Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File: Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier: nGtyOtL1/8EiqJ3UQ4oLK5JoCkeSvWJEHBdW49WfMqw=
Subject key identifier: 11:FE:F4:FE:20:00:C3:48:BC:27:7F:A7:60:F4:10:CC:6B:DF:22:3C
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 01A174023BD71C44286694A5E84C4B0BD212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number: 1AC2
Signing time: Sun 25 Oct 2026 17:01:05 +0000
Manifest this update: Sun 25 Oct 2026 17:01:05 +0000
Manifest next update: Mon 26 Oct 2026 17:01:05 +0000
Files and hashes: 1: 4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa (hash: +7cyCy/NdgEzdqXIvMYXBG6PX6qWy1L3JHGAtDMeS30=)
2: IVJmRlo_N7uujpHOQ1PY0oGuwPE.roa (hash: HId6QIpCvryq7pzO2cSpzlsjWi8B2cu2NyD1dmCRRqc=)
3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: K1kX46zMn6tGmLNDH14Gp3QIktlGDi4XtukwCRqTD1c=)
4: YU7DQQUK3WS2GF1fwXGzic4CVRE.roa (hash: 5Kaf0g8MgSwJ+dws3X5JQrcvkrcgCUQzsjR1OpBYhtw=)
5: cJHyNL6n_BStyxq8HQ3hJvNAMq4.roa (hash: V4roFS8vi9SUabC+vIIX/fQMu7+uk5jkREg7A/YHemc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:02:3b:d7:1c:44:28:66:94:a5:e8:4c:4b:0b:d2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Oct 25 17:01:05 2026 GMT
Not After : Oct 26 17:01:05 2026 GMT
Subject: CN=11fef4fe2000c348bc277fa760f410cc6bdf223c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:23:38:37:4f:da:99:40:44:65:50:da:87:
aa:e7:c1:6f:0d:e6:a9:c1:d6:f8:80:d1:26:6e:e3:
bd:b8:1e:81:e7:61:a2:50:0a:50:02:04:7c:48:c1:
60:ad:e1:e4:c4:8a:c1:74:6e:b5:0a:49:2f:ab:31:
4e:e1:ea:82:16:0f:97:91:b4:29:68:40:53:77:c5:
be:99:3e:a6:dc:f6:e8:74:50:a5:da:36:93:10:77:
55:9e:91:61:13:97:2c:20:0c:66:46:10:58:9e:d9:
31:62:82:89:6c:a6:c9:5f:46:1d:dd:06:66:2c:89:
22:a2:bf:5e:de:73:99:a4:92:74:b3:d6:0e:08:70:
af:18:db:57:df:1a:26:32:4b:fb:af:f1:4b:f4:5c:
a5:fa:49:8c:83:26:0d:81:d9:eb:15:a4:72:0a:60:
44:08:9f:8e:87:b7:bd:a8:c6:6e:1a:64:bb:40:65:
09:d9:79:42:12:c1:2b:d9:d9:85:1b:89:62:18:b9:
e9:9e:a5:04:3f:83:ef:53:68:a4:4b:51:f0:fb:e6:
b7:49:88:aa:05:3d:30:43:2c:55:91:8e:fa:e0:9d:
98:7f:2d:b2:c9:8b:f0:87:aa:cd:09:6a:e8:6e:92:
a2:95:cf:8c:4b:e2:47:c4:1f:09:51:98:f9:bf:3e:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:F4:FE:20:00:C3:48:BC:27:7F:A7:60:F4:10:CC:6B:DF:22:3C
