Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: 19WyVl+YZeuh8YHtPvPL22QBJjptHXuFk/StUyibaTQ=
Subject key identifier: FC:23:A3:B8:BB:AF:28:9B:F0:C8:38:8E:28:2D:05:C7:4C:C5:8D:62
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 01A11372CE8B6910AC37409C401E0EED4C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 1A92
Signing time: Tue 06 Oct 2026 23:00:53 +0000
Manifest this update: Tue 06 Oct 2026 23:00:53 +0000
Manifest next update: Wed 07 Oct 2026 23:00:53 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: ABiYF4WmO90kGfh3bKUIGRtUjV/0BKTwq3XBvJmOKOw=)
2: nESdHSYfa1deK4cuMEoqKlkUBhA.roa (hash: Ne5xi2gxYVVWXxqP7e6edUaF5lMzo3AlLl0nnSwGj20=)
3: rZYX5fKPq_iTsTklZo3tUzGErD8.roa (hash: Bkadagr0tzraTAYCN3j7TcAW/fLW29DF6wAopom2qpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:72:ce:8b:69:10:ac:37:40:9c:40:1e:0e:ed:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Oct 6 23:00:53 2026 GMT
Not After : Oct 7 23:00:53 2026 GMT
Subject: CN=fc23a3b8bbaf289bf0c8388e282d05c74cc58d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:b7:29:6a:6e:61:ef:e9:0e:97:9e:76:1d:
c2:22:47:8a:ef:cd:8f:23:4d:fa:d3:e3:d0:dc:34:
12:3c:67:dd:d8:49:1a:27:7b:ac:eb:36:e3:1a:67:
c2:c5:0b:e5:58:9a:65:04:7f:94:1e:fa:72:f3:76:
d3:2b:2c:ef:fa:dd:93:29:98:c2:69:ff:49:c5:ed:
59:24:44:ac:60:7f:be:cc:ee:74:b0:b1:90:ed:e1:
27:81:24:41:ab:5b:23:8a:5a:38:98:76:c8:4c:bd:
35:34:21:d9:a0:40:4d:e6:4d:e5:26:ec:41:1e:fc:
10:e0:3b:a3:30:e6:ca:b0:34:45:3e:a5:6d:df:f3:
fa:99:3d:9d:68:ee:c3:e4:2b:38:74:1c:39:cb:79:
46:95:55:c4:cb:b8:42:1d:ce:2e:81:5b:4c:50:26:
81:3a:ac:4d:24:5a:e4:ac:aa:e7:8b:76:67:83:b0:
a3:4d:68:bb:c6:cf:dd:4d:3a:0a:7a:f6:44:2d:61:
e3:ec:02:07:f8:67:a8:cc:eb:1e:d1:2c:7f:d9:10:
d6:a9:40:fd:8a:e0:6b:70:9f:f6:1c:31:5c:41:85:
1b:d6:38:5c:9a:44:b4:cc:9f:0a:ff:43:6b:cd:9a:
99:14:67:52:78:ec:39:64:d9:c8:13:09:de:eb:b6:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:A3:B8:BB:AF:28:9B:F0:C8:38:8E:28:2D:05:C7:4C:C5:8D:62
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f9:a6:ca:91:46:97:50:8b:c9:88:a4:0c:bd:47:91:38:10:
ae:e5:41:25:7f:8c:13:35:b3:9e:0d:99:56:f7:05:71:8b:0f:
dd:cd:43:23:1e:1b:b1:49:c4:ae:42:37:cd:1b:ea:7c:2e:7d:
02:be:84:6a:f3:78:bd:b1:3b:13:0f:64:18:18:16:cb:34:e8:
9b:c6:18:54:f3:14:46:64:0e:ff:ef:59:04:80:40:ef:97:a8:
3c:95:b5:01:06:0f:a2:e9:5e:86:96:ce:bd:64:56:b4:f2:36:
f8:21:7e:8e:2f:8d:fe:55:8c:d9:13:fd:1e:16:41:83:d1:4d:
27:03:0c:ed:0a:f8:0a:2f:a4:c5:c8:42:c6:a6:93:51:87:4f:
19:ff:7a:52:5e:52:fd:fd:d4:dc:27:25:6a:72:e4:4a:2e:29:
20:77:b6:06:b6:e7:ea:66:5d:93:7c:b3:c1:e6:a3:5a:47:32:
53:4c:49:86:6c:34:25:65:e4:74:4a:35:cc:7c:38:40:0a:41:
2b:c1:c0:39:fa:f6:63:22:f8:c6:c3:8f:1a:9c:50:bb:04:3a:
ed:40:9e:8c:37:c4:aa:b1:9b:84:86:36:c9:8b:ee:08:83:f3:
d8:d4:e6:b1:b2:97:80:26:1f:d7:c8:b3:c3:3c:e5:48:16:84:
f3:1d:24:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETcs6LaRCsN0CcQB4O7UybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjM2ExZDk3M2Y5YjMzOTFlOGFkYWNhYTY2NGQxYjIzZDc3
OGYwMDgwHhcNMjYxMDA2MjMwMDUzWhcNMjYxMDA3MjMwMDUzWjAzMTEwLwYDVQQD
EyhmYzIzYTNiOGJiYWYyODliZjBjODM4OGUyODJkMDVjNzRjYzU4ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSe3KWpuYe/pDpeedh3CIkeK782P
I0360+PQ3DQSPGfd2EkaJ3us6zbjGmfCxQvlWJplBH+UHvpy83bTKyzv+t2TKZjC
af9Jxe1ZJESsYH++zO50sLGQ7eEngSRBq1sjilo4mHbITL01NCHZoEBN5k3lJuxB
HvwQ4DujMObKsDRFPqVt3/P6mT2daO7D5Cs4dBw5y3lGlVXEy7hCHc4ugVtMUCaB
OqxNJFrkrKrni3Zng7CjTWi7xs/dTToKevZELWHj7AIH+GeozOse0Sx/2RDWqUD9
iuBrcJ/2HDFcQYUb1jhcmkS0zJ8K/0NrzZqZFGdSeOw5ZNnIEwne67YNBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwjo7i7ryib8Mg4jigtBcdMxY1iMB8GA1UdIwQY
MBaAFFw6HZc/mzOR6K2sqmZNGyPXePAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEt
MTk0Y2M5OTAyYWJmLzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEtMTk0Y2M5OTAyYWJm
LzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/mmypFG
l1CLyYikDL1HkTgQruVBJX+MEzWzng2ZVvcFcYsP3c1DIx4bsUnErkI3zRvqfC59
Ar6EavN4vbE7Ew9kGBgWyzTom8YYVPMURmQO/+9ZBIBA75eoPJW1AQYPoulehpbO
vWRWtPI2+CF+ji+N/lWM2RP9HhZBg9FNJwMM7Qr4Ci+kxchCxqaTUYdPGf96Ul5S
/f3U3CclanLkSi4pIHe2Brbn6mZdk3yzweajWkcyU0xJhmw0JWXkdEo1zHw4QApB
K8HAOfr2YyL4xsOPGpxQuwQ67UCejDfEqrGbhIY2yYvuCIPz2NTmsbKXgCYf18iz
wzzlSBaE8x0kyw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:03:36 2026 by rpki-client