Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
File: XfSth7gyLMlJFI4NdmIc6oNYpoU.mft (raw, json)
Hash identifier: KyuyhnptOLxX4+x7G5NU3jIiR6Hdi2xZng2uvnM0upY=
Subject key identifier: 3C:30:0D:04:BE:2A:89:DF:13:B9:C6:17:ED:62:8F:1F:F9:49:30:60
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 01A180E23E469FD75387E031E15D6F7768B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
Manifest number: 02B6
Signing time: Wed 28 Oct 2026 05:01:12 +0000
Manifest this update: Wed 28 Oct 2026 05:01:12 +0000
Manifest next update: Thu 29 Oct 2026 05:01:12 +0000
Files and hashes: 1: XfSth7gyLMlJFI4NdmIc6oNYpoU.crl (hash: AeqJnBO6pW6zSqDlaRxys9JehIOUrQavFz5uJ/T61/4=)
2: hlSTINC_KpLJH_012cszF50XrrM.roa (hash: R9LXujjJX9A3v2Y9QXZNY393BmFuvvM/3QjbC/Pbq0E=)
3: wi4pwq_pbwyf-RifkawT_5o4jbY.roa (hash: QtIyVI0mDcZKu2N+GCjxkT9Lyx1XzVHsblRr7n1YzG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:3e:46:9f:d7:53:87:e0:31:e1:5d:6f:77:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: Oct 28 05:01:12 2026 GMT
Not After : Oct 29 05:01:12 2026 GMT
Subject: CN=3c300d04be2a89df13b9c617ed628f1ff9493060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:d5:e0:6c:c3:b0:0e:27:50:48:cf:90:1b:
7c:2b:e1:ba:50:74:26:b3:c4:97:81:f1:dc:da:85:
41:7c:72:51:c1:d9:74:84:52:5d:aa:32:a7:fd:45:
cf:a0:48:cd:6c:79:57:41:bb:a2:e4:f0:75:f2:68:
6e:6f:6a:3a:bc:11:d4:03:a0:02:c7:44:f3:4b:fb:
05:37:c7:b1:9c:92:7e:cc:54:a8:32:9f:dd:d5:54:
fe:e1:81:f3:72:79:a9:bd:70:90:b8:d3:5c:ee:94:
ff:fc:e8:39:89:68:db:fa:9f:e0:6d:1f:d3:5b:ec:
92:f0:1d:db:78:96:5b:11:bb:76:1a:fc:48:64:61:
1d:91:c6:09:5c:0d:ff:f0:41:c6:55:f3:64:13:89:
58:1a:24:f9:73:cb:69:1d:f5:04:22:a5:95:ef:a0:
fe:63:66:e8:27:30:b6:21:09:ac:bd:bd:55:90:1d:
8f:2b:72:80:c4:16:3a:d9:af:e0:84:ea:63:be:59:
f1:ae:a8:44:9d:08:f7:a4:7b:9e:63:af:c8:ae:b2:
26:0c:69:12:78:4f:40:d6:ed:21:e0:dd:19:5b:18:
52:16:23:54:f9:35:70:29:a2:30:e5:af:ef:ca:e0:
ad:9e:cf:20:2f:28:89:4e:7c:b1:9a:36:ce:5f:ba:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:0D:04:BE:2A:89:DF:13:B9:C6:17:ED:62:8F:1F:F9:49:30:60
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ed:be:bf:91:dc:de:88:d2:02:97:0e:f6:e7:09:17:b8:a7:
6e:d0:51:94:6e:59:92:8b:36:9d:f5:5c:95:c9:a5:d7:e0:e8:
f2:d6:b7:06:61:f6:ba:12:8a:54:83:af:ef:f3:fd:d4:08:21:
