Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: Ad+QIiMXzp2If9xV804CZnXfie+wnv0DblUc4QBv0co=
Subject key identifier: 1A:76:97:F4:A7:17:37:C1:D6:A3:30:27:53:18:7C:13:91:A5:EB:1E
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 01A176278599043C8B33AF8F1E5F3C4515EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 07DB
Signing time: Mon 26 Oct 2026 03:01:03 +0000
Manifest this update: Mon 26 Oct 2026 03:01:03 +0000
Manifest next update: Tue 27 Oct 2026 03:01:03 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: hbSJUr3I4q2gkXetkwCKusZCmi3VNH6WjeMiYEksSQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:85:99:04:3c:8b:33:af:8f:1e:5f:3c:45:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Oct 26 03:01:03 2026 GMT
Not After : Oct 27 03:01:03 2026 GMT
Subject: CN=1a7697f4a71737c1d6a3302753187c1391a5eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:be:61:c9:4f:0f:f4:11:5f:3c:8b:8d:80:
96:e6:de:33:c5:a3:89:82:19:70:1b:c6:da:85:97:
05:0d:eb:ce:2a:8c:9c:26:04:9d:b3:f5:42:8c:a6:
a4:83:f3:23:26:4a:d2:d5:ea:80:14:18:4d:da:7a:
25:a2:a9:b2:c5:6e:a8:ca:ea:f7:3f:9c:c8:e3:ab:
99:86:ce:ac:70:33:5d:a9:be:99:b7:33:ae:86:79:
6c:ed:44:86:5e:79:c5:4d:50:ec:35:06:ec:20:2c:
f2:eb:58:d2:34:92:5a:4d:21:e6:6d:86:bc:dc:ea:
d5:23:b8:72:5e:16:7a:78:03:81:ac:b2:9a:b8:9b:
8d:30:a7:0a:fd:54:67:65:c9:2c:5b:de:25:08:c2:
dc:41:20:0b:36:ab:00:4e:8b:b2:32:68:7f:96:89:
79:c7:af:5a:b6:7b:1a:75:76:7c:9c:98:a7:e7:50:
a4:22:30:8a:42:c5:b1:b9:bd:ce:2a:79:aa:0b:98:
30:78:96:13:02:84:c5:85:a4:22:7c:5f:27:7b:3e:
96:6f:15:1d:57:79:fc:a5:d0:4b:fd:22:29:0d:7e:
1a:ed:b9:ba:ab:fd:27:c3:6f:0a:36:86:b9:55:80:
30:bb:44:c6:55:06:cd:1c:32:03:f9:2d:10:3b:af:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:97:F4:A7:17:37:C1:D6:A3:30:27:53:18:7C:13:91:A5:EB:1E
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:f6:d3:ab:15:5a:83:2e:ac:02:92:7f:50:4e:60:82:16:
16:89:7b:17:16:78:32:44:94:52:95:10:20:b8:f5:b7:2a:6a:
44:08:27:87:25:90:0c:d3:e8:ae:e8:6f:d2:d5:9c:ae:4b:23:
90:ac:0d:9a:cd:67:40:24:53:9b:6a:00:6e:ad:7e:9f:7b:6d:
f3:ff:ac:da:ec:e6:4c:6f:5b:1b:a2:96:28:f2:12:35:d1:ec:
dd:c5:c6:8d:9e:b8:62:ca:d1:1a:64:cb:f4:01:77:46:37:1e:
7a:e4:9a:db:67:6f:13:b8:2a:9d:17:35:8b:67:a0:8c:4c:8b:
67:cd:10:b3:24:5d:8e:aa:5f:28:56:97:68:71:01:cf:b1:93:
55:ff:1d:39:fe:7a:63:72:e6:97:a6:c4:ae:be:74:0d:13:80:
09:64:e6:f7:85:ce:17:13:fb:ed:e9:e8:87:53:6b:5c:e2:94:
2a:12:e8:6a:09:b0:fe:a5:86:cd:ef:dc:82:0e:27:09:00:5a:
db:55:f5:b7:f8:1d:57:be:02:9b:9c:fe:f2:61:89:47:ef:87:
e1:9e:31:3c:5d:ae:bc:1a:79:79:22:8e:85:27:d7:27:ef:fe:
36:72:7a:e8:bc:48:96:6b:ff:ad:03:94:81:9d:28:a3:fa:d8:
47:46:cd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2J4WZBDyLM6+PHl88RRXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjQ5MGU2OTgwYjc5ZmE0YWIxN2U1ZjY1NzM3MWRhNjZj
MzZhZjQwHhcNMjYxMDI2MDMwMTAzWhcNMjYxMDI3MDMwMTAzWjAzMTEwLwYDVQQD
EygxYTc2OTdmNGE3MTczN2MxZDZhMzMwMjc1MzE4N2MxMzkxYTVlYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPO+YclPD/QRXzyLjYCW5t4zxaOJ
ghlwG8bahZcFDevOKoycJgSds/VCjKakg/MjJkrS1eqAFBhN2noloqmyxW6oyur3
P5zI46uZhs6scDNdqb6ZtzOuhnls7USGXnnFTVDsNQbsICzy61jSNJJaTSHmbYa8
3OrVI7hyXhZ6eAOBrLKauJuNMKcK/VRnZcksW94lCMLcQSALNqsATouyMmh/lol5
x69atnsadXZ8nJin51CkIjCKQsWxub3OKnmqC5gweJYTAoTFhaQifF8nez6WbxUd
V3n8pdBL/SIpDX4a7bm6q/0nw28KNoa5VYAwu0TGVQbNHDID+S0QO69lnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp2l/SnFzfB1qMwJ1MYfBORpeseMB8GA1UdIwQY
MBaAFMQkkOaYC3n6SrF+X2Vzcdpmw2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83OThkYTgtYTBiYS00ODhjLTkxODQt
NThjMTg5YzZlZmVkLzEveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83OThkYTgtYTBiYS00ODhjLTkxODQtNThjMTg5YzZlZmVk
LzEveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXn206sV
WoMurAKSf1BOYIIWFol7FxZ4MkSUUpUQILj1typqRAgnhyWQDNPoruhv0tWcrksj
kKwNms1nQCRTm2oAbq1+n3tt8/+s2uzmTG9bG6KWKPISNdHs3cXGjZ64YsrRGmTL
9AF3RjceeuSa22dvE7gqnRc1i2egjEyLZ80QsyRdjqpfKFaXaHEBz7GTVf8dOf56
Y3Lml6bErr50DROACWTm94XOFxP77enoh1NrXOKUKhLoagmw/qWGze/cgg4nCQBa
21X1t/gdV74Cm5z+8mGJR++H4Z4xPF2uvBp5eSKOhSfXJ+/+NnJ66LxIlmv/rQOU
gZ0oo/rYR0bNEA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:40:13 2026 by rpki-client