Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: Ka/7jX8+P82f0CyFntTQLSsOmnj0wGXdAtABD018K7E=
Subject key identifier: F8:1A:D8:3E:79:55:0C:C4:B2:53:6B:FB:AC:C6:16:30:92:41:D9:F1
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 01A06EDED35EA321874AEB4455A701716D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 0A3F
Signing time: Sat 05 Sep 2026 00:01:31 +0000
Manifest this update: Sat 05 Sep 2026 00:01:31 +0000
Manifest next update: Sun 06 Sep 2026 00:01:31 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: QCWByyP/DpzN3AzsClkq+5wBAZPxNJi2+ctfR8eg9uY=)
2: iaWZDNhDLscYcfyYSiXpXFomI88.roa (hash: Pf7br+pz9PCLXjlHTpNcxUaJd9dwtWHArZdZaJaAooU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:d3:5e:a3:21:87:4a:eb:44:55:a7:01:71:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Sep 5 00:01:31 2026 GMT
Not After : Sep 6 00:01:31 2026 GMT
Subject: CN=f81ad83e79550cc4b2536bfbacc616309241d9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:07:bc:c0:86:f2:6c:ad:54:3f:34:12:d1:
59:f6:ff:39:e5:9f:86:f8:b4:65:39:f7:b8:25:0f:
8e:2b:ef:6b:e7:6e:43:12:9d:da:34:cf:6c:45:13:
62:79:ea:29:53:fb:85:5c:b8:09:e2:79:b3:da:c3:
f8:56:f9:e3:07:ff:f5:93:30:8d:ef:40:a0:ec:18:
96:5c:1e:af:ae:35:ab:93:8e:57:33:0b:9e:67:f4:
c2:5c:1a:95:a4:08:82:73:71:e4:2e:4e:fd:c3:10:
cf:9f:84:63:0c:3a:9d:bc:cf:ae:61:c4:aa:37:4e:
4a:8e:b5:b8:b9:55:51:2b:c1:e9:72:d0:a7:87:0a:
42:c7:61:3d:07:63:98:a5:ad:d3:fe:8f:36:a3:43:
10:bf:1e:3a:60:da:49:fa:85:1c:77:6d:c8:1c:de:
e0:80:5f:69:d9:27:3f:be:7f:a3:7a:4b:87:2b:9b:
89:48:2d:63:81:9b:45:a5:6f:a7:38:fc:42:14:fa:
7b:a8:b7:88:a3:3b:f5:45:89:f8:af:9a:44:ed:4b:
1f:fe:3e:7d:cc:d6:84:08:05:a5:c9:7f:ba:82:20:
2b:d3:75:06:4b:0c:3b:bf:05:b2:a2:e3:73:20:86:
f6:06:71:f3:18:44:e9:9f:8f:cd:04:58:42:48:c9:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:D8:3E:79:55:0C:C4:B2:53:6B:FB:AC:C6:16:30:92:41:D9:F1
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8a:8f:58:7b:af:8b:ec:2a:8b:36:30:89:1f:12:6c:c6:be:
c6:8a:d9:d9:ff:0b:d7:1c:b1:26:db:22:4e:e3:3f:46:25:b2:
5d:39:3a:8b:88:e5:31:e2:57:a8:7a:a2:65:7c:d4:11:e9:8a:
bf:c9:c3:7d:a7:c6:ca:24:64:ba:ca:c3:4b:b6:db:69:29:b4:
73:bc:7d:ae:19:c1:ab:8b:8f:b7:8b:78:a8:5a:e2:46:b8:da:
7a:b3:9d:10:13:ae:f1:5d:c4:17:2e:24:dc:e4:ae:a8:79:e7:
32:bd:d9:11:a6:77:d9:e9:7d:8e:4a:91:7c:31:ad:72:f5:47:
89:a7:0f:1d:95:99:4e:2f:c6:8c:df:35:fd:33:4c:3a:c2:2e:
de:60:88:7e:5d:c4:b6:3b:8e:a5:41:ec:7e:4e:dd:23:6d:f3:
5c:f9:5f:ea:c5:8a:ba:b0:21:ba:4f:fb:8e:a5:0a:9a:93:6f:
65:2d:4d:b1:1d:0c:38:1f:82:dc:b5:f9:3d:a5:41:e1:99:01:
ef:f8:e0:56:48:6b:6b:75:bc:87:93:35:39:6d:d4:65:52:a9:
d3:2b:9b:87:3f:cd:94:67:2e:a8:98:ff:96:b3:56:9e:a4:f5:
56:00:6d:d0:75:4f:3e:be:09:41:7c:80:de:46:7f:c4:6a:5b:
31:7c:b1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3tNeoyGHSutEVacBcW0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzU3MDA3YWViZjAwMDk4YTgwMDIyOGRiMWY1OTMwZWU2
NmU2NzUwHhcNMjYwOTA1MDAwMTMxWhcNMjYwOTA2MDAwMTMxWjAzMTEwLwYDVQQD
EyhmODFhZDgzZTc5NTUwY2M0YjI1MzZiZmJhY2M2MTYzMDkyNDFkOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OQHvMCG8mytVD80EtFZ9v855Z+G
+LRlOfe4JQ+OK+9r525DEp3aNM9sRRNieeopU/uFXLgJ4nmz2sP4VvnjB//1kzCN
70Cg7BiWXB6vrjWrk45XMwueZ/TCXBqVpAiCc3HkLk79wxDPn4RjDDqdvM+uYcSq
N05KjrW4uVVRK8HpctCnhwpCx2E9B2OYpa3T/o82o0MQvx46YNpJ+oUcd23IHN7g
gF9p2Sc/vn+jekuHK5uJSC1jgZtFpW+nOPxCFPp7qLeIozv1RYn4r5pE7Usf/j59
zNaECAWlyX+6giAr03UGSww7vwWyouNzIIb2BnHzGETpn4/NBFhCSMkViwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPga2D55VQzEslNr+6zGFjCSQdnxMB8GA1UdIwQY
MBaAFFx1cAeuvwAJioACKNsfWTDuZuZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUt
YTdhNzMxOTQwMjhlLzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUtYTdhNzMxOTQwMjhl
LzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoqPWHuv
i+wqizYwiR8SbMa+xorZ2f8L1xyxJtsiTuM/RiWyXTk6i4jlMeJXqHqiZXzUEemK
v8nDfafGyiRkusrDS7bbaSm0c7x9rhnBq4uPt4t4qFriRrjaerOdEBOu8V3EFy4k
3OSuqHnnMr3ZEaZ32el9jkqRfDGtcvVHiacPHZWZTi/GjN81/TNMOsIu3mCIfl3E
tjuOpUHsfk7dI23zXPlf6sWKurAhuk/7jqUKmpNvZS1NsR0MOB+C3LX5PaVB4ZkB
7/jgVkhra3W8h5M1OW3UZVKp0yubhz/NlGcuqJj/lrNWnqT1VgBt0HVPPr4JQXyA
3kZ/xGpbMXyxAw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:03:54 2026 by rpki-client