Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: hhC6DLrgm98rlXgHqz8OzGqvtNiUqmdoCoJZ9bRMHbU=
Subject key identifier: B5:D0:CE:12:B5:27:24:77:17:61:62:B0:CC:35:E4:87:4D:23:3B:C1
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01A0412A420E7477C0FAAFC9D3BFFBA358F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0CEC
Signing time: Thu 27 Aug 2026 03:01:23 +0000
Manifest this update: Thu 27 Aug 2026 03:01:23 +0000
Manifest next update: Fri 28 Aug 2026 03:01:23 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: RXAn5owEOwU+WtNxbWixED3tDY9ERu+vYJh7twGH+/8=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:42:0e:74:77:c0:fa:af:c9:d3:bf:fb:a3:58:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Aug 27 03:01:23 2026 GMT
Not After : Aug 28 03:01:23 2026 GMT
Subject: CN=b5d0ce12b5272477176162b0cc35e4874d233bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:a9:24:c5:8f:56:f0:e3:dc:0b:15:96:0f:
d0:8a:bb:8a:48:19:b6:ac:43:82:50:74:77:62:6e:
6f:4f:b6:da:fd:2a:b1:a7:72:d4:85:f6:01:03:92:
fe:1f:f9:89:b3:67:5b:26:17:9c:2f:60:4c:4a:c5:
86:94:73:fc:43:23:d5:bc:5c:9e:96:92:92:70:ba:
8d:df:94:c8:0e:08:38:4e:39:e3:43:e8:e1:e1:81:
7a:98:62:b6:ca:eb:55:db:1f:eb:54:6d:4c:39:ae:
d4:05:85:96:ac:4c:8e:9f:62:e3:8b:8f:f3:b7:31:
ff:e1:47:99:b8:ec:d5:a3:f3:ee:0a:64:ad:e6:53:
2b:18:8a:cd:cb:61:15:09:94:be:68:bf:ad:93:03:
c7:3f:26:60:ba:99:8a:34:97:f6:1a:28:da:0b:4d:
95:56:b1:fa:8d:df:89:6d:2b:de:4c:7a:94:2b:83:
e1:67:f2:2e:75:f6:70:e3:2c:d2:ce:91:d3:95:bd:
94:40:65:f0:c8:da:c7:b2:c9:21:57:e0:94:3c:fa:
51:d0:ef:64:e8:45:d2:d5:16:4f:cc:20:a3:f7:da:
bc:e9:f0:dd:0a:73:bc:98:a8:3a:d5:a4:76:b9:5e:
b4:d1:64:d9:17:60:46:0c:56:a6:d5:0a:17:22:6a:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:CE:12:B5:27:24:77:17:61:62:B0:CC:35:E4:87:4D:23:3B:C1
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:44:19:32:05:42:ba:9b:99:0a:23:eb:1a:03:16:f8:50:
b3:07:9d:27:fc:5e:17:53:81:a6:1b:6c:92:fa:87:b4:71:05:
63:b0:0b:24:b4:23:53:95:f6:50:1a:2f:cc:54:b7:be:ca:78:
ec:d5:ba:6d:81:a2:eb:ca:1f:fb:97:48:97:9d:e9:eb:4a:eb:
dc:65:0d:96:ec:c2:a0:ec:22:75:54:96:fd:b3:15:ac:e9:34:
bd:ec:c7:00:1c:3e:f6:1a:75:ab:d2:51:bb:87:a8:f4:1e:53:
ce:0e:f2:0e:d3:4e:2f:07:85:8e:b5:a8:68:76:63:5d:ce:2c:
6f:82:a3:22:cf:7e:0d:92:41:31:c7:4f:32:03:a9:86:79:b9:
7f:16:25:4f:b8:cf:3d:06:d4:43:f0:ba:01:7a:7d:0e:60:af:
0a:e2:79:1e:6f:f2:fd:95:e2:c7:b2:5e:32:5b:a0:cc:65:71:
b9:75:bb:fe:77:31:6f:42:76:05:1c:59:48:e3:03:4a:3c:88:
11:88:6d:f1:2d:24:be:f9:eb:d3:61:c3:ef:31:d7:29:65:f1:
90:dd:38:f4:ba:7e:b0:de:cb:b5:cf:78:fa:de:73:64:c1:ba:
64:67:2d:fc:56:d1:5a:46:6f:48:9d:aa:7e:4d:97:aa:93:b7:
3a:cf:5e:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKkIOdHfA+q/J07/7o1j2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl
NzkzNWEwHhcNMjYwODI3MDMwMTIzWhcNMjYwODI4MDMwMTIzWjAzMTEwLwYDVQQD
EyhiNWQwY2UxMmI1MjcyNDc3MTc2MTYyYjBjYzM1ZTQ4NzRkMjMzYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2OpJMWPVvDj3AsVlg/QiruKSBm2
rEOCUHR3Ym5vT7ba/Sqxp3LUhfYBA5L+H/mJs2dbJhecL2BMSsWGlHP8QyPVvFye
lpKScLqN35TIDgg4TjnjQ+jh4YF6mGK2yutV2x/rVG1MOa7UBYWWrEyOn2Lji4/z
tzH/4UeZuOzVo/PuCmSt5lMrGIrNy2EVCZS+aL+tkwPHPyZgupmKNJf2GijaC02V
VrH6jd+JbSveTHqUK4PhZ/IudfZw4yzSzpHTlb2UQGXwyNrHsskhV+CUPPpR0O9k
6EXS1RZPzCCj99q86fDdCnO8mKg61aR2uV600WTZF2BGDFam1QoXImqerQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXQzhK1JyR3F2FisMw15IdNIzvBMB8GA1UdIwQY
MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt
MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw
LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmpEGTIF
QrqbmQoj6xoDFvhQswedJ/xeF1OBphtskvqHtHEFY7ALJLQjU5X2UBovzFS3vsp4
7NW6bYGi68of+5dIl53p60rr3GUNluzCoOwidVSW/bMVrOk0vezHABw+9hp1q9JR
u4eo9B5Tzg7yDtNOLweFjrWoaHZjXc4sb4KjIs9+DZJBMcdPMgOphnm5fxYlT7jP
PQbUQ/C6AXp9DmCvCuJ5Hm/y/ZXix7JeMlugzGVxuXW7/ncxb0J2BRxZSOMDSjyI
EYht8S0kvvnr02HD7zHXKWXxkN049Lp+sN7Ltc94+t5zZMG6ZGct/FbRWkZvSJ2q
fk2XqpO3Os9eSQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:55:47 2026 by rpki-client