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8b:14:c9:eb:20:50:d3:e8:84:47:bd:5e:b3:6e:51:94:bb:
e7:32:23:05:9e:84:04:a2:be:6e:f6:35:0d:60:00:3f:79:1d:
45:b1:75:fb:fe:27:be:65:5b:49:d3:d3:92:ba:31:50:62:a2:
20:c6:05:22:f6:02:b6:c2:1f:5f:a3:f8:f0:8e:59:8c:cf:21:
d3:e1:3a:07:8a:a4:05:34:69:ec:72:76:36:ed:e1:8d:40:be:
68:ee:e9:3d:90:a7:1e:15:12:5b:11:19:99:0d:b9:17:ef:a2:
c6:0c:3f:9a:9e:60:0b:3b:58:c2:54:21:d9:17:46:6c:2c:55:
5f:4f:36:5f:83:48:4b:90:12:e4:f5:c8:4d:64:10:07:3e:c6:
1b:db:8f:13:88:78:94:5d:a4:c3:c1:66:b3:1d:58:8c:7c:7a:
ef:56:78:ba:8f:48:1f:68:4b:99:44:0a:6f:ae:08:5d:93:7d:
ae:f5:39:1e:eb:0a:9e:36:d2:2c:a9:27:5b:e7:fc:d5:d5:d9:
06:ac:5b:f2:ae:4d:e0:34:58:45:97:3c:28:59:26:2f:28:10:
a8:da:79:63:70:e5:88:b9:68:f0:8e:d0:26:11:41:b7:0f:cf:
7d:0b:c5:3d:0b:48:21:47:b7:bf:d0:eb:c0:68:c0:db:4e:85:
52:8f:20:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0AjvXHEQoZpSl6ExLC9ISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQzYzBiNjQxNGM5Yzg2ZTNjOTRhNzE0ZGZiMjY5Y2I1
ZTkxNjkwHhcNMjYxMDI1MTcwMTA1WhcNMjYxMDI2MTcwMTA1WjAzMTEwLwYDVQQD
EygxMWZlZjRmZTIwMDBjMzQ4YmMyNzdmYTc2MGY0MTBjYzZiZGYyMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnwjODdP2plARGVQ2oeq58FvDeap
wdb4gNEmbuO9uB6B52GiUApQAgR8SMFgreHkxIrBdG61CkkvqzFO4eqCFg+XkbQp
aEBTd8W+mT6m3PbodFCl2jaTEHdVnpFhE5csIAxmRhBYntkxYoKJbKbJX0Yd3QZm
LIkior9e3nOZpJJ0s9YOCHCvGNtX3xomMkv7r/FL9Fyl+kmMgyYNgdnrFaRyCmBE
CJ+Oh7e9qMZuGmS7QGUJ2XlCEsEr2dmFG4liGLnpnqUEP4PvU2ikS1Hw++a3SYiq
BT0wQyxVkY764J2Yfy2yyYvwh6rNCWrobpKilc+MS+JHxB8JUZj5vz6AEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBH+9P4gAMNIvCd/p2D0EMxr3yI8MB8GA1UdIwQY
MBaAFF6NPAtkFMnIbjyUpxTfsmnLXpFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYzM1MzEtODJmOC00YjRkLWI1OTAt
MjM0MzA5NTA2MDljLzEvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lYzM1MzEtODJmOC00YjRkLWI1OTAtMjM0MzA5NTA2MDlj
LzEvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYsUyesg
UNPohEe9XrNuUZS75zIjBZ6EBKK+bvY1DWAAP3kdRbF1+/4nvmVbSdPTkroxUGKi
IMYFIvYCtsIfX6P48I5ZjM8h0+E6B4qkBTRp7HJ2Nu3hjUC+aO7pPZCnHhUSWxEZ
mQ25F++ixgw/mp5gCztYwlQh2RdGbCxVX082X4NIS5AS5PXITWQQBz7GG9uPE4h4
lF2kw8Fmsx1YjHx671Z4uo9IH2hLmUQKb64IXZN9rvU5HusKnjbSLKknW+f81dXZ
Bqxb8q5N4DRYRZc8KFkmLygQqNp5Y3DliLlo8I7QJhFBtw/PfQvFPQtIIUe3v9Dr
wGjA206FUo8glw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:39:45 2026 by rpki-client