
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier: 1LAQDtxLr2vCHXWtmcsStzOl3jUycj6ydap2spofCzY=
Subject key identifier: AB:15:A8:D9:3B:D6:B1:9A:B4:EC:B8:27:05:63:97:56:5C:85:24:3C
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 01A18419D54C499BD80EB9608FC632C5B7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number: 0589
Signing time: Wed 28 Oct 2026 20:00:47 +0000
Manifest this update: Wed 28 Oct 2026 20:00:47 +0000
Manifest next update: Thu 29 Oct 2026 20:00:47 +0000
Files and hashes: 1: GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa (hash: afD0B4wX8ENk5NOyojNKqywcV5cJB2IJVzbUoTBJNnw=)
2: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: nSHGx7UpeXJnKrNupp5AaIEGl7E0oYcbpiuqff+aNFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:19:d5:4c:49:9b:d8:0e:b9:60:8f:c6:32:c5:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Oct 28 20:00:47 2026 GMT
Not After : Oct 29 20:00:47 2026 GMT
Subject: CN=ab15a8d93bd6b19ab4ecb827056397565c85243c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:1a:2f:06:ed:7a:db:cc:c2:80:30:b7:5b:
34:5f:df:72:b9:22:cc:c9:58:ab:61:ed:04:66:6c:
5a:00:b2:0d:43:1f:9b:7c:6e:5c:a7:90:c7:ee:39:
2f:c3:96:fb:07:8b:e0:a3:04:18:b0:62:e7:0c:51:
0b:b6:fe:af:0c:e8:f5:63:48:ca:1b:a7:c8:d9:69:
e7:af:51:78:64:08:84:c8:c7:fc:35:03:88:a3:c8:
13:6d:13:ec:28:e3:d6:36:ef:5f:96:df:4a:ce:45:
ba:83:31:29:32:96:10:d8:ec:b9:09:32:3f:07:1d:
00:c0:3c:b3:5a:d1:75:4c:14:8f:7b:cb:a2:98:f6:
92:c5:d8:8a:2b:a7:b8:ce:a6:e1:a6:ad:e6:a6:25:
3c:2d:f6:45:67:86:0c:91:2d:71:a7:78:c2:f6:2d:
66:48:48:b2:d2:2b:78:fa:b2:5e:50:68:bd:af:f0:
12:0c:50:9a:6b:4a:65:9f:4d:8a:f1:b7:cc:64:af:
ee:33:ae:ab:0f:e0:5b:76:b8:ef:3b:cf:95:39:4a:
e7:c2:65:f1:c8:e5:77:26:5d:6d:22:a3:c5:eb:16:
07:1a:cf:51:a0:4a:a5:f8:bd:cc:f6:8d:5c:4e:f7:
fc:e3:fd:90:7f:2d:8d:45:e2:62:41:35:f5:6f:08:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:A8:D9:3B:D6:B1:9A:B4:EC:B8:27:05:63:97:56:5C:85:24:3C
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:49:4c:2e:11:1a:47:56:de:82:72:e5:4d:bf:9a:ec:43:5d:
52:f2:68:5c:bb:70:a9:59:19:38:ec:2b:88:a6:1e:08:27:7f:
f3:30:bb:01:1c:6c:3e:be:f6:bf:7b:4d:ca:97:b3:05:3b:a9:
26:41:f6:b2:c7:8f:15:60:9b:0e:7a:59:ab:bf:d5:7f:60:27:
66:a4:13:16:be:06:27:01:45:e0:b2:9a:84:23:33:de:bc:b1:
bd:8f:ed:bb:45:fb:24:9c:3c:f7:e3:ae:6e:9b:18:f0:f4:d7:
28:09:2d:15:7f:aa:6e:3b:bb:58:5b:93:f3:f1:74:97:0d:63:
db:02:aa:1a:d2:1a:f6:a6:e2:ed:2f:33:82:e5:4a:b4:11:1c:
fa:42:30:b3:7e:ed:ae:73:03:09:f2:ba:54:4e:42:08:c1:4e:
96:df:0d:a3:97:be:03:0a:02:ec:f7:16:c9:03:38:db:71:22:
44:36:62:bc:e6:c4:c5:7a:b0:c5:fd:2d:9c:f7:7f:eb:0c:c4:
a7:5e:02:a9:91:ae:4c:2c:8d:de:23:af:86:d9:a5:25:b3:fb:
44:87:eb:d9:15:68:1f:f8:43:b8:5b:eb:82:7e:5e:ed:02:4d:
e7:1d:74:4f:47:ce:79:13:3a:80:1c:78:55:c1:bf:5f:b5:01:
bd:51:b9:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEGdVMSZvYDrlgj8YyxbejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYWM1MGIzNGIyYmFmZGM0NmRjNWI3NWQzOWJjMGRkODlh
NjhmMmMwHhcNMjYxMDI4MjAwMDQ3WhcNMjYxMDI5MjAwMDQ3WjAzMTEwLwYDVQQD
EyhhYjE1YThkOTNiZDZiMTlhYjRlY2I4MjcwNTYzOTc1NjVjODUyNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2AaLwbtetvMwoAwt1s0X99yuSLM
yVirYe0EZmxaALINQx+bfG5cp5DH7jkvw5b7B4vgowQYsGLnDFELtv6vDOj1Y0jK
G6fI2Wnnr1F4ZAiEyMf8NQOIo8gTbRPsKOPWNu9flt9KzkW6gzEpMpYQ2Oy5CTI/
Bx0AwDyzWtF1TBSPe8uimPaSxdiKK6e4zqbhpq3mpiU8LfZFZ4YMkS1xp3jC9i1m
SEiy0it4+rJeUGi9r/ASDFCaa0pln02K8bfMZK/uM66rD+BbdrjvO8+VOUrnwmXx
yOV3Jl1tIqPF6xYHGs9RoEql+L3M9o1cTvf84/2Qfy2NReJiQTX1bwj0vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsVqNk71rGatOy4JwVjl1ZchSQ8MB8GA1UdIwQY
MBaAFF6sULNLK6/cRtxbddObwN2Jpo8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYt
NzA1OGYxMWZhYzgyLzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYtNzA1OGYxMWZhYzgy
LzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVElMLhEa
R1begnLlTb+a7ENdUvJoXLtwqVkZOOwriKYeCCd/8zC7ARxsPr72v3tNypezBTup
JkH2ssePFWCbDnpZq7/Vf2AnZqQTFr4GJwFF4LKahCMz3ryxvY/tu0X7JJw89+Ou
bpsY8PTXKAktFX+qbju7WFuT8/F0lw1j2wKqGtIa9qbi7S8zguVKtBEc+kIws37t
rnMDCfK6VE5CCMFOlt8No5e+AwoC7PcWyQM423EiRDZivObExXqwxf0tnPd/6wzE
p14CqZGuTCyN3iOvhtmlJbP7RIfr2RVoH/hDuFvrgn5e7QJN5x10T0fOeRM6gBx4
VcG/X7UBvVG53Q==
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:54:37 2026 by rpki-client