Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: 5O1z8EZofg3uiXWvyWQFrcmTKvwuksZvji7td+mGv4E=
Subject key identifier: 8E:B7:21:29:E8:14:4B:1C:80:0B:89:07:31:A4:0D:F6:34:EB:47:9A
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 01A03C03C366443438173C7B4699B711953B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 0521
Signing time: Wed 26 Aug 2026 03:01:14 +0000
Manifest this update: Wed 26 Aug 2026 03:01:14 +0000
Manifest next update: Thu 27 Aug 2026 03:01:14 +0000
Files and hashes: 1: 2Mi7xSwXWORT-cP1uI-5ipGqq4s.roa (hash: tSv3E+ZA/wZe9XbU1lskSKrjg17Dn+XBQfh3/xFVJUg=)
2: ByC-ZTHZLIp48xod5-DXAW5F3BI.asa (hash: 8ff1w8+edBnztEn324ScKN5DjpE1LW2R4BVBiNrCsOw=)
3: LlfdcTz9x7rrYLdHdKh9Na-Mfd0.roa (hash: RkCIWInpuo8o6AIXIjNXD1h+2dYnpr1vQR3Vie5EDns=)
4: Tp-h7fmGBqfKD0Ue-ghQOfIbzYE.asa (hash: WMYYd+/cdLigPmUzWhY4TymlCE9a6NI3QPAJVx0ExN8=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: JWFbT7H9beU5vosZl9wBGz4doE8XQsM9YW6VFGMYT0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:03:c3:66:44:34:38:17:3c:7b:46:99:b7:11:95:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Aug 26 03:01:14 2026 GMT
Not After : Aug 27 03:01:14 2026 GMT
Subject: CN=8eb72129e8144b1c800b890731a40df634eb479a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:dc:b6:d2:3f:a0:be:40:2f:97:24:24:04:
53:2b:d4:2b:6d:cc:00:3a:f4:16:f9:ee:3a:e9:12:
a0:e2:72:f6:5c:5c:a5:b0:fb:97:bf:1f:2d:4e:7a:
21:c8:09:34:ed:5a:a1:b8:1f:a5:c4:d0:b0:dd:e6:
3f:33:ba:b2:56:b2:78:90:96:16:1a:34:ae:b0:a7:
55:25:27:1b:89:0c:06:b7:94:a9:ae:28:de:49:e0:
f5:1d:52:be:7d:3b:ff:0d:c8:fe:f8:33:67:54:f0:
4d:8e:cf:3d:aa:91:a7:d1:1d:43:44:0e:63:ea:07:
a0:ce:a0:92:64:14:cb:d1:99:c7:96:c4:45:70:72:
48:01:3e:51:de:c3:62:c4:27:b0:aa:90:28:7d:17:
7b:83:e3:5d:c0:07:11:15:3a:e1:24:99:22:2f:58:
91:f1:80:b4:2e:fc:a4:9e:78:fc:62:02:50:e8:d1:
06:40:b1:e6:62:db:72:0c:8c:34:21:03:6a:cf:3c:
5f:46:4b:ff:ab:96:87:46:74:0f:9f:f9:4f:9d:78:
39:ba:7f:cb:86:5a:0b:48:e6:c6:90:67:b6:d2:15:
87:af:71:f7:84:dc:5a:0d:8c:f6:76:a0:8b:07:54:
75:50:fd:23:4a:96:08:5b:a9:0f:c3:00:20:ff:42:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B7:21:29:E8:14:4B:1C:80:0B:89:07:31:A4:0D:F6:34:EB:47:9A
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d7:48:8f:da:6d:a1:67:ae:4f:4b:79:bc:99:90:14:35:ab:
3e:e4:0b:19:ac:86:ee:ab:8a:ce:10:80:fe:d7:69:41:d5:92:
a2:64:96:06:1b:03:85:2b:86:50:d4:d0:a6:23:66:f6:fb:29:
fb:09:a5:aa:ee:79:53:65:e4:42:f0:69:ac:68:ab:20:bb:54:
66:66:71:22:d4:e7:4a:39:f2:17:8d:0d:97:d9:5d:d6:68:f1:
79:1a:c9:d8:a3:95:21:36:35:ad:46:a0:a0:11:c3:9b:bd:ea:
68:43:0a:0f:5f:f8:32:ef:8a:6c:c5:c1:47:45:e3:63:a6:77:
ec:53:14:bf:c0:b0:39:e7:7d:24:fe:88:47:69:d5:0a:c0:fe:
d4:56:b7:b4:eb:b2:dd:18:93:d1:c2:42:ec:8d:6c:70:d5:8e:
a5:9f:3f:4d:f7:9f:61:fb:76:5e:c1:14:2f:76:b6:be:39:78:
9a:ea:d6:c8:94:be:fc:09:64:75:9b:f8:fa:6f:27:9b:ee:9a:
ef:f7:b6:7e:f8:9a:14:a8:36:02:05:94:a4:86:b3:1b:ba:1d:
82:3d:72:e7:b2:c5:e3:36:ef:17:de:75:66:cf:ca:e8:9d:84:
a2:37:30:ac:9c:3b:fd:ad:64:be:bc:dc:09:b9:f6:1c:73:38:
57:9e:7e:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA8A8NmRDQ4Fzx7Rpm3EZU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi
ZmQyNDkwHhcNMjYwODI2MDMwMTE0WhcNMjYwODI3MDMwMTE0WjAzMTEwLwYDVQQD
Eyg4ZWI3MjEyOWU4MTQ0YjFjODAwYjg5MDczMWE0MGRmNjM0ZWI0NzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHTcttI/oL5AL5ckJARTK9QrbcwA
OvQW+e466RKg4nL2XFylsPuXvx8tTnohyAk07VqhuB+lxNCw3eY/M7qyVrJ4kJYW
GjSusKdVJScbiQwGt5SprijeSeD1HVK+fTv/Dcj++DNnVPBNjs89qpGn0R1DRA5j
6gegzqCSZBTL0ZnHlsRFcHJIAT5R3sNixCewqpAofRd7g+NdwAcRFTrhJJkiL1iR
8YC0Lvyknnj8YgJQ6NEGQLHmYttyDIw0IQNqzzxfRkv/q5aHRnQPn/lPnXg5un/L
hloLSObGkGe20hWHr3H3hNxaDYz2dqCLB1R1UP0jSpYIW6kPwwAg/0KwHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI63ISnoFEscgAuJBzGkDfY060eaMB8GA1UdIwQY
MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt
MjFmZDM1Y2Y0YmI5LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5
LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNdIj9pt
oWeuT0t5vJmQFDWrPuQLGayG7quKzhCA/tdpQdWSomSWBhsDhSuGUNTQpiNm9vsp
+wmlqu55U2XkQvBprGirILtUZmZxItTnSjnyF40Nl9ld1mjxeRrJ2KOVITY1rUag
oBHDm73qaEMKD1/4Mu+KbMXBR0XjY6Z37FMUv8CwOed9JP6IR2nVCsD+1Fa3tOuy
3RiT0cJC7I1scNWOpZ8/TfefYft2XsEUL3a2vjl4murWyJS+/AlkdZv4+m8nm+6a
7/e2fviaFKg2AgWUpIazG7odgj1y57LF4zbvF951Zs/K6J2EojcwrJw7/a1kvrzc
Cbn2HHM4V55+fw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:09:04 2026 by rpki-client