Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: gjke0g4DdxrtJKqb6oHqjy2L5zPcEw3HakCHjsYdAzo=
Subject key identifier: 59:5A:CF:23:2E:ED:01:A2:B3:00:E1:5B:C7:5F:02:42:D5:39:9D:9F
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 01A17FCFA42B0CF62D7F109753689169F62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: 02DF
Signing time: Wed 28 Oct 2026 00:01:16 +0000
Manifest this update: Wed 28 Oct 2026 00:01:16 +0000
Manifest next update: Thu 29 Oct 2026 00:01:16 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: KiNMgdfJ-jED44ngYXhsk4y4eUo.roa (hash: a7w7sWRkPS/IylXEpEG2ZktzWT1XLIn8MRkkpzcobUA=)
3: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: AK59OrrPVopwSc8SNZLeJ+NxGu8ovF4XrU4rsrr+tXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:a4:2b:0c:f6:2d:7f:10:97:53:68:91:69:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Oct 28 00:01:16 2026 GMT
Not After : Oct 29 00:01:16 2026 GMT
Subject: CN=595acf232eed01a2b300e15bc75f0242d5399d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:65:7b:47:c0:8f:2a:41:89:2e:e2:c4:a0:
c5:4c:ad:a7:28:67:06:40:dc:72:3d:df:db:23:1c:
5a:e1:64:6c:7b:88:63:c9:db:22:a0:6b:4e:a8:8c:
97:37:c0:b0:10:8e:f6:db:7d:88:d6:29:ff:c7:e6:
35:0b:13:bc:0c:fe:02:82:e7:54:84:65:ef:04:a8:
2c:e4:4b:b9:89:f8:e9:31:45:fe:e0:c3:2c:7f:d5:
ab:ec:ee:bd:06:82:c5:b2:1c:2e:b9:5e:6b:5e:40:
d7:14:2f:4d:95:c7:36:5b:7e:db:2e:0c:9f:6d:69:
f1:cb:0a:34:87:c1:02:9c:a5:b2:8f:23:cb:cd:c9:
03:ff:1a:a0:28:b9:46:27:fe:17:f9:37:ad:09:43:
64:8f:9b:18:57:c7:57:e1:47:13:8f:d8:ac:b1:99:
75:39:aa:42:c3:6a:d6:6a:4f:38:c3:61:a0:42:df:
12:15:f2:ff:61:56:15:60:c1:34:b9:3a:b0:6b:50:
3f:b5:f2:9f:b7:99:1c:14:f2:66:8f:d5:70:29:95:
c6:81:0a:3b:7c:55:8b:0e:2d:ac:b7:43:c7:0e:d3:
cc:e0:11:1f:6b:c3:64:c9:15:8c:17:49:a0:e9:02:
62:50:9d:77:28:54:03:24:70:ee:de:80:6a:09:9c:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:CF:23:2E:ED:01:A2:B3:00:E1:5B:C7:5F:02:42:D5:39:9D:9F
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:c5:9b:89:3d:a2:2c:9a:fd:19:df:13:61:bf:2c:0d:7a:
d5:2a:23:3c:9a:a0:03:fc:e7:48:af:74:2a:ac:55:50:dd:56:
3c:8f:27:f4:89:4e:b6:ed:57:92:69:04:81:d3:d6:bb:4d:b6:
8e:91:77:41:79:39:4f:ca:73:b6:ad:49:f4:e9:20:42:a8:5a:
8a:8e:e1:6a:cf:85:bc:8f:10:b7:14:96:95:5e:62:77:1d:bf:
16:81:5b:ab:8f:49:31:0b:e6:22:06:03:f7:c1:9e:dd:f0:db:
3c:d1:dd:54:2a:4d:5a:31:29:18:5b:4a:46:bd:2e:5c:c6:e1:
24:ec:c7:0e:35:56:92:71:b8:cf:e5:eb:98:c5:3b:b4:7d:5b:
fb:3f:dd:c0:b3:b9:e4:bb:2c:9f:ec:a2:c0:8a:36:ee:48:10:
70:de:39:c2:e9:46:38:4d:87:88:e7:c2:9d:bc:0e:a8:48:0f:
48:cf:ad:d4:ea:18:2a:39:5d:d2:24:5d:8b:4c:f0:a1:c2:ed:
28:1a:c0:c5:01:bb:4d:54:05:8b:47:35:9e:74:11:5f:a8:7e:
bc:fe:b8:de:42:01:0c:32:78:d0:92:b8:89:5f:e6:39:9e:cb:
5b:15:66:1d:89:07:86:0a:e9:8c:ad:44:4b:61:9c:32:11:10:
76:71:9a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/z6QrDPYtfxCXU2iRafYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTM4YmIyMTBiN2MxYThmMDY2NmUwNzU5ZjQ3NWYwMDY0
ZGYxZjcwHhcNMjYxMDI4MDAwMTE2WhcNMjYxMDI5MDAwMTE2WjAzMTEwLwYDVQQD
Eyg1OTVhY2YyMzJlZWQwMWEyYjMwMGUxNWJjNzVmMDI0MmQ1Mzk5ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zlle0fAjypBiS7ixKDFTK2nKGcG
QNxyPd/bIxxa4WRse4hjydsioGtOqIyXN8CwEI72232I1in/x+Y1CxO8DP4CgudU
hGXvBKgs5Eu5ifjpMUX+4MMsf9Wr7O69BoLFshwuuV5rXkDXFC9Nlcc2W37bLgyf
bWnxywo0h8ECnKWyjyPLzckD/xqgKLlGJ/4X+TetCUNkj5sYV8dX4UcTj9issZl1
OapCw2rWak84w2GgQt8SFfL/YVYVYME0uTqwa1A/tfKft5kcFPJmj9VwKZXGgQo7
fFWLDi2st0PHDtPM4BEfa8NkyRWMF0mg6QJiUJ13KFQDJHDu3oBqCZyLyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlazyMu7QGiswDhW8dfAkLVOZ2fMB8GA1UdIwQY
MBaAFMQTi7IQt8Go8GZuB1n0dfAGTfH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUt
ZmIxZjJhYWM1NjdlLzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85ZmE1NGEtYTk4My00OTU4LWE5MmUtZmIxZjJhYWM1Njdl
LzEveEJPTHNoQzN3YWp3Wm00SFdmUjE4QVpOOGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUrFm4k9
oiya/RnfE2G/LA161SojPJqgA/znSK90KqxVUN1WPI8n9IlOtu1XkmkEgdPWu022
jpF3QXk5T8pztq1J9OkgQqhaio7has+FvI8QtxSWlV5idx2/FoFbq49JMQvmIgYD
98Ge3fDbPNHdVCpNWjEpGFtKRr0uXMbhJOzHDjVWknG4z+XrmMU7tH1b+z/dwLO5
5Lssn+yiwIo27kgQcN45wulGOE2HiOfCnbwOqEgPSM+t1OoYKjld0iRdi0zwocLt
KBrAxQG7TVQFi0c1nnQRX6h+vP643kIBDDJ40JK4iV/mOZ7LWxVmHYkHhgrpjK1E
S2GcMhEQdnGa5g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:40:12 2026 by rpki-client