Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: 2YZ745i8IC144m3qUCITCQK6yrcDB32/+DtGPVagPLs=
Subject key identifier: 8C:02:A0:9F:3A:31:91:8C:84:44:F7:9A:74:DC:1D:11:94:C3:B6:AF
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 01A12A9FBBE06A6D0F970AF84825167B9532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: 02B2
Signing time: Sun 11 Oct 2026 11:01:13 +0000
Manifest this update: Sun 11 Oct 2026 11:01:13 +0000
Manifest next update: Mon 12 Oct 2026 11:01:13 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: 0QCfPe9HwZC2ikUMS0p8MwFguFopFWpHq+PqFfTeQOk=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:bb:e0:6a:6d:0f:97:0a:f8:48:25:16:7b:95:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Oct 11 11:01:13 2026 GMT
Not After : Oct 12 11:01:13 2026 GMT
Subject: CN=8c02a09f3a31918c8444f79a74dc1d1194c3b6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:4f:3d:94:3b:21:95:66:58:71:a9:28:4a:
aa:55:1e:20:32:5b:67:ea:0a:df:4b:4f:f7:d1:8a:
70:9f:de:4e:b7:3f:9a:59:ed:15:47:59:5c:1e:47:
e9:01:6d:16:e9:80:8c:ec:cb:7f:d1:fd:49:d3:cc:
e6:d6:29:73:ed:27:b0:e9:d9:cc:16:cd:a8:39:6b:
21:be:a3:00:72:c7:22:3b:74:d1:49:02:d4:c0:d4:
62:77:bb:46:f1:c1:dd:05:2b:f2:b6:08:28:71:9b:
f2:ab:cd:b7:aa:99:71:9c:41:7c:6e:dc:17:a1:fe:
d9:bc:8e:2a:6b:41:4e:0b:33:da:2d:71:25:8b:66:
ac:f2:db:8d:54:12:1e:96:4d:8e:0b:e0:34:6e:97:
0b:09:9c:d9:f9:bd:04:a9:d8:21:98:56:ac:ae:9e:
6d:36:12:ae:45:db:6d:f9:fc:53:44:ff:08:d6:42:
1f:97:e5:44:03:dd:44:7f:15:ca:7f:6b:bc:48:7f:
01:05:c7:28:74:85:df:e7:dd:e4:fd:41:b3:44:35:
29:a6:c8:4e:39:0e:e3:1a:f8:94:99:e0:09:a2:0d:
bd:7f:79:6a:ab:8e:d4:55:20:70:2f:c9:87:bd:83:
30:39:e8:7a:d3:1e:81:92:27:48:17:53:72:03:ae:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:02:A0:9F:3A:31:91:8C:84:44:F7:9A:74:DC:1D:11:94:C3:B6:AF
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0e:6e:f4:3a:09:66:16:fe:85:54:1f:6d:40:28:b4:e1:c0:
93:b9:6f:cc:65:f3:a7:55:d7:74:7c:4a:fa:48:06:86:0b:eb:
70:79:43:01:86:74:14:e2:94:92:e9:59:e4:88:73:31:45:c2:
c2:7f:07:d1:3e:65:cd:b8:2b:29:83:01:e4:99:67:41:5c:2c:
cb:b0:3c:bd:4b:c8:2a:9f:cf:62:53:11:b8:2d:8f:11:33:c6:
e4:f7:1b:84:c6:3f:ce:c8:2c:64:09:0b:0e:d4:ca:fb:e3:fc:
c7:e1:fb:f2:f2:64:03:5b:43:1e:af:ed:1a:ad:95:26:27:89:
ac:8a:ba:81:d4:fc:a7:f1:35:1a:1a:79:aa:2e:8d:52:e6:4b:
33:c2:b4:86:26:e9:96:ac:b4:74:a1:14:bf:bc:28:e0:cb:79:
5c:9e:04:9e:61:25:4f:fd:1b:71:68:98:aa:b5:d1:0d:78:9b:
f9:56:c3:0d:1e:c7:20:e6:45:83:bc:79:7a:9e:6d:21:72:12:
43:65:2f:49:e5:3c:ab:a7:82:e2:00:ec:24:a3:95:4d:b8:b0:
a3:8e:fb:cb:de:cd:3d:c7:ba:e0:c4:19:60:00:89:11:8e:e9:
44:b4:71:9e:8e:a1:17:98:c9:73:8a:de:c2:b9:c2:60:1e:92:
41:e7:28:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqn7vgam0Plwr4SCUWe5UyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzNkN2ZiOTY3YTViNWMyMDNmNDM0YzAwZmZmMTI1MzRl
NjE3NjkwHhcNMjYxMDExMTEwMTEzWhcNMjYxMDEyMTEwMTEzWjAzMTEwLwYDVQQD
Eyg4YzAyYTA5ZjNhMzE5MThjODQ0NGY3OWE3NGRjMWQxMTk0YzNiNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix1PPZQ7IZVmWHGpKEqqVR4gMltn
6grfS0/30Ypwn95Otz+aWe0VR1lcHkfpAW0W6YCM7Mt/0f1J08zm1ilz7Sew6dnM
Fs2oOWshvqMAcsciO3TRSQLUwNRid7tG8cHdBSvytggocZvyq823qplxnEF8btwX
of7ZvI4qa0FOCzPaLXEli2as8tuNVBIelk2OC+A0bpcLCZzZ+b0EqdghmFasrp5t
NhKuRdtt+fxTRP8I1kIfl+VEA91EfxXKf2u8SH8BBccodIXf593k/UGzRDUppshO
OQ7jGviUmeAJog29f3lqq47UVSBwL8mHvYMwOeh60x6BkidIF1NyA66NwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwCoJ86MZGMhET3mnTcHRGUw7avMB8GA1UdIwQY
MBaAFF0z1/uWeltcID9DTAD/8SU05hdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80MDQzMzgtMmFjYi00MjhmLTk4ZDEt
MThiZGE1M2M1ODQyLzEvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi80MDQzMzgtMmFjYi00MjhmLTk4ZDEtMThiZGE1M2M1ODQy
LzEvWFRQWC01WjZXMXdnUDBOTUFQX3hKVFRtRjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZg5u9DoJ
Zhb+hVQfbUAotOHAk7lvzGXzp1XXdHxK+kgGhgvrcHlDAYZ0FOKUkulZ5IhzMUXC
wn8H0T5lzbgrKYMB5JlnQVwsy7A8vUvIKp/PYlMRuC2PETPG5PcbhMY/zsgsZAkL
DtTK++P8x+H78vJkA1tDHq/tGq2VJieJrIq6gdT8p/E1Ghp5qi6NUuZLM8K0hibp
lqy0dKEUv7wo4Mt5XJ4EnmElT/0bcWiYqrXRDXib+VbDDR7HIOZFg7x5ep5tIXIS
Q2UvSeU8q6eC4gDsJKOVTbiwo477y97NPce64MQZYACJEY7pRLRxno6hF5jJc4re
wrnCYB6SQecofg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:24:11 2026 by rpki-client