Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: k05asZzsRjaFPsBbmQuSn8Xv8SuLF6MmGTqz2iBKQOE=
Subject key identifier: CA:F8:17:1D:AB:A9:A3:72:E3:E3:43:5A:D5:BC:B2:3A:22:09:5C:5B
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01A10ADDFE7AAD8FA0F1DC95B2CFAA122982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 07:01:23 +0000
Manifest this update: Mon 05 Oct 2026 07:01:23 +0000
Manifest next update: Tue 06 Oct 2026 07:01:23 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: 1T2YcBxRyGCoFkTq6oGSImYOUJ+oVUOIcQWm5IB2Gyc=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:dd:fe:7a:ad:8f:a0:f1:dc:95:b2:cf:aa:12:29:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Oct 5 07:01:23 2026 GMT
Not After : Oct 6 07:01:23 2026 GMT
Subject: CN=caf8171daba9a372e3e3435ad5bcb23a22095c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cf:e8:93:00:0b:33:a8:ce:e3:16:84:51:db:
40:4c:b5:a0:b5:53:7d:3a:99:f7:5e:81:7c:86:7e:
a7:61:c2:c4:05:92:c8:8f:ee:b6:08:77:ee:6a:1c:
8a:57:f1:55:f3:79:97:1a:7f:c9:ec:bc:ea:f5:cc:
0e:9f:64:17:a9:74:6f:09:66:ee:55:3e:b7:08:22:
1e:bd:57:49:ae:21:d4:da:78:be:62:80:f9:11:dc:
d0:27:99:8f:6c:f3:18:72:7a:4e:0d:26:b8:be:e8:
6d:e1:59:95:27:f7:2b:66:01:ff:bb:53:e8:fd:a5:
83:ad:68:9d:6d:da:0b:b8:58:b2:a4:84:1d:a3:6b:
8c:31:c9:30:f1:08:3d:a4:e1:69:a2:ce:8b:fc:12:
3d:25:58:4a:20:31:7b:35:36:f2:04:dd:fa:33:e6:
51:59:21:50:28:1e:51:12:69:ba:00:a1:e5:19:32:
6f:93:e6:47:3f:a5:fa:da:24:c1:d1:1e:b1:4c:a9:
d0:a9:23:f0:5c:f4:32:a3:1e:1c:7e:cf:df:9b:49:
d2:bb:53:d8:99:dc:db:79:83:9d:51:56:77:09:2b:
27:81:d0:f9:68:b0:7b:ba:31:0a:bb:14:f7:cf:a4:
3b:c3:c6:d3:7f:e9:a7:be:39:d9:8e:26:b6:fc:3b:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F8:17:1D:AB:A9:A3:72:E3:E3:43:5A:D5:BC:B2:3A:22:09:5C:5B
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:4b:b7:b0:70:9e:ef:5a:38:2b:2c:02:5e:4d:2a:e0:0a:
af:13:99:4c:22:55:f8:a5:01:09:89:7f:30:e5:82:5b:5e:52:
14:a5:e0:20:dd:fa:a9:11:a7:3d:8e:22:62:66:ff:27:1b:75:
ca:6b:77:e5:e8:51:13:82:e4:3a:f0:26:af:3a:08:b4:d1:90:
ac:ef:83:7d:0d:dc:2d:61:69:4d:cc:5d:63:37:f7:c0:b0:bf:
58:f2:58:6c:10:a5:66:70:47:38:3a:13:2b:11:2d:a3:79:9c:
d6:a4:45:d8:d2:da:e3:14:d8:52:d5:da:10:b3:0b:3f:9b:45:
e4:f2:b7:26:b4:ad:bf:94:be:e8:d1:17:c6:07:bf:a6:25:00:
7b:41:3a:c3:98:ae:05:06:8a:16:71:1b:5d:70:74:2a:ff:33:
3d:21:42:49:29:62:0f:82:db:bf:b9:8b:2e:4f:f5:7f:6c:00:
e8:cf:f4:5f:35:02:8c:05:2f:7e:9b:15:57:04:3b:1f:d0:b8:
58:22:00:20:8b:34:6f:11:16:9f:f3:32:f7:81:4f:ba:08:22:
98:a2:2e:9a:30:c2:37:29:a6:b0:b7:06:47:fc:ee:df:31:96:
87:f8:3e:76:c1:55:a2:27:57:e9:3c:c9:10:c3:4e:fa:42:bd:
a6:31:35:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEK3f56rY+g8dyVss+qEimCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy
YTBmZDgwHhcNMjYxMDA1MDcwMTIzWhcNMjYxMDA2MDcwMTIzWjAzMTEwLwYDVQQD
EyhjYWY4MTcxZGFiYTlhMzcyZTNlMzQzNWFkNWJjYjIzYTIyMDk1YzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9c/okwALM6jO4xaEUdtATLWgtVN9
Opn3XoF8hn6nYcLEBZLIj+62CHfuahyKV/FV83mXGn/J7Lzq9cwOn2QXqXRvCWbu
VT63CCIevVdJriHU2ni+YoD5EdzQJ5mPbPMYcnpODSa4vuht4VmVJ/crZgH/u1Po
/aWDrWidbdoLuFiypIQdo2uMMckw8Qg9pOFpos6L/BI9JVhKIDF7NTbyBN36M+ZR
WSFQKB5REmm6AKHlGTJvk+ZHP6X62iTB0R6xTKnQqSPwXPQyox4cfs/fm0nSu1PY
mdzbeYOdUVZ3CSsngdD5aLB7ujEKuxT3z6Q7w8bTf+mnvjnZjia2/Dv4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr4Fx2rqaNy4+NDWtW8sjoiCVxbMB8GA1UdIwQY
MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt
OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi
LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdZLt7Bw
nu9aOCssAl5NKuAKrxOZTCJV+KUBCYl/MOWCW15SFKXgIN36qRGnPY4iYmb/Jxt1
ymt35ehRE4LkOvAmrzoItNGQrO+DfQ3cLWFpTcxdYzf3wLC/WPJYbBClZnBHODoT
KxEto3mc1qRF2NLa4xTYUtXaELMLP5tF5PK3JrStv5S+6NEXxge/piUAe0E6w5iu
BQaKFnEbXXB0Kv8zPSFCSSliD4Lbv7mLLk/1f2wA6M/0XzUCjAUvfpsVVwQ7H9C4
WCIAIIs0bxEWn/My94FPuggimKIumjDCNymmsLcGR/zu3zGWh/g+dsFVoidX6TzJ
EMNO+kK9pjE1fA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:40:26 2026 by rpki-client