Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: V2rZ+6UQTb9rf/LHe94zC65jxME+VwhU0LkcWeNl7xQ=
Subject key identifier: D6:D7:0D:89:DC:A9:D6:AA:EC:A5:D8:8E:2F:E2:FF:59:05:D6:EA:59
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01A12353E4D5E4A7E857C9660A35837821C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0E2D
Signing time: Sat 10 Oct 2026 01:01:02 +0000
Manifest this update: Sat 10 Oct 2026 01:01:02 +0000
Manifest next update: Sun 11 Oct 2026 01:01:02 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: gBQTub3T2esN4JbWtWNHxf6LZFIHP+J1i8pU4ZBt7MI=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:53:e4:d5:e4:a7:e8:57:c9:66:0a:35:83:78:21:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Oct 10 01:01:02 2026 GMT
Not After : Oct 11 01:01:02 2026 GMT
Subject: CN=d6d70d89dca9d6aaeca5d88e2fe2ff5905d6ea59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:c0:1c:3d:63:db:ea:3f:e8:13:9a:4d:f7:
ba:74:f4:7c:40:64:2a:94:42:c3:7d:14:04:48:23:
a1:02:65:06:34:ce:24:96:a6:42:70:08:0e:84:c1:
05:52:5c:7e:69:8d:ff:9d:7b:f0:db:b2:b2:b5:51:
20:73:a6:ea:2d:d9:9d:55:0f:6a:85:60:19:b7:a0:
e8:9b:59:df:33:08:0e:d6:53:7f:95:5f:de:38:e7:
e7:49:9d:73:bb:c8:5a:86:33:5c:92:28:51:54:25:
be:ac:13:b7:6a:b5:3e:1d:da:0d:4f:58:44:ae:c6:
50:89:e4:6e:b8:45:b6:0a:55:b1:0c:db:ae:d7:29:
1e:d2:8d:25:c3:65:78:7b:a5:71:a3:b2:88:8d:6d:
6d:7c:11:98:28:06:13:0c:ba:37:fd:e9:ca:d2:5a:
90:42:28:39:9e:a0:16:f3:02:f1:66:5a:85:64:f2:
9a:f6:67:f0:64:2e:67:2e:ae:5d:b4:da:c4:fc:5c:
f1:1a:a1:a3:2a:66:d7:be:ba:85:35:68:3b:dd:b6:
d0:63:cc:0b:64:9c:4a:78:77:cf:96:64:ed:5d:c8:
55:59:17:d6:dd:7b:7c:b3:9c:3f:da:21:ea:fc:22:
be:f7:98:8f:20:a1:41:0f:2a:33:80:4f:e2:23:1d:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:0D:89:DC:A9:D6:AA:EC:A5:D8:8E:2F:E2:FF:59:05:D6:EA:59
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2f:94:83:c1:6f:f5:19:73:94:a4:c6:90:b6:ac:0d:ef:e9:
dc:5a:25:06:2b:36:5d:88:a1:b0:f2:25:bb:24:b1:48:f9:c3:
67:c0:3c:95:a6:d1:e6:2b:67:3d:25:c5:a9:9d:7e:b2:32:0c:
0f:de:a6:d9:63:54:d1:96:da:7b:e0:67:fb:b7:85:75:f2:7b:
ee:02:15:03:39:0b:ac:ff:16:8d:96:74:16:71:23:b2:e5:ad:
db:d8:71:ca:d1:cd:f8:05:5f:43:db:28:78:64:a5:16:14:79:
e5:ce:26:47:6e:4d:8d:a0:3e:4f:0b:e0:cc:ab:e2:63:09:3d:
62:4e:87:ce:53:39:36:74:b0:fb:b7:35:9c:85:79:aa:65:d5:
40:25:8a:e4:e0:16:d5:58:a1:08:66:45:99:38:f0:e9:ee:13:
2b:65:2c:a5:cd:57:ac:39:88:a7:17:0e:71:9c:ac:ba:1d:cb:
bc:7a:74:c4:55:9f:a3:1f:86:74:b6:04:3a:aa:fa:34:bf:6d:
87:a7:84:21:3f:20:2f:b3:44:2d:ac:4f:12:d9:5c:68:2f:01:
02:d4:9e:0e:93:12:3c:92:32:22:03:0a:fe:e0:33:51:7e:cf:
71:96:a6:cf:eb:ba:4d:a8:37:38:05:f2:24:d8:b9:84:67:24:
e3:f0:8b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjU+TV5KfoV8lmCjWDeCHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl
NmRiMGUwHhcNMjYxMDEwMDEwMTAyWhcNMjYxMDExMDEwMTAyWjAzMTEwLwYDVQQD
EyhkNmQ3MGQ4OWRjYTlkNmFhZWNhNWQ4OGUyZmUyZmY1OTA1ZDZlYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdHAHD1j2+o/6BOaTfe6dPR8QGQq
lELDfRQESCOhAmUGNM4klqZCcAgOhMEFUlx+aY3/nXvw27KytVEgc6bqLdmdVQ9q
hWAZt6Dom1nfMwgO1lN/lV/eOOfnSZ1zu8hahjNckihRVCW+rBO3arU+HdoNT1hE
rsZQieRuuEW2ClWxDNuu1yke0o0lw2V4e6Vxo7KIjW1tfBGYKAYTDLo3/enK0lqQ
Qig5nqAW8wLxZlqFZPKa9mfwZC5nLq5dtNrE/FzxGqGjKmbXvrqFNWg73bbQY8wL
ZJxKeHfPlmTtXchVWRfW3Xt8s5w/2iHq/CK+95iPIKFBDyozgE/iIx2t9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbXDYncqdaq7KXYji/i/1kF1upZMB8GA1UdIwQY
MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt
ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm
LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAti+Ug8Fv
9RlzlKTGkLasDe/p3FolBis2XYihsPIluySxSPnDZ8A8labR5itnPSXFqZ1+sjIM
D96m2WNU0Zbae+Bn+7eFdfJ77gIVAzkLrP8WjZZ0FnEjsuWt29hxytHN+AVfQ9so
eGSlFhR55c4mR25NjaA+TwvgzKviYwk9Yk6HzlM5NnSw+7c1nIV5qmXVQCWK5OAW
1VihCGZFmTjw6e4TK2Uspc1XrDmIpxcOcZysuh3LvHp0xFWfox+GdLYEOqr6NL9t
h6eEIT8gL7NELaxPEtlcaC8BAtSeDpMSPJIyIgMK/uAzUX7PcZamz+u6Tag3OAXy
JNi5hGck4/CLgA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 08:22:58 2026 by rpki-client