Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: 33SIPtAAjmfsK7hBCciezHxC9BMsJx533c5cwXjFhiI=
Subject key identifier: 31:BC:EF:B4:74:9D:74:11:9D:AC:7A:BC:77:D1:58:4F:ED:31:22:D2
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 01A174DD9EEBCFF8B8FBFA2B1B43A0A8F5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 1AC0
Signing time: Sun 25 Oct 2026 21:00:43 +0000
Manifest this update: Sun 25 Oct 2026 21:00:43 +0000
Manifest next update: Mon 26 Oct 2026 21:00:43 +0000
Files and hashes: 1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: 6TeTnr6GHLLgsN7oV9lw60tVW5fJvCHKdZSgyZ8b+60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:9e:eb:cf:f8:b8:fb:fa:2b:1b:43:a0:a8:f5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Oct 25 21:00:43 2026 GMT
Not After : Oct 26 21:00:43 2026 GMT
Subject: CN=31bcefb4749d74119dac7abc77d1584fed3122d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:91:93:94:77:27:4f:85:32:0a:53:bc:a7:
da:5d:fe:b6:05:d1:c6:c4:92:50:0f:f3:d9:26:d6:
49:0e:39:dc:17:4c:a8:54:6c:67:6d:70:72:fe:3f:
e5:77:56:ae:84:45:43:9d:a4:fd:3e:80:e1:75:f8:
9f:96:ae:6f:e6:ae:a3:bf:ac:86:7e:dd:2b:3f:8a:
97:73:16:e8:37:fd:d4:c8:88:e0:f4:f8:85:ad:0d:
6f:f5:86:e6:9b:7a:db:6a:5d:4d:a3:17:0d:87:e5:
4b:a7:21:89:e2:09:bc:ee:c4:99:c5:19:24:b0:85:
07:c7:6f:f1:9d:3b:c3:3f:16:d3:81:50:98:9d:31:
bb:b3:7d:d9:6e:c5:7b:26:ff:fc:1e:20:4c:3b:35:
05:1f:a9:61:33:31:53:32:71:03:7e:40:f7:36:95:
89:0f:b4:0b:fc:44:96:fa:8b:4b:25:f3:4a:df:cb:
2c:1e:29:95:5c:10:cc:62:91:e3:7c:0d:6c:8a:c8:
68:f0:4b:e2:17:d0:75:d7:85:8a:3b:b6:6d:de:c0:
1d:ce:64:ba:25:6c:a4:59:50:75:1f:d7:18:de:3e:
43:07:c6:7e:81:24:bf:58:33:a9:45:38:cf:a8:9b:
d0:1f:ec:11:c7:b5:af:e1:d5:bc:92:c3:39:a7:d1:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BC:EF:B4:74:9D:74:11:9D:AC:7A:BC:77:D1:58:4F:ED:31:22:D2
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:66:d2:f7:87:be:97:9d:8f:00:68:14:c3:1e:8a:f6:8c:53:
47:b8:24:de:f0:86:c0:0e:c0:62:94:1e:3f:aa:c5:5e:4c:42:
46:49:35:32:81:d5:1f:48:de:51:9d:69:8e:97:b4:60:e0:ad:
fc:b4:db:31:34:59:09:cf:a6:ba:26:cd:4a:02:54:88:49:40:
23:7e:e4:51:2d:ba:af:62:ac:61:1c:6e:f2:7c:ed:ed:36:63:
f9:15:60:a1:65:a8:3f:59:9a:3e:4b:98:da:63:3f:e8:04:7c:
16:52:69:db:88:a4:9a:29:59:73:9f:f1:e5:8e:a7:f6:f3:63:
17:05:8c:2d:09:ca:e2:cf:99:d6:44:6a:a9:27:2c:f5:03:cc:
20:58:f6:a9:82:8b:b4:4b:44:a8:7b:cc:87:37:50:8e:3f:80:
5c:0f:4e:ad:b2:f7:9e:f5:ec:3c:1e:02:0c:40:05:38:ec:bc:
e0:84:0e:c1:62:39:bc:c3:89:dd:87:ad:74:6d:67:15:36:95:
9c:bd:17:f4:2e:8a:ff:8a:e0:52:ad:83:4c:4b:3c:6e:5a:cc:
eb:cc:08:94:b3:95:53:45:6d:6b:be:55:78:b8:b4:30:45:5a:
c4:4b:24:1f:49:23:bb:56:d8:9f:bc:5e:69:f1:27:cc:b1:bc:
63:d2:80:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF03Z7rz/i4+/orG0OgqPWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjk1M2RiNDg0MDRiMGM2NmExNWYwZGE2ZWZhN2ZhYzBh
OTM2OWUwHhcNMjYxMDI1MjEwMDQzWhcNMjYxMDI2MjEwMDQzWjAzMTEwLwYDVQQD
EygzMWJjZWZiNDc0OWQ3NDExOWRhYzdhYmM3N2QxNTg0ZmVkMzEyMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPSRk5R3J0+FMgpTvKfaXf62BdHG
xJJQD/PZJtZJDjncF0yoVGxnbXBy/j/ld1auhEVDnaT9PoDhdfiflq5v5q6jv6yG
ft0rP4qXcxboN/3UyIjg9PiFrQ1v9Ybmm3rbal1NoxcNh+VLpyGJ4gm87sSZxRkk
sIUHx2/xnTvDPxbTgVCYnTG7s33ZbsV7Jv/8HiBMOzUFH6lhMzFTMnEDfkD3NpWJ
D7QL/ESW+otLJfNK38ssHimVXBDMYpHjfA1sisho8EviF9B114WKO7Zt3sAdzmS6
JWykWVB1H9cY3j5DB8Z+gSS/WDOpRTjPqJvQH+wRx7Wv4dW8ksM5p9GWrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDG877R0nXQRnax6vHfRWE/tMSLSMB8GA1UdIwQY
MBaAFF1pU9tIQEsMZqFfDabvp/rAqTaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQt
ZmEyZmI5NGRhMWEyLzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MzZmZGUtYTAyZC00OGY1LWE3NWQtZmEyZmI5NGRhMWEy
LzEvWFdsVDIwaEFTd3htb1Y4TnB1LW4tc0NwTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2bS94e+
l52PAGgUwx6K9oxTR7gk3vCGwA7AYpQeP6rFXkxCRkk1MoHVH0jeUZ1pjpe0YOCt
/LTbMTRZCc+muibNSgJUiElAI37kUS26r2KsYRxu8nzt7TZj+RVgoWWoP1maPkuY
2mM/6AR8FlJp24ikmilZc5/x5Y6n9vNjFwWMLQnK4s+Z1kRqqScs9QPMIFj2qYKL
tEtEqHvMhzdQjj+AXA9OrbL3nvXsPB4CDEAFOOy84IQOwWI5vMOJ3YetdG1nFTaV
nL0X9C6K/4rgUq2DTEs8blrM68wIlLOVU0Vta75VeLi0MEVaxEskH0kju1bYn7xe
afEnzLG8Y9KAKQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 01:42:54 2026 by rpki-client