90:4d:4f:f6:f5:1f:ce:b7:42:33:6d:7a:4e:b5:b8:9b:af:18:
1e:fa:ce:e2:ed:79:66:cf:5a:32:82:b1:28:0e:fb:d8:88:90:
99:88:a8:5f:24:8d:c6:d4:7a:b0:50:a6:49:c9:f2:68:a5:ef:
38:f9:77:58:45:e3:0c:dc:92:4c:db:12:09:7d:41:bd:66:18:
68:c1:89:14:53:b5:72:92:30:09:b8:50:e8:c6:f3:83:21:74:
60:a1:73:8c:47:a3:77:a2:54:df:23:df:3a:ff:89:bb:17:26:
0a:1f:1d:ef:ac:26:62:64:70:32:b2:b4:ce:07:b8:71:72:32:
5f:1b:1b:19:e1:39:9e:a4:d7:8f:0a:f9:00:f6:97:cc:df:95:
0a:db:e9:0e:53:99:f7:86:55:23:d4:60:84:7b:38:02:1e:1f:
02:cd:03:c4:26:20:1a:c9:7d:41:bf:48:db:56:f3:42:ba:a0:
94:38:e5:70:1a:ba:47:59:c6:f2:6f:a0:07:b1:ab:75:09:1c:
cb:f2:c5:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4j5Gn9dTh+Ax4V1vd2i5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjRhZDg3YjgzMjJjYzk0OTE0OGUwZDc2NjIxY2VhODM1
OGE2ODUwHhcNMjYxMDI4MDUwMTEyWhcNMjYxMDI5MDUwMTEyWjAzMTEwLwYDVQQD
EygzYzMwMGQwNGJlMmE4OWRmMTNiOWM2MTdlZDYyOGYxZmY5NDkzMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27bV4GzDsA4nUEjPkBt8K+G6UHQm
s8SXgfHc2oVBfHJRwdl0hFJdqjKn/UXPoEjNbHlXQbui5PB18mhub2o6vBHUA6AC
x0TzS/sFN8exnJJ+zFSoMp/d1VT+4YHzcnmpvXCQuNNc7pT//Og5iWjb+p/gbR/T
W+yS8B3beJZbEbt2GvxIZGEdkcYJXA3/8EHGVfNkE4lYGiT5c8tpHfUEIqWV76D+
Y2boJzC2IQmsvb1VkB2PK3KAxBY62a/ghOpjvlnxrqhEnQj3pHueY6/IrrImDGkS
eE9A1u0h4N0ZWxhSFiNU+TVwKaIw5a/vyuCtns8gLyiJTnyxmjbOX7o+UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwwDQS+KonfE7nGF+1ijx/5STBgMB8GA1UdIwQY
MBaAFF30rYe4MizJSRSODXZiHOqDWKaFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZTdGg3Z3lMTWxKRkk0TmRtSWM2b05ZcG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81YmE4YTMtNjQ0OS00NWIyLTg0Mjkt
MTI1MmJmODAxZjIzLzEvWGZTdGg3Z3lMTWxKRkk0TmRtSWM2b05ZcG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81YmE4YTMtNjQ0OS00NWIyLTg0MjktMTI1MmJmODAxZjIz
LzEvWGZTdGg3Z3lMTWxKRkk0TmRtSWM2b05ZcG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbO2+v5Hc
3ojSApcO9ucJF7inbtBRlG5Zkos2nfVclcml1+Do8ta3BmH2uhKKVIOv7/P91Agh
kE1P9vUfzrdCM216TrW4m68YHvrO4u15Zs9aMoKxKA772IiQmYioXySNxtR6sFCm
ScnyaKXvOPl3WEXjDNySTNsSCX1BvWYYaMGJFFO1cpIwCbhQ6MbzgyF0YKFzjEej
d6JU3yPfOv+JuxcmCh8d76wmYmRwMrK0zge4cXIyXxsbGeE5nqTXjwr5APaXzN+V
CtvpDlOZ94ZVI9RghHs4Ah4fAs0DxCYgGsl9Qb9I21bzQrqglDjlcBq6R1nG8m+g
B7GrdQkcy/LFoQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:13:32 2026 by rpki-client