Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: Y2HaPaX0OGIGNgIzWlBePEmp3MBOOEkOxdsmZ6u7jAY=
Subject key identifier: 5C:D9:70:06:AB:CA:0E:13:8D:46:9A:2C:ED:61:D4:D2:C4:F7:DC:6C
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 01A1656B2D9D7723190BF47B230C9CF8C533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1A4D
Signing time: Thu 22 Oct 2026 21:01:25 +0000
Manifest this update: Thu 22 Oct 2026 21:01:25 +0000
Manifest next update: Fri 23 Oct 2026 21:01:25 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: WXmKVxCX9f/+x0zVG1BQOME/YaEjcbZe/qItaqxpsek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:6b:2d:9d:77:23:19:0b:f4:7b:23:0c:9c:f8:c5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Oct 22 21:01:25 2026 GMT
Not After : Oct 23 21:01:25 2026 GMT
Subject: CN=5cd97006abca0e138d469a2ced61d4d2c4f7dc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:b7:18:94:7b:19:0a:7f:2d:8d:21:9c:16:
f7:bb:3f:28:49:36:c0:ff:d4:62:91:86:eb:69:81:
e3:62:2b:fb:28:08:cc:ca:95:b2:08:91:a7:32:e2:
56:96:1f:89:01:95:6c:0e:2b:c5:78:69:08:1e:9e:
3d:9d:bd:db:f2:00:70:be:15:a9:d0:ec:70:09:0a:
6e:64:d5:ce:a8:f8:6a:cf:fb:b6:f9:b4:0b:53:63:
22:09:32:d5:09:96:92:b9:8a:2c:f6:04:2d:b4:fb:
58:23:94:2f:07:c8:9a:61:07:41:4c:ef:c0:76:ee:
e8:db:a6:eb:07:cf:31:c8:ad:aa:99:de:d3:15:62:
85:23:dc:38:1a:c8:45:06:5a:e0:3e:bd:ca:88:ba:
61:48:7d:fa:54:6e:3d:8c:34:82:80:8e:20:68:58:
49:44:43:a2:da:71:99:bf:dc:38:97:da:64:aa:a9:
7b:87:41:e3:2b:f3:ae:1e:6e:bf:57:1c:1d:44:9f:
a2:e3:89:cf:79:4e:79:f0:15:fb:4b:eb:cf:46:17:
a2:5b:1c:bc:71:74:3c:6d:52:af:8e:e9:4a:14:de:
6f:aa:c3:13:d8:f7:39:a4:94:b9:5b:cd:98:c2:02:
04:f9:5b:75:72:98:da:c2:b4:85:f7:cd:a3:e0:5d:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:70:06:AB:CA:0E:13:8D:46:9A:2C:ED:61:D4:D2:C4:F7:DC:6C
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:75:c5:7f:90:3b:26:0c:d1:00:2f:41:c9:ae:61:a5:ed:c4:
90:d5:43:c5:4c:d4:17:3f:9f:99:47:5a:8c:88:90:37:8f:3f:
2f:c0:a2:f8:42:45:30:8e:a6:c6:f9:1f:c9:32:e4:15:a1:db:
c1:b1:5f:a6:47:92:7f:9b:66:f3:19:71:b3:7d:89:6f:41:a0:
c1:33:a3:40:24:5b:0c:1a:b1:55:7e:63:ea:e5:d9:9f:f4:55:
a1:ef:ed:fd:12:0d:44:5e:8e:53:c0:9f:23:e1:bd:90:b3:59:
ea:3c:2e:12:2b:e3:58:8c:fd:5e:42:fe:aa:a6:a4:c6:71:c5:
ea:80:e1:c9:83:47:68:02:36:7e:7d:38:c6:44:b2:4d:ae:fd:
51:66:a8:8b:6a:92:38:b9:20:1a:a5:e4:90:b0:d3:bb:fd:44:
76:8e:d6:3e:9e:8e:ad:41:10:e8:b2:11:55:ca:66:6f:28:f4:
dd:b3:72:fc:69:b5:bb:9f:27:f5:08:09:3b:78:30:9e:82:b6:
cf:52:85:e7:2f:ac:b7:63:26:9a:66:f1:89:64:ad:14:2c:85:
96:0e:87:fd:3e:ad:f9:66:7f:32:65:d9:6c:8d:11:1d:1b:c3:
9b:18:f7:27:9f:e2:ba:60:cf:cd:16:57:84:7a:c9:5a:6c:3f:
ce:9e:f4:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFlay2ddyMZC/R7Iwyc+MUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OGFmYTIyZjk4YTM3ZjZkOGQwMjkzYTliMzE5NDE2ZWM5
NGQzODYwHhcNMjYxMDIyMjEwMTI1WhcNMjYxMDIzMjEwMTI1WjAzMTEwLwYDVQQD
Eyg1Y2Q5NzAwNmFiY2EwZTEzOGQ0NjlhMmNlZDYxZDRkMmM0ZjdkYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9q3GJR7GQp/LY0hnBb3uz8oSTbA
/9RikYbraYHjYiv7KAjMypWyCJGnMuJWlh+JAZVsDivFeGkIHp49nb3b8gBwvhWp
0OxwCQpuZNXOqPhqz/u2+bQLU2MiCTLVCZaSuYos9gQttPtYI5QvB8iaYQdBTO/A
du7o26brB88xyK2qmd7TFWKFI9w4GshFBlrgPr3KiLphSH36VG49jDSCgI4gaFhJ
REOi2nGZv9w4l9pkqql7h0HjK/OuHm6/VxwdRJ+i44nPeU558BX7S+vPRheiWxy8
cXQ8bVKvjulKFN5vqsMT2Pc5pJS5W82YwgIE+Vt1cpjawrSF982j4F0lhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzZcAaryg4TjUaaLO1h1NLE99xsMB8GA1UdIwQY
MBaAFMWK+iL5ijf22NApOpsxlBbslNOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEt
OTEyMjg2MjA1NzBlLzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEtOTEyMjg2MjA1NzBl
LzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnXFf5A7
JgzRAC9Bya5hpe3EkNVDxUzUFz+fmUdajIiQN48/L8Ci+EJFMI6mxvkfyTLkFaHb
wbFfpkeSf5tm8xlxs32Jb0GgwTOjQCRbDBqxVX5j6uXZn/RVoe/t/RINRF6OU8Cf
I+G9kLNZ6jwuEivjWIz9XkL+qqakxnHF6oDhyYNHaAI2fn04xkSyTa79UWaoi2qS
OLkgGqXkkLDTu/1Edo7WPp6OrUEQ6LIRVcpmbyj03bNy/Gm1u58n9QgJO3gwnoK2
z1KF5y+st2MmmmbxiWStFCyFlg6H/T6t+WZ/MmXZbI0RHRvDmxj3J5/iumDPzRZX
hHrJWmw/zp70Hg==
-----END CERTIFICATE-----
Generated at Fri Oct 23 08:32:17 2026 by rpki-client