Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: OyeZ4nbCSrmGzp+hUrvkpxoL9eIk0uEgq+grfE11rkg=
Subject key identifier: A2:C6:33:81:4E:93:5E:E5:3C:B0:D4:CE:1B:C1:E1:71:C7:9C:E5:F5
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019DB38FEA4EEC3D0BB54E81A0A3C38C3E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 15D8
Signing time: Wed 22 Apr 2026 05:00:46 +0000
Manifest this update: Wed 22 Apr 2026 05:00:46 +0000
Manifest next update: Thu 23 Apr 2026 05:00:46 +0000
Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: iZzBtG39XUvSQrsr7RfGAmKMhmjySXmXkAkDpQrW2O0=)
3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:8f:ea:4e:ec:3d:0b:b5:4e:81:a0:a3:c3:8c:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Apr 22 05:00:46 2026 GMT
Not After : Apr 23 05:00:46 2026 GMT
Subject: CN=a2c633814e935ee53cb0d4ce1bc1e171c79ce5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:30:5f:48:86:ee:92:cc:49:9f:53:91:ec:
4a:aa:fd:cd:ab:65:8f:06:42:7f:3c:82:0a:83:e7:
c1:51:a8:39:6a:6e:2c:82:50:95:fe:2f:9d:34:38:
2a:98:55:e4:2c:a8:44:c6:27:4c:0a:6e:1b:cb:3a:
fa:91:1e:ea:cb:94:0a:38:20:b9:90:c1:dd:c5:64:
d8:34:3c:df:09:f4:3c:4a:b7:f9:b9:81:5b:13:13:
05:d9:0e:12:5e:13:9e:5e:cf:5a:f8:cf:e8:7b:f7:
8c:45:48:4d:fc:5e:e0:64:55:eb:3a:31:ae:2f:be:
05:b8:a6:5e:4d:b2:e7:5d:b8:3e:72:0b:5b:6c:8c:
1a:5f:f3:18:27:12:09:e4:60:a3:0c:29:87:8c:ea:
ed:9b:be:6d:58:70:0b:c6:27:d6:a4:92:0c:0f:f8:
d1:ea:e6:8d:6d:a1:a3:a7:25:9e:5c:f7:de:a2:b9:
e5:b9:68:18:4b:27:22:94:87:9c:13:ed:95:a9:de:
76:9e:e1:4f:36:e5:f6:9e:b2:42:c3:54:b1:4d:19:
10:2e:d6:8f:db:0a:cb:1c:3e:66:73:b6:7a:15:51:
37:2d:14:69:c8:5c:33:e2:f4:36:ec:69:31:6e:ca:
1c:65:12:d0:7f:01:8c:de:fa:46:ae:c6:e5:9e:f4:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C6:33:81:4E:93:5E:E5:3C:B0:D4:CE:1B:C1:E1:71:C7:9C:E5:F5
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d7:11:39:4b:8d:ce:b6:3f:f9:da:37:81:f1:1f:f3:8b:a9:
f3:ad:e9:c0:b9:1b:60:26:ba:9d:0a:e1:eb:9a:0d:07:1b:f7:
4b:8d:5b:85:43:f6:7d:87:ed:4a:87:c3:99:be:12:ad:ff:a8:
43:9e:68:76:67:2f:fd:23:66:ee:c3:05:8e:d0:5a:e7:7f:1f:
10:17:5c:70:66:c8:ac:f1:db:4b:c9:9e:bc:99:5d:90:e6:f0:
d5:b0:4f:c9:69:78:b0:2b:0d:c1:2d:9e:08:ee:d9:06:ce:a2:
b6:b3:cc:d4:61:5c:86:34:4e:16:b4:8e:03:88:da:78:6f:e4:
9d:4a:bc:64:4f:f6:6a:df:5e:27:18:42:18:52:d5:c3:ec:b1:
28:58:ac:3f:19:5e:83:45:27:46:83:cb:09:e9:6d:d7:57:25:
10:56:dd:77:8e:82:b1:c7:08:00:23:cc:b4:c7:31:5a:c9:a1:
90:4a:0f:c9:cc:9d:19:91:fc:cc:a6:03:3d:84:ee:05:e0:f2:
8d:d1:3b:03:00:7e:62:92:bc:0e:ac:ee:ff:50:f4:94:81:d4:
d1:a9:50:b1:5f:89:0f:55:a5:bd:e5:20:d5:b0:57:ca:c3:89:
a9:f6:da:9c:fd:0b:d0:ea:14:0d:38:9b:63:f6:98:f3:3c:9f:
5e:a7:32:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2zj+pO7D0LtU6BoKPDjD5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzcwYTQ4YjU5ZmI4MTE0OTVmMTFjNDk3MzQ0ODJmMjJi
MWEzOTIwHhcNMjYwNDIyMDUwMDQ2WhcNMjYwNDIzMDUwMDQ2WjAzMTEwLwYDVQQD
EyhhMmM2MzM4MTRlOTM1ZWU1M2NiMGQ0Y2UxYmMxZTE3MWM3OWNlNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58UwX0iG7pLMSZ9TkexKqv3Nq2WP
BkJ/PIIKg+fBUag5am4sglCV/i+dNDgqmFXkLKhExidMCm4byzr6kR7qy5QKOCC5
kMHdxWTYNDzfCfQ8Srf5uYFbExMF2Q4SXhOeXs9a+M/oe/eMRUhN/F7gZFXrOjGu
L74FuKZeTbLnXbg+cgtbbIwaX/MYJxIJ5GCjDCmHjOrtm75tWHALxifWpJIMD/jR
6uaNbaGjpyWeXPfeornluWgYSycilIecE+2Vqd52nuFPNuX2nrJCw1SxTRkQLtaP
2wrLHD5mc7Z6FVE3LRRpyFwz4vQ27GkxbsocZRLQfwGM3vpGrsblnvQGpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLGM4FOk17lPLDUzhvB4XHHnOX1MB8GA1UdIwQY
MBaAFF03Cki1n7gRSV8RxJc0SC8isaOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2Ut
ZTI3MjAxMzAyNmI0LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2UtZTI3MjAxMzAyNmI0
LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtcROUuN
zrY/+do3gfEf84up863pwLkbYCa6nQrh65oNBxv3S41bhUP2fYftSofDmb4Srf+o
Q55odmcv/SNm7sMFjtBa538fEBdccGbIrPHbS8mevJldkObw1bBPyWl4sCsNwS2e
CO7ZBs6itrPM1GFchjROFrSOA4jaeG/knUq8ZE/2at9eJxhCGFLVw+yxKFisPxle
g0UnRoPLCelt11clEFbdd46CsccIACPMtMcxWsmhkEoPycydGZH8zKYDPYTuBeDy
jdE7AwB+YpK8Dqzu/1D0lIHU0alQsV+JD1WlveUg1bBXysOJqfbanP0L0OoUDTib
Y/aY8zyfXqcymg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 10:59:22 2026 by rpki-client