Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json)
Hash identifier: dSZ0EW6TdyYBLQsu2BplH1SLYn5Ud4BzAdzx1veSfPE=
Subject key identifier: 4F:0C:A6:54:04:4F:7C:44:B0:32:E1:4E:C8:FD:BA:B5:8A:A3:07:5E
Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Certificate serial: 01A17A04C29A52C9D704BD4FB6EBF5025A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 21:01:34 +0000
Manifest this update: Mon 26 Oct 2026 21:01:34 +0000
Manifest next update: Tue 27 Oct 2026 21:01:34 +0000
Files and hashes: 1: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: PVWDkr2jAsmr+/4llCwN6cFeGh4HX8D1b3vJiD9UYmQ=)
2: kzJmJeIzYK-uABy4gPDlGybg7UM.roa (hash: 1fLld3TaRC0xWtpNDMUlOBBVpSlt5nimLcyX9NO1jT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:c2:9a:52:c9:d7:04:bd:4f:b6:eb:f5:02:5a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Validity
Not Before: Oct 26 21:01:34 2026 GMT
Not After : Oct 27 21:01:34 2026 GMT
Subject: CN=4f0ca654044f7c44b032e14ec8fdbab58aa3075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:6b:6d:80:e5:74:bb:a6:07:a8:ee:12:3a:
b2:47:af:54:5e:15:ed:cc:a5:a0:90:28:d3:ae:41:
d8:9c:6f:ed:5b:69:25:30:4d:f3:8c:01:6a:08:26:
39:dc:21:fd:9e:f1:32:08:02:a6:ea:67:de:34:05:
e7:56:f0:65:a4:be:7f:79:2b:91:5d:18:a0:90:8d:
f2:a1:2a:73:bd:17:78:d4:03:4f:af:d5:f9:65:70:
40:2e:c3:89:85:d8:d2:b8:e7:6a:f3:2e:71:5b:09:
a1:29:b6:46:5e:3e:4d:5b:f5:fe:03:b3:d9:f2:f4:
5b:d2:32:dd:50:bf:6d:dc:24:8d:80:77:50:70:36:
b3:95:6a:d7:9b:04:9a:db:89:2b:94:8c:74:7f:92:
78:04:16:70:e2:79:f5:91:db:dc:94:fc:6a:e2:d4:
1e:7b:34:94:42:e0:b5:72:d6:45:94:f4:93:b5:ea:
0a:d1:35:35:dc:45:ae:49:d8:99:e8:68:49:fb:9c:
02:95:9a:37:44:ee:60:69:2c:ba:3e:85:36:1d:87:
71:2b:ce:49:1a:ee:d5:26:c4:cc:f6:a8:43:79:e4:
d8:22:0c:0a:33:72:cd:cf:46:bd:97:bb:f1:35:5a:
82:fb:34:8c:d2:6e:02:16:69:8e:4c:da:7e:a8:fe:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0C:A6:54:04:4F:7C:44:B0:32:E1:4E:C8:FD:BA:B5:8A:A3:07:5E
X509v3 Authority Key Identifier:
keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b2:9c:8c:81:00:30:77:e9:38:3b:9e:db:63:ae:51:c3:fd:
54:b4:c7:8e:0c:0d:ea:98:29:aa:6e:48:05:fc:d8:2f:7f:54:
19:fb:b9:63:27:45:a7:7f:e4:bf:0c:c8:bd:00:85:ee:23:43:
ed:24:2b:ae:a1:a0:39:ac:44:54:71:25:23:50:00:00:16:d7:
d8:a0:55:60:5d:e0:81:21:46:b5:e3:44:25:0a:80:e6:0d:75:
e9:e0:a0:71:fe:70:d8:f9:ab:30:88:c4:7d:e4:e2:80:b3:fd:
76:8b:f7:7e:74:ca:bb:59:a6:a0:ec:77:f9:96:c7:c0:6d:90:
89:08:e4:1d:0f:3a:1e:89:b3:8f:26:77:62:d5:9d:6a:d9:1c:
4c:88:47:8f:d4:1c:3c:9f:2d:8a:cc:fb:a5:4b:87:f7:2b:e0:
d2:4a:ac:6b:87:8d:03:03:40:c0:78:6c:83:e3:9e:dc:d2:7a:
e6:b8:83:29:85:3e:80:f4:00:84:87:f5:81:6b:15:b4:3f:29:
d4:e0:77:6d:f8:6b:83:1d:39:80:25:b2:27:ec:03:ab:ff:11:
7b:c4:f4:ab:99:bd:da:66:35:21:a8:e3:f1:ef:15:f9:a5:2b:
24:d6:5c:0e:1a:89:a1:0d:f4:4d:59:87:7b:70:cb:de:9d:8f:
d1:9e:59:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BMKaUsnXBL1Ptuv1AloxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTZkY2NmYjJlMmM4OGNmMDlmNDg3YzQyMWZjOGFmN2Ji
ZDM1NzQwHhcNMjYxMDI2MjEwMTM0WhcNMjYxMDI3MjEwMTM0WjAzMTEwLwYDVQQD
Eyg0ZjBjYTY1NDA0NGY3YzQ0YjAzMmUxNGVjOGZkYmFiNThhYTMwNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1RrbYDldLumB6juEjqyR69UXhXt
zKWgkCjTrkHYnG/tW2klME3zjAFqCCY53CH9nvEyCAKm6mfeNAXnVvBlpL5/eSuR
XRigkI3yoSpzvRd41ANPr9X5ZXBALsOJhdjSuOdq8y5xWwmhKbZGXj5NW/X+A7PZ
8vRb0jLdUL9t3CSNgHdQcDazlWrXmwSa24krlIx0f5J4BBZw4nn1kdvclPxq4tQe
ezSUQuC1ctZFlPSTteoK0TU13EWuSdiZ6GhJ+5wClZo3RO5gaSy6PoU2HYdxK85J
Gu7VJsTM9qhDeeTYIgwKM3LNz0a9l7vxNVqC+zSM0m4CFmmOTNp+qP6vMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8MplQET3xEsDLhTsj9urWKowdeMB8GA1UdIwQY
MBaAFF0W3M+y4siM8J9IfEIfyK97vTV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEt
ODVjNWQ1MzAyZDg4LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEtODVjNWQ1MzAyZDg4
LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLKcjIEA
MHfpODue22OuUcP9VLTHjgwN6pgpqm5IBfzYL39UGfu5YydFp3/kvwzIvQCF7iND
7SQrrqGgOaxEVHElI1AAABbX2KBVYF3ggSFGteNEJQqA5g116eCgcf5w2PmrMIjE
feTigLP9dov3fnTKu1mmoOx3+ZbHwG2QiQjkHQ86HomzjyZ3YtWdatkcTIhHj9Qc
PJ8tisz7pUuH9yvg0kqsa4eNAwNAwHhsg+Oe3NJ65riDKYU+gPQAhIf1gWsVtD8p
1OB3bfhrgx05gCWyJ+wDq/8Re8T0q5m92mY1Iajj8e8V+aUrJNZcDhqJoQ30TVmH
e3DL3p2P0Z5ZfQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:32 2026 by rpki-client