Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: Uf1cE7txeV1JU/5Ym+EaV1/3rvs9Fmy3uosvhKGjn78=
Subject key identifier: 4C:C3:22:40:03:7F:77:D4:14:A5:95:9B:4E:85:AD:2C:85:2E:F6:39
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01A186E370000502F797635A6B96BD1193C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 18A4
Signing time: Thu 29 Oct 2026 09:00:14 +0000
Manifest this update: Thu 29 Oct 2026 09:00:14 +0000
Manifest next update: Fri 30 Oct 2026 09:00:14 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: eL87ev3AgXmyxxpu+c9KN4GfZZoKotYZCHEJj2rl3hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:70:00:05:02:f7:97:63:5a:6b:96:bd:11:93:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Oct 29 09:00:14 2026 GMT
Not After : Oct 30 09:00:14 2026 GMT
Subject: CN=4cc32240037f77d414a5959b4e85ad2c852ef639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:13:a2:7a:c0:8f:7b:b7:68:0b:8a:08:7f:
3c:b6:ff:79:de:80:71:c0:5e:b0:7d:1a:ae:40:bc:
94:94:b1:28:a4:16:7d:29:4e:f3:38:e6:70:24:02:
9d:e3:2b:e7:6e:66:b9:44:f5:e0:d6:e8:39:cd:1a:
35:34:bc:6a:7b:08:ac:9d:1d:e9:35:b4:f2:79:fd:
f2:cf:78:c6:07:22:8d:b6:e2:95:c5:5e:b1:18:24:
04:05:bd:0a:17:02:43:3d:82:d4:fb:6f:d8:3a:ab:
3a:4e:dc:1b:31:bf:b3:a2:e8:81:67:1d:12:4f:87:
28:2a:1d:0d:56:1d:3a:02:fb:a6:00:73:e4:e9:e9:
a8:59:4c:ef:51:be:8f:d8:d3:96:f6:8f:12:28:4e:
6d:54:36:62:c6:34:35:ae:36:c8:4e:c9:e4:63:78:
31:c1:09:ae:10:a3:23:63:5e:08:b9:47:71:6a:bb:
37:25:f1:a9:ba:b5:48:79:ba:b8:48:12:9f:e4:a0:
ad:a9:d1:41:4a:12:a5:f2:c9:b2:a6:92:11:09:d5:
fc:0d:de:a6:da:95:3c:e1:4a:34:b5:1e:2e:a1:82:
8e:d1:70:8c:40:fe:3d:8e:c2:53:53:98:b1:a8:5f:
f3:36:10:8e:a2:75:51:08:78:c9:06:72:5f:3f:75:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:22:40:03:7F:77:D4:14:A5:95:9B:4E:85:AD:2C:85:2E:F6:39
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:62:84:3e:f8:1b:56:25:7f:33:f9:e5:a6:6f:49:15:ee:48:
11:4a:cf:2a:c8:bf:de:91:e5:f7:82:ae:54:91:a6:2b:ee:91:
2f:ac:22:94:48:27:3d:f9:c0:c0:6c:93:96:35:40:4f:3a:d7:
5a:e2:72:a7:c0:d7:89:4d:ec:96:ca:67:40:f8:85:7a:f1:bd:
5b:08:7e:e2:6d:9a:b4:57:79:d9:0b:99:60:f9:ae:42:fd:8c:
94:9e:4b:d4:fb:b4:6e:21:f4:e8:20:8f:20:c5:6f:08:33:a3:
03:8b:11:42:28:d6:25:e3:81:d0:a2:08:f0:d0:fb:02:4c:0f:
90:6f:e8:13:34:4a:e0:f1:a5:e7:af:9d:51:ca:39:2c:5c:9c:
f5:8e:d9:48:ce:d8:90:fa:00:b7:2b:34:46:62:7d:ea:05:43:
31:4a:eb:61:0e:3a:67:ad:4d:8f:93:13:5d:11:43:08:1e:5a:
01:46:35:68:65:3d:34:2a:db:d1:28:ee:05:12:ec:37:61:6b:
5b:9a:1e:ea:ea:0f:af:46:59:2b:22:74:6d:55:d5:6f:de:e7:
bd:3d:aa:88:ef:67:9b:82:f1:09:ac:85:65:f4:d7:74:60:79:
08:cb:6d:bf:7a:bc:48:27:91:1e:bd:67:bb:06:5d:e9:a6:4c:
cc:a9:0d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGG43AABQL3l2Naa5a9EZPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzI1YmVmZDhiN2U4NWUzNDcxMDQyMDZkOGMwYWI4YTZl
MGZiNGUwHhcNMjYxMDI5MDkwMDE0WhcNMjYxMDMwMDkwMDE0WjAzMTEwLwYDVQQD
Eyg0Y2MzMjI0MDAzN2Y3N2Q0MTRhNTk1OWI0ZTg1YWQyYzg1MmVmNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0ATonrAj3u3aAuKCH88tv953oBx
wF6wfRquQLyUlLEopBZ9KU7zOOZwJAKd4yvnbma5RPXg1ug5zRo1NLxqewisnR3p
NbTyef3yz3jGByKNtuKVxV6xGCQEBb0KFwJDPYLU+2/YOqs6TtwbMb+zouiBZx0S
T4coKh0NVh06AvumAHPk6emoWUzvUb6P2NOW9o8SKE5tVDZixjQ1rjbITsnkY3gx
wQmuEKMjY14IuUdxars3JfGpurVIebq4SBKf5KCtqdFBShKl8smyppIRCdX8Dd6m
2pU84Uo0tR4uoYKO0XCMQP49jsJTU5ixqF/zNhCOonVRCHjJBnJfP3Xl6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzDIkADf3fUFKWVm06FrSyFLvY5MB8GA1UdIwQY
MBaAFF0yW+/Yt+heNHEEIG2MCrim4PtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2Ut
Zjk5OTViNzhhODVmLzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2UtZjk5OTViNzhhODVm
LzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWKEPvgb
ViV/M/nlpm9JFe5IEUrPKsi/3pHl94KuVJGmK+6RL6wilEgnPfnAwGyTljVATzrX
WuJyp8DXiU3slspnQPiFevG9Wwh+4m2atFd52QuZYPmuQv2MlJ5L1Pu0biH06CCP
IMVvCDOjA4sRQijWJeOB0KII8ND7AkwPkG/oEzRK4PGl56+dUco5LFyc9Y7ZSM7Y
kPoAtys0RmJ96gVDMUrrYQ46Z61Nj5MTXRFDCB5aAUY1aGU9NCrb0SjuBRLsN2Fr
W5oe6uoPr0ZZKyJ0bVXVb97nvT2qiO9nm4LxCayFZfTXdGB5CMttv3q8SCeRHr1n
uwZd6aZMzKkNLg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:36 2026 by rpki-client