Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.mft
File: Xa3aQXncLVRALigpKnNXRSNPMXY.mft (raw, json)
Hash identifier: 1d48j6j6Dor+nEckWT8pS9vxuDYDJVbAm5KEqKLVM5Q=
Subject key identifier: F1:02:84:40:B8:0E:03:D6:79:AE:43:CC:AE:1E:41:FE:6B:11:A0:B4
Authority key identifier: 5D:AD:DA:41:79:DC:2D:54:40:2E:28:29:2A:73:57:45:23:4F:31:76
Certificate issuer: /CN=5dadda4179dc2d54402e28292a735745234f3176
Certificate serial: 01A1A7EFB845F0F811CFCD77DB412DF652F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xa3aQXncLVRALigpKnNXRSNPMXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.mft
Manifest number: 62
Signing time: Wed 04 Nov 2026 19:01:07 +0000
Manifest this update: Wed 04 Nov 2026 19:01:07 +0000
Manifest next update: Thu 05 Nov 2026 19:01:07 +0000
Files and hashes: 1: 2Da_HNdbpt1g8RClhoc6y5NOyXw.asa (hash: e7ratRtzKkgYwQ8J6M1al0MUrV4bWTHMDvlaN0crirI=)
2: Xa3aQXncLVRALigpKnNXRSNPMXY.crl (hash: dzNl118kJYeWupo6rVhuJCVdQgcwS6jTivxcEDaFpAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xa3aQXncLVRALigpKnNXRSNPMXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:ef:b8:45:f0:f8:11:cf:cd:77:db:41:2d:f6:52:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dadda4179dc2d54402e28292a735745234f3176
Validity
Not Before: Nov 4 19:01:07 2026 GMT
Not After : Nov 5 19:01:07 2026 GMT
Subject: CN=f1028440b80e03d679ae43ccae1e41fe6b11a0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:70:81:e5:a5:f9:75:e8:4f:13:9a:b3:13:
01:46:43:2a:f7:ad:24:ef:3f:c1:c5:2b:cf:01:22:
9d:b3:13:12:66:c6:72:61:0b:43:37:93:bd:cc:00:
aa:37:10:4f:c4:5e:6a:e0:b7:7c:50:37:e2:ff:b6:
42:f7:dc:fa:aa:ae:57:c6:e1:bc:b8:5c:2f:f7:18:
09:19:ab:3a:96:63:01:7a:67:ab:b1:e1:bd:ff:60:
9e:ac:eb:4e:e9:87:49:d8:b5:3e:f7:29:98:46:97:
51:b1:f1:c4:ed:ce:cf:c5:cb:2d:98:e3:b2:d8:eb:
d6:e4:0a:7d:f4:fc:6b:db:c6:b3:9d:7e:7e:8c:e7:
41:80:8d:e3:cf:dc:1c:7e:85:35:31:b3:3f:21:f1:
3c:d7:02:35:09:c3:15:0b:a7:2e:28:21:ce:31:f3:
5a:45:b7:04:2f:92:fd:48:68:42:cc:b3:88:b9:c4:
e0:03:8c:f8:03:bb:b1:bf:6b:33:01:1b:cf:b0:61:
81:a7:b4:c9:18:89:e1:3e:b7:1e:f5:61:eb:17:65:
f6:fd:93:2c:17:0d:7b:4d:c7:b0:12:48:eb:6c:35:
aa:98:5e:da:62:c6:68:17:3d:60:8a:89:29:6a:94:
03:6d:50:36:1a:bb:46:03:22:86:15:60:03:bf:c3:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:84:40:B8:0E:03:D6:79:AE:43:CC:AE:1E:41:FE:6B:11:A0:B4
X509v3 Authority Key Identifier:
keyid:5D:AD:DA:41:79:DC:2D:54:40:2E:28:29:2A:73:57:45:23:4F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xa3aQXncLVRALigpKnNXRSNPMXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/fc8aac-53fb-4205-81db-9464b3f27a2d/1/Xa3aQXncLVRALigpKnNXRSNPMXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:60:df:e3:09:26:83:75:06:1a:d0:9c:59:09:65:44:72:f6:
76:87:e9:7c:ce:73:bb:d1:54:00:70:66:bc:cc:87:04:16:d7:
f0:77:7f:e5:b8:a4:fa:47:ea:ac:d7:0f:70:1c:70:71:3b:45:
5b:55:6d:4c:66:ce:d0:71:33:02:b4:e0:eb:a2:1e:73:0e:94:
09:dc:a9:fc:32:84:be:42:a8:41:2a:ff:49:63:b1:bb:60:c2:
17:54:03:e0:c8:d8:5e:1f:3b:a1:da:27:af:06:ef:cd:78:52:
8c:92:12:ab:05:7a:b5:b8:18:55:ec:ff:5c:1c:51:93:03:ba:
4c:9d:75:66:c9:c5:55:e3:6d:a3:e0:29:12:50:56:ae:18:da:
37:f6:79:a6:4d:d2:3b:02:21:48:74:d5:37:41:e8:3c:bf:8d:
0f:24:f4:ce:7f:ac:87:83:1e:d7:8a:dc:bc:e7:83:a9:02:7e:
b9:c5:0b:2f:4e:67:1e:c6:0e:bd:9b:14:62:bd:57:f5:8c:08:
12:96:a6:01:17:cb:de:47:c5:e2:db:67:f2:3e:1d:40:00:c5:
29:bc:cf:58:11:d4:8c:a0:ad:3f:45:fe:30:7c:86:ec:4b:83:
a4:af:88:9a:68:4c:08:1f:e9:61:d8:6c:31:e8:9f:b3:c4:4c:
c6:80:cf:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGn77hF8PgRz81320Et9lLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYWRkYTQxNzlkYzJkNTQ0MDJlMjgyOTJhNzM1NzQ1MjM0
ZjMxNzYwHhcNMjYxMTA0MTkwMTA3WhcNMjYxMTA1MTkwMTA3WjAzMTEwLwYDVQQD
EyhmMTAyODQ0MGI4MGUwM2Q2NzlhZTQzY2NhZTFlNDFmZTZiMTFhMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZxwgeWl+XXoTxOasxMBRkMq960k
7z/BxSvPASKdsxMSZsZyYQtDN5O9zACqNxBPxF5q4Ld8UDfi/7ZC99z6qq5XxuG8
uFwv9xgJGas6lmMBemerseG9/2CerOtO6YdJ2LU+9ymYRpdRsfHE7c7PxcstmOOy
2OvW5Ap99Pxr28aznX5+jOdBgI3jz9wcfoU1MbM/IfE81wI1CcMVC6cuKCHOMfNa
RbcEL5L9SGhCzLOIucTgA4z4A7uxv2szARvPsGGBp7TJGInhPrce9WHrF2X2/ZMs
Fw17TcewEkjrbDWqmF7aYsZoFz1giokpapQDbVA2GrtGAyKGFWADv8O17wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEChEC4DgPWea5DzK4eQf5rEaC0MB8GA1UdIwQY
MBaAFF2t2kF53C1UQC4oKSpzV0UjTzF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGEzYVFYbmNMVlJBTGlncEtuTlhSU05QTVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mYzhhYWMtNTNmYi00MjA1LTgxZGIt
OTQ2NGIzZjI3YTJkLzEvWGEzYVFYbmNMVlJBTGlncEtuTlhSU05QTVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mYzhhYWMtNTNmYi00MjA1LTgxZGItOTQ2NGIzZjI3YTJk
LzEvWGEzYVFYbmNMVlJBTGlncEtuTlhSU05QTVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGDf4wkm
g3UGGtCcWQllRHL2dofpfM5zu9FUAHBmvMyHBBbX8Hd/5bik+kfqrNcPcBxwcTtF
W1VtTGbO0HEzArTg66Iecw6UCdyp/DKEvkKoQSr/SWOxu2DCF1QD4MjYXh87odon
rwbvzXhSjJISqwV6tbgYVez/XBxRkwO6TJ11ZsnFVeNto+ApElBWrhjaN/Z5pk3S
OwIhSHTVN0HoPL+NDyT0zn+sh4Me14rcvOeDqQJ+ucULL05nHsYOvZsUYr1X9YwI
EpamARfL3kfF4ttn8j4dQADFKbzPWBHUjKCtP0X+MHyG7EuDpK+ImmhMCB/pYdhs
Meifs8RMxoDPPw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:31 2026 by rpki-client