Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: SdSAliskUoGrceaiBzU7xF/Owf+1a0i+vw/w0C0LKEc=
Subject key identifier: FF:26:65:64:91:E1:A6:DB:47:11:A2:EF:F5:FA:5A:64:F5:BD:F8:EC
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 01A1770340C40C86DE10A14E8726B3B03D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 07:01:04 +0000
Manifest this update: Mon 26 Oct 2026 07:01:04 +0000
Manifest next update: Tue 27 Oct 2026 07:01:04 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: 8xsnZ19YxFrGB/l70OG8aBchKrEudYMx2B1d1unhUMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:40:c4:0c:86:de:10:a1:4e:87:26:b3:b0:3d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Oct 26 07:01:04 2026 GMT
Not After : Oct 27 07:01:04 2026 GMT
Subject: CN=ff26656491e1a6db4711a2eff5fa5a64f5bdf8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:c4:b3:ca:a1:f3:4b:75:cd:56:58:e4:be:
fd:f1:39:d4:cb:bf:0e:80:62:0c:30:10:3c:c6:bc:
e6:24:e5:45:69:b2:bf:5a:79:df:5a:73:72:33:8e:
28:7f:30:c4:89:f4:e3:72:22:20:b0:a7:1e:71:3a:
70:59:c4:fd:40:3b:3f:2d:0d:e3:7a:d9:bd:ff:08:
9d:35:8e:f4:fb:6a:d3:9e:61:1a:53:7d:50:24:78:
59:dd:d1:01:93:b7:5b:57:b8:2d:05:9b:99:5e:b4:
86:60:e1:1f:d5:52:5a:50:18:b8:58:b7:8e:7e:a8:
6f:af:78:a7:db:1a:72:df:be:41:7e:69:51:8b:e1:
b3:54:6a:e7:71:12:b3:d0:e0:82:c4:bc:9d:df:4a:
6d:6f:e4:06:03:60:50:cf:e5:79:a0:df:ed:79:9d:
31:06:ae:5a:eb:f6:bd:4f:f2:b4:3b:62:36:b8:2e:
f5:87:f6:42:4f:13:55:f4:bf:1f:5c:88:4e:f7:85:
e2:37:d3:ae:ec:20:2a:02:fc:e9:39:0c:65:4e:b1:
a4:9e:4a:ed:a2:99:ed:d7:ff:f1:d2:53:78:e1:f2:
12:08:2c:41:f7:5e:92:19:e1:c7:b6:b2:b2:4c:74:
3f:23:f6:23:3e:00:7c:6a:c4:02:ea:30:dc:5e:79:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:26:65:64:91:E1:A6:DB:47:11:A2:EF:F5:FA:5A:64:F5:BD:F8:EC
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4f:5b:31:ee:bd:8c:47:c0:0b:f6:a7:cb:2e:49:de:3e:17:
9f:a4:5b:30:74:71:c9:8c:38:d9:dd:00:80:96:bd:c7:03:a1:
ac:52:62:2e:cb:be:97:b0:73:10:1f:e5:5d:85:e9:4c:92:52:
cd:da:6e:0b:0f:d3:07:fc:37:53:b1:46:bb:ed:6d:a1:74:a2:
31:28:49:97:72:24:65:73:f9:5d:31:fd:72:73:be:b9:0c:31:
63:4e:79:71:38:94:cf:d5:ed:a5:b2:92:d8:37:e9:d0:07:76:
f4:b0:e3:9e:34:5c:62:95:16:89:f9:3f:60:67:23:cc:a9:ba:
55:73:79:b6:cc:ca:ae:0d:77:3f:e4:47:60:f8:13:54:9f:03:
a7:e7:01:12:73:1e:89:03:75:e4:c9:f1:4e:8e:07:3b:13:3c:
cb:a3:5e:90:53:73:4d:b1:ee:f8:57:0a:24:b9:45:3f:cc:d8:
1b:2c:7f:79:9b:f8:5f:e5:3e:ff:f6:8e:22:1b:57:14:e7:a1:
e2:34:16:1e:fd:50:a2:c3:89:08:d9:c5:47:90:ea:a7:10:d6:
4b:e4:40:7e:8b:e6:18:32:67:f0:53:ae:18:c3:c1:48:e4:0c:
79:30:b3:30:fc:3e:08:11:a8:e3:c7:64:47:00:f3:5c:85:05:
ec:39:e3:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3A0DEDIbeEKFOhyazsD1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl
MDgxOTUwHhcNMjYxMDI2MDcwMTA0WhcNMjYxMDI3MDcwMTA0WjAzMTEwLwYDVQQD
EyhmZjI2NjU2NDkxZTFhNmRiNDcxMWEyZWZmNWZhNWE2NGY1YmRmOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLzEs8qh80t1zVZY5L798TnUy78O
gGIMMBA8xrzmJOVFabK/WnnfWnNyM44ofzDEifTjciIgsKcecTpwWcT9QDs/LQ3j
etm9/widNY70+2rTnmEaU31QJHhZ3dEBk7dbV7gtBZuZXrSGYOEf1VJaUBi4WLeO
fqhvr3in2xpy375BfmlRi+GzVGrncRKz0OCCxLyd30ptb+QGA2BQz+V5oN/teZ0x
Bq5a6/a9T/K0O2I2uC71h/ZCTxNV9L8fXIhO94XiN9Ou7CAqAvzpOQxlTrGknkrt
opnt1//x0lN44fISCCxB916SGeHHtrKyTHQ/I/YjPgB8asQC6jDcXnnbtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8mZWSR4abbRxGi7/X6WmT1vfjsMB8GA1UdIwQY
MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt
ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl
LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE9bMe69
jEfAC/anyy5J3j4Xn6RbMHRxyYw42d0AgJa9xwOhrFJiLsu+l7BzEB/lXYXpTJJS
zdpuCw/TB/w3U7FGu+1toXSiMShJl3IkZXP5XTH9cnO+uQwxY055cTiUz9XtpbKS
2Dfp0Ad29LDjnjRcYpUWifk/YGcjzKm6VXN5tszKrg13P+RHYPgTVJ8Dp+cBEnMe
iQN15MnxTo4HOxM8y6NekFNzTbHu+FcKJLlFP8zYGyx/eZv4X+U+//aOIhtXFOeh
4jQWHv1QosOJCNnFR5DqpxDWS+RAfovmGDJn8FOuGMPBSOQMeTCzMPw+CBGo48dk
RwDzXIUF7DnjXQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:03:43 2026 by rpki-client