:00:48 +0000
Files and hashes: 1: 7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa (hash: xzYsTyhKWQal1xfqWksT1weyCxFWFp7bUNSd2LqW3lA=)
2: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: h6pqNqhpBn6RXKCKCn2+TWDkQys2hFu7AJth7XOOnE0=)
3: qMmguo9Z2V-BC5t7evoX7K1Fbss.roa (hash: V408yrY8gn/eWE6bGQXHDcnC3POLPttI1BvbFvBLTFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:c0:72:70:38:0c:5d:05:e6:94:ce:40:d2:49:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Oct 8 04:00:48 2026 GMT
Not After : Oct 9 04:00:48 2026 GMT
Subject: CN=2072c3a5cc4ceff4a3941d289c4c9a1a64dff46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:ec:b1:82:e8:17:fc:c7:6e:36:00:3e:23:
7a:58:97:3f:f1:b4:2f:68:69:e5:21:79:30:25:9f:
7f:29:28:27:bd:e1:3e:b4:57:ea:ae:67:af:4d:88:
a7:bc:e1:ea:c4:a5:56:c0:09:15:03:21:22:85:bc:
bb:e8:6e:5d:89:b2:76:b9:5d:2f:3a:6f:52:d0:de:
2b:4c:24:87:ae:0b:fe:cf:c6:99:55:7b:d0:f1:17:
c2:13:7d:35:23:e7:81:34:f5:0d:c6:62:fe:9a:87:
7a:4f:01:a4:58:c8:ad:ae:dd:32:a2:b4:9d:66:c7:
bb:c4:db:66:57:37:0c:e4:f4:00:3a:70:f1:1b:2f:
fa:25:36:76:8b:37:78:3b:b6:23:69:20:70:10:98:
c9:2b:72:9b:ac:5f:a0:fe:11:4c:4b:28:56:70:05:
86:68:ce:2e:59:57:84:42:da:1a:a9:49:00:92:f3:
d4:1d:fa:e9:e1:31:9b:b9:5e:ca:39:b2:c8:de:10:
2c:f3:01:a6:38:ac:63:60:26:b3:e0:82:c1:e9:65:
e3:c9:25:36:3b:f2:14:2e:f4:80:4c:1a:5c:6e:98:
08:33:35:73:3a:1a:f6:ad:67:16:46:12:a2:7a:b3:
ab:37:4e:14:bd:65:73:e2:7c:66:ef:99:5c:d5:5d:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:72:C3:A5:CC:4C:EF:F4:A3:94:1D:28:9C:4C:9A:1A:64:DF:F4:6C
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:97:b7:4e:45:66:c0:ec:46:ac:34:04:8c:02:b2:dc:76:f6:
39:ef:10:7a:35:0e:28:e0:c7:77:b7:53:68:f4:3f:c4:a9:5e:
64:13:68:a2:4c:3f:1b:ce:a8:3e:49:5a:8d:7a:bd:36:e3:6d:
62:9d:d4:50:22:ec:dd:ae:d8:a7:a9:ec:77:89:fa:a1:ac:19:
48:3f:f7:c2:be:61:57:4e:88:96:be:2e:f0:1e:0e:cd:03:89:
5f:d9:6c:84:14:7b:f0:3d:7a:f7:f5:ec:ce:6b:fe:22:19:5d:
2f:f9:c4:43:0a:3c:c2:77:4f:8b:2c:16:c4:14:6b:d1:f1:75:
43:18:93:39:a3:c4:1e:b6:4c:04:a0:fd:5e:03:5b:69:e4:62:
63:87:23:2b:f0:8d:84:5c:07:8b:cc:e9:c9:43:4e:d9:3c:aa:
5a:f3:4b:20:9c:a9:fb:4a:59:4b:59:2f:13:38:55:4b:2d:eb:
23:90:a9:ef:44:41:5a:ca:d3:86:f2:5b:07:59:9f:5c:d6:7e:
c4:db:7d:f4:df:da:63:90:05:e3:3d:d1:d7:99:2f:9c:3e:85:
ab:8e:3b:a6:24:08:c1:23:98:b5:0e:c3:3f:d8:32:7e:fb:bb:
3d:95:0d:2c:f7:d8:fa:94:8c:49:31:96:36:54:24:c2:f1:ee:
d8:0a:76:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZq8BycDgMXQXmlM5A0klGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2E2MmYxMzQ3YzE3NDJlNWI2ZTM3NDAyNDRkMzk4YjUz
YTUxM2MwHhcNMjYxMDA4MDQwMDQ4WhcNMjYxMDA5MDQwMDQ4WjAzMTEwLwYDVQQD
EygyMDcyYzNhNWNjNGNlZmY0YTM5NDFkMjg5YzRjOWExYTY0ZGZmNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucHssYLoF/zHbjYAPiN6WJc/8bQv
aGnlIXkwJZ9/KSgnveE+tFfqrmevTYinvOHqxKVWwAkVAyEihby76G5dibJ2uV0v
Om9S0N4rTCSHrgv+z8aZVXvQ8RfCE301I+eBNPUNxmL+mod6TwGkWMitrt0yorSd
Zse7xNtmVzcM5PQAOnDxGy/6JTZ2izd4O7YjaSBwEJjJK3KbrF+g/hFMSyhWcAWG
aM4uWVeEQtoaqUkAkvPUHfrp4TGbuV7KObLI3hAs8wGmOKxjYCaz4ILB6WXjySU2
O/IULvSATBpcbpgIMzVzOhr2rWcWRhKierOrN04UvWVz4nxm75lc1V1qrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCByw6XMTO/0o5QdKJxMmhpk3/RsMB8GA1UdIwQY
MBaAFF46YvE0fBdC5bbjdAJE05i1OlE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWIt
MDI1NTQwYWZmMTVkLzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWItMDI1NTQwYWZmMTVk
LzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpe3TkVm
wOxGrDQEjAKy3Hb2Oe8QejUOKODHd7dTaPQ/xKleZBNookw/G86oPklajXq9NuNt
Yp3UUCLs3a7Yp6nsd4n6oawZSD/3wr5hV06Ilr4u8B4OzQOJX9lshBR78D169/Xs
zmv+IhldL/nEQwo8wndPiywWxBRr0fF1QxiTOaPEHrZMBKD9XgNbaeRiY4cjK/CN
hFwHi8zpyUNO2TyqWvNLIJyp+0pZS1kvEzhVSy3rI5Cp70RBWsrThvJbB1mfXNZ+
xNt99N/aY5AF4z3R15kvnD6Fq447piQIwSOYtQ7DP9gyfvu7PZUNLPfY+pSMSTGW
NlQkwvHu2Ap22g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:27:22 2026 by rpki-client