Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
File: xcidUmDLNP27s7wlv0rbr0zcaKA.mft (raw, json)
Hash identifier: OB/uvESGmfhrq0OmnUYiXUWmGcBWTi0nT7yTL/36iHQ=
Subject key identifier: 44:E7:93:59:6F:5C:1D:8A:39:F6:C5:F4:EA:31:67:49:92:44:73:41
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Certificate issuer: /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial: 01A17F989C8A338A1A7DDEAFB1B3CBA3771F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
Manifest number: 0A83
Signing time: Tue 27 Oct 2026 23:01:10 +0000
Manifest this update: Tue 27 Oct 2026 23:01:10 +0000
Manifest next update: Wed 28 Oct 2026 23:01:10 +0000
Files and hashes: 1: JD_hILTLs5WiN-GGz9cnjaMmPmg.asa (hash: w3ngbPPlSEh0i5ZlPs9dJQ8lVMYy1vGnqLwn37EOyHY=)
2: xcidUmDLNP27s7wlv0rbr0zcaKA.crl (hash: mjcyi5FG68yTOyYnz9atxGYeTvaXUPk+cb6FD1fzwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:9c:8a:33:8a:1a:7d:de:af:b1:b3:cb:a3:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Validity
Not Before: Oct 27 23:01:10 2026 GMT
Not After : Oct 28 23:01:10 2026 GMT
Subject: CN=44e793596f5c1d8a39f6c5f4ea31674992447341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:f2:82:e9:6b:12:de:39:e7:27:d1:bb:9b:
ed:c2:e2:38:e8:a4:12:17:59:0f:7b:da:5f:94:d2:
a5:d8:06:f3:e9:5b:cd:85:1f:fa:eb:29:31:fe:a8:
03:dd:b4:04:7c:11:29:f4:03:45:fa:ce:9a:90:e2:
07:52:02:aa:fd:34:5e:93:3a:7a:77:d6:86:1a:aa:
4a:5c:1f:03:f0:8e:ee:1a:49:f6:9e:ee:da:bf:c6:
93:de:e6:17:2a:df:15:99:4a:1a:7f:49:ee:60:1f:
5f:8f:30:c4:62:92:f1:da:48:7c:d7:e4:b3:18:03:
e1:39:9d:43:9a:3e:dc:79:99:78:92:49:d9:85:5d:
89:8a:a2:ff:be:11:bc:89:f2:7f:e3:69:e3:e2:1c:
90:60:9f:f0:93:a7:f6:a0:e0:a2:f7:d2:ad:2f:03:
a8:e2:f1:b8:80:1c:ec:24:df:8f:c7:b8:70:0e:57:
a0:cc:ca:2d:d9:22:2b:6c:56:b0:fe:d4:4b:ea:30:
64:29:dd:bb:20:12:af:bf:45:52:f9:aa:b8:22:49:
f9:0e:b2:fe:0b:04:44:1e:80:8c:c1:00:cb:70:42:
88:57:ce:15:b2:0c:a7:cb:31:e7:d1:d4:1e:15:3a:
9f:05:6c:b5:a4:f7:89:60:56:2f:2f:32:51:26:2b:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E7:93:59:6F:5C:1D:8A:39:F6:C5:F4:EA:31:67:49:92:44:73:41
X509v3 Authority Key Identifier:
keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d5:b1:66:1f:64:57:a3:27:79:a4:1e:da:ba:28:85:a0:e3:
66:65:4c:b4:dc:77:95:67:e8:82:1d:20:f4:22:22:f7:62:1b:
0c:3b:ac:33:2f:24:7c:52:50:10:7e:16:63:e9:02:d0:c7:4b:
7d:e9:1c:21:88:1e:4e:0a:56:1a:97:aa:22:91:ce:e0:87:35:
be:93:23:03:a5:f5:89:08:dc:f5:4e:2c:1e:5f:f3:01:1d:29:
dd:14:cc:9f:84:a2:40:e2:48:08:37:d5:c5:34:db:ae:74:c0:
68:dd:c6:29:9f:35:d5:7c:37:97:f8:95:f0:62:d5:3e:13:cf:
4f:79:8f:53:ff:e6:c4:05:d3:e4:2d:ad:2b:e4:66:94:88:e1:
a1:ee:b6:14:c7:01:93:ab:05:94:a0:78:63:32:83:b9:56:95:
db:c9:10:b6:42:ac:d1:82:a4:02:ff:39:1f:ad:74:9e:32:7b:
96:af:8f:ff:8e:2e:f4:d9:8a:bb:a9:fe:54:32:5d:69:37:2f:
e6:91:94:54:01:fc:c7:c1:9e:d6:4b:03:b6:03:7b:13:f5:a9:
02:2a:45:7a:6c:98:7f:a7:05:a1:aa:97:2c:4a:9c:4a:4c:e1:
21:45:e5:2b:4e:61:df:8c:ed:7f:a1:41:6c:19:8d:29:4d:99:
14:62:b7:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/mJyKM4oafd6vsbPLo3cfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Yzg5ZDUyNjBjYjM0ZmRiYmIzYmMyNWJmNGFkYmFmNGNk
YzY4YTAwHhcNMjYxMDI3MjMwMTEwWhcNMjYxMDI4MjMwMTEwWjAzMTEwLwYDVQQD
Eyg0NGU3OTM1OTZmNWMxZDhhMzlmNmM1ZjRlYTMxNjc0OTkyNDQ3MzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomfygulrEt455yfRu5vtwuI46KQS
F1kPe9pflNKl2Abz6VvNhR/66ykx/qgD3bQEfBEp9ANF+s6akOIHUgKq/TRekzp6
d9aGGqpKXB8D8I7uGkn2nu7av8aT3uYXKt8VmUoaf0nuYB9fjzDEYpLx2kh81+Sz
GAPhOZ1Dmj7ceZl4kknZhV2JiqL/vhG8ifJ/42nj4hyQYJ/wk6f2oOCi99KtLwOo
4vG4gBzsJN+Px7hwDlegzMot2SIrbFaw/tRL6jBkKd27IBKvv0VS+aq4Ikn5DrL+
CwREHoCMwQDLcEKIV84VsgynyzHn0dQeFTqfBWy1pPeJYFYvLzJRJiuC+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETnk1lvXB2KOfbF9OoxZ0mSRHNBMB8GA1UdIwQY
MBaAFMXInVJgyzT9u7O8Jb9K269M3GigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjNiMTQtNGU2ZS00YzMxLTk2YmUt
OGViY2QwOWIyYmNhLzEveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82MjNiMTQtNGU2ZS00YzMxLTk2YmUtOGViY2QwOWIyYmNh
LzEveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtWxZh9k
V6MneaQe2roohaDjZmVMtNx3lWfogh0g9CIi92IbDDusMy8kfFJQEH4WY+kC0MdL
fekcIYgeTgpWGpeqIpHO4Ic1vpMjA6X1iQjc9U4sHl/zAR0p3RTMn4SiQOJICDfV
xTTbrnTAaN3GKZ811Xw3l/iV8GLVPhPPT3mPU//mxAXT5C2tK+RmlIjhoe62FMcB
k6sFlKB4YzKDuVaV28kQtkKs0YKkAv85H610njJ7lq+P/44u9NmKu6n+VDJdaTcv
5pGUVAH8x8Ge1ksDtgN7E/WpAipFemyYf6cFoaqXLEqcSkzhIUXlK05h34ztf6FB
bBmNKU2ZFGK3Wg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:09:58 2026 by rpki-client