Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: 11jQihSkP/X/zWqRisKMPBhO5nHhHzdZVWTPAOlLLG4=
Subject key identifier: 03:5F:74:1F:E2:3B:06:A0:A9:76:B2:D3:62:50:D4:E4:88:41:96:6B
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 01A17C5FF5BB94D58A27F59985867AB8A30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 1648
Signing time: Tue 27 Oct 2026 08:00:25 +0000
Manifest this update: Tue 27 Oct 2026 08:00:25 +0000
Manifest next update: Wed 28 Oct 2026 08:00:25 +0000
Files and hashes: 1: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: lJsw0tT1SJapNR7BjlmoaONt2RDhLJhBpaEwmbN44P8=)
2: zyvBgcaKIFGMWYv6OuW2zLjcavU.roa (hash: XTPB93PSeuPbkhF2YYl0hqMFZjAqg6tmVvQv1bPxkjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:f5:bb:94:d5:8a:27:f5:99:85:86:7a:b8:a3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Oct 27 08:00:25 2026 GMT
Not After : Oct 28 08:00:25 2026 GMT
Subject: CN=035f741fe23b06a0a976b2d36250d4e48841966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:8c:35:99:e7:db:37:15:6c:b6:30:09:ba:
99:94:da:6c:8a:0d:08:42:cd:ca:ef:f6:33:12:5e:
12:fa:ac:b9:7e:e1:7c:e7:66:44:34:cb:48:5f:e1:
0f:24:aa:9a:34:97:f8:3f:a3:45:d8:2f:07:21:e5:
fb:ad:73:45:d0:b6:23:6d:b2:87:95:13:e4:b2:f9:
51:d5:b6:e4:55:60:4b:52:23:48:d1:69:84:ed:dc:
54:c2:f2:30:e5:a0:ba:14:82:27:79:62:29:04:e0:
66:54:d6:4d:b7:26:93:5e:20:2d:f7:83:6c:51:40:
59:3f:4c:24:c5:6c:e5:38:9b:64:aa:40:90:35:dd:
a4:94:87:e7:05:11:46:74:83:ce:d9:40:59:8a:ba:
85:42:da:43:fe:1b:a3:9b:fc:09:08:3c:31:ca:d4:
d0:92:59:06:a4:52:01:6a:21:94:07:5c:46:bb:1d:
26:9b:0f:df:d3:55:46:a5:a0:6c:83:79:93:5c:9f:
ec:30:ae:f6:db:c0:14:a1:66:8b:75:f9:eb:38:aa:
aa:2c:4a:7f:cd:4d:ce:e0:11:99:c5:ac:ae:6a:aa:
dd:22:27:33:47:da:38:ad:3f:d2:73:f3:fe:f4:4f:
37:3e:4a:06:d1:23:3b:6c:79:09:a9:fb:f6:52:cc:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5F:74:1F:E2:3B:06:A0:A9:76:B2:D3:62:50:D4:E4:88:41:96:6B
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:26:6b:3c:ca:20:d2:f3:02:bc:76:9a:14:6f:11:02:4c:ec:
38:61:11:b7:17:ac:69:e3:d8:9f:31:5a:7e:4e:22:4c:d7:2d:
c3:a7:da:87:f2:e6:1c:46:be:e0:5b:40:46:fa:24:ec:35:5b:
c4:54:22:a5:1b:8b:ec:b9:80:74:92:de:47:ef:71:09:75:2e:
1f:cf:6a:e4:df:02:ce:a8:ae:ba:9a:2a:71:4c:66:90:6f:c1:
cd:63:c5:93:21:1b:fc:6a:7e:71:72:79:64:dd:5b:8b:f6:7e:
55:12:d0:c4:ee:0b:0c:03:6e:5e:4a:43:ed:50:8d:f7:cc:bc:
b6:64:77:0d:22:3e:fb:da:cd:69:7b:7b:39:34:d8:1e:46:fc:
89:d8:1b:16:ef:57:06:b3:31:53:55:7a:58:b6:d0:28:50:61:
ca:a7:7b:2d:0b:68:ca:5e:62:a3:11:d1:56:cb:9e:ec:ad:b9:
36:a0:60:42:89:a3:dd:77:0b:f7:ba:db:bb:6c:87:c8:a7:dd:
b0:8c:82:56:49:d7:50:73:f6:8b:ae:28:32:74:73:40:f4:d2:
b0:50:44:7e:43:9f:c1:85:66:bd:5b:43:25:d9:49:e9:cf:4c:
1a:77:f9:9d:0a:19:e5:05:58:b0:aa:2f:39:19:34:57:23:5d:
05:bf:b1:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8X/W7lNWKJ/WZhYZ6uKMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmM1YzY1YzkzYTc0MDQwODZiMTdhNTRlN2UwZGE5NjBh
OWIyOTMwHhcNMjYxMDI3MDgwMDI1WhcNMjYxMDI4MDgwMDI1WjAzMTEwLwYDVQQD
EygwMzVmNzQxZmUyM2IwNmEwYTk3NmIyZDM2MjUwZDRlNDg4NDE5NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto2MNZnn2zcVbLYwCbqZlNpsig0I
Qs3K7/YzEl4S+qy5fuF852ZENMtIX+EPJKqaNJf4P6NF2C8HIeX7rXNF0LYjbbKH
lRPksvlR1bbkVWBLUiNI0WmE7dxUwvIw5aC6FIIneWIpBOBmVNZNtyaTXiAt94Ns
UUBZP0wkxWzlOJtkqkCQNd2klIfnBRFGdIPO2UBZirqFQtpD/hujm/wJCDwxytTQ
klkGpFIBaiGUB1xGux0mmw/f01VGpaBsg3mTXJ/sMK7228AUoWaLdfnrOKqqLEp/
zU3O4BGZxayuaqrdIiczR9o4rT/Sc/P+9E83PkoG0SM7bHkJqfv2UszECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANfdB/iOwagqXay02JQ1OSIQZZrMB8GA1UdIwQY
MBaAFKf8XGXJOnQECGsXpU5+DalgqbKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjkt
ZjBhZDM3NWE4MDg2LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjktZjBhZDM3NWE4MDg2
LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyZrPMog
0vMCvHaaFG8RAkzsOGERtxesaePYnzFafk4iTNctw6fah/LmHEa+4FtARvok7DVb
xFQipRuL7LmAdJLeR+9xCXUuH89q5N8CzqiuupoqcUxmkG/BzWPFkyEb/Gp+cXJ5
ZN1bi/Z+VRLQxO4LDANuXkpD7VCN98y8tmR3DSI++9rNaXt7OTTYHkb8idgbFu9X
BrMxU1V6WLbQKFBhyqd7LQtoyl5ioxHRVsue7K25NqBgQomj3XcL97rbu2yHyKfd
sIyCVknXUHP2i64oMnRzQPTSsFBEfkOfwYVmvVtDJdlJ6c9MGnf5nQoZ5QVYsKov
ORk0VyNdBb+xpQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:01:07 2026 by rpki-client