Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: phCdRtL1OBhhKB/LRACoFkixs7sf6oskugkvwBYuKNQ=
Subject key identifier: 97:4D:7B:CA:19:50:F0:08:68:A6:B8:B6:D5:74:CC:BF:C4:A1:08:82
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 01A13C6E5FAD53B79C1B59E92F07CA7383B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 08BD
Signing time: Wed 14 Oct 2026 22:00:28 +0000
Manifest this update: Wed 14 Oct 2026 22:00:28 +