Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: YebCEdlOclBDWX+tRg8ivumI/C6PbZ9fSZnTuPPmRas=
Subject key identifier: 6E:64:DB:08:6F:B1:E0:9B:77:13:93:17:72:08:B6:21:C8:28:63:F8
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 01A13748837E6EDF271F6A52773B1DB1A533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 22:01:01 +0000
Manifest this update: Tue 13 Oct 2026 22:01:01 +0000
Manifest next update: Wed 14 Oct 2026 22:01:01 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: F0VbRKPXY9i9DmQ+IHivYgXofPb3vtVVhQX0VlxvRYU=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:83:7e:6e:df:27:1f:6a:52:77:3b:1d:b1:a5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Oct 13 22:01:01 2026 GMT
Not After : Oct 14 22:01:01 2026 GMT
Subject: CN=6e64db086fb1e09b771393177208b621c82863f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:9d:9b:de:0a:fe:20:7c:3c:61:cb:19:b3:
d5:25:f0:16:8c:77:60:1e:a8:64:22:3e:3a:21:80:
55:f7:f6:cc:b4:22:b1:89:ee:f6:30:41:0a:88:c4:
da:39:1b:1a:69:29:7f:5e:3c:0a:ad:5b:54:21:0d:
62:de:2e:3b:b1:31:d7:a1:3d:e7:df:f5:d3:0c:53:
81:9b:25:04:c0:ee:6f:a2:e5:dc:f6:34:a5:18:b7:
79:80:e7:9f:bf:a4:2e:70:50:b6:4a:a9:e9:7a:f4:
58:a6:b7:3e:ff:e4:f5:9a:93:a7:47:c3:60:a8:cd:
4b:5c:17:7e:45:38:43:a6:78:fd:43:d4:37:5d:6c:
e2:31:34:74:5d:9f:4c:45:72:96:64:58:33:09:9b:
c0:0c:8a:b4:23:79:ef:3d:b7:8a:5b:49:83:e6:61:
0b:7e:ec:b4:14:1d:4b:53:20:7c:13:0d:e3:71:f6:
be:75:97:f6:2b:f4:38:be:83:43:87:34:32:1d:71:
91:1d:08:54:da:83:04:37:e4:85:5d:ec:19:bb:d3:
80:b2:a3:d3:ab:92:48:80:4d:64:be:2c:f8:56:ba:
a4:74:f5:4d:5b:48:dd:f0:44:7b:98:59:ce:ab:57:
02:b5:d8:8a:31:cd:7a:c8:c7:d7:81:e1:43:ea:ba:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:64:DB:08:6F:B1:E0:9B:77:13:93:17:72:08:B6:21:C8:28:63:F8
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f3:87:9c:af:42:e7:cf:e2:f3:c4:8d:f3:64:db:1f:18:9c:
43:23:a2:89:84:18:84:9f:ac:e7:08:3a:cf:43:aa:5b:a0:17:
a7:b1:cf:4e:6d:46:44:6c:69:23:c7:b5:fd:d4:55:00:b8:c4:
6a:e9:d2:7b:bb:58:7b:30:c4:7c:18:20:5c:23:f6:51:72:5c:
6c:8b:77:68:e1:dd:b1:49:8b:22:32:91:40:15:39:8d:d5:08:
4a:51:ef:81:8d:0f:fc:c1:2d:45:7f:ee:de:9c:8f:1e:cd:7b:
79:ed:1e:ce:bf:85:1c:ed:15:db:a0:58:b8:fe:43:d5:7f:af:
7d:85:4b:37:44:20:b9:8a:8e:39:98:02:8e:6d:36:de:31:ca:
bd:d7:26:8f:9a:64:30:f4:76:e6:10:bc:6a:17:dc:aa:db:26:
a7:e2:fe:2b:cc:56:3f:74:ca:70:10:96:81:76:3d:a3:ac:20:
b9:c8:89:f8:44:a5:18:57:2d:dc:fb:97:40:33:4c:5f:4b:77:
06:1a:1b:ed:e6:fe:ac:24:84:2c:2a:b0:40:0c:3a:2f:fe:aa:
9c:fb:73:85:e0:a6:15:76:be:01:d9:d1:4a:0d:c4:44:20:49:
0a:0e:c2:97:f4:3d:d4:a0:f4:a6:b0:84:62:3c:69:7c:6c:1d:
94:4f:37:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3SIN+bt8nH2pSdzsdsaUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1
MWYyMWYwHhcNMjYxMDEzMjIwMTAxWhcNMjYxMDE0MjIwMTAxWjAzMTEwLwYDVQQD
Eyg2ZTY0ZGIwODZmYjFlMDliNzcxMzkzMTc3MjA4YjYyMWM4Mjg2M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr++dm94K/iB8PGHLGbPVJfAWjHdg
HqhkIj46IYBV9/bMtCKxie72MEEKiMTaORsaaSl/XjwKrVtUIQ1i3i47sTHXoT3n
3/XTDFOBmyUEwO5vouXc9jSlGLd5gOefv6QucFC2SqnpevRYprc+/+T1mpOnR8Ng
qM1LXBd+RThDpnj9Q9Q3XWziMTR0XZ9MRXKWZFgzCZvADIq0I3nvPbeKW0mD5mEL
fuy0FB1LUyB8Ew3jcfa+dZf2K/Q4voNDhzQyHXGRHQhU2oMEN+SFXewZu9OAsqPT
q5JIgE1kviz4VrqkdPVNW0jd8ER7mFnOq1cCtdiKMc16yMfXgeFD6rp5yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5k2whvseCbdxOTF3IItiHIKGP4MB8GA1UdIwQY
MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt
YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5
LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPOHnK9C
58/i88SN82TbHxicQyOiiYQYhJ+s5wg6z0OqW6AXp7HPTm1GRGxpI8e1/dRVALjE
aunSe7tYezDEfBggXCP2UXJcbIt3aOHdsUmLIjKRQBU5jdUISlHvgY0P/MEtRX/u
3pyPHs17ee0ezr+FHO0V26BYuP5D1X+vfYVLN0QguYqOOZgCjm023jHKvdcmj5pk
MPR25hC8ahfcqtsmp+L+K8xWP3TKcBCWgXY9o6wguciJ+ESlGFct3PuXQDNMX0t3
Bhob7eb+rCSELCqwQAw6L/6qnPtzheCmFXa+AdnRSg3ERCBJCg7Cl/Q91KD0prCE
YjxpfGwdlE83YQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 03:15:08 2026 by rpki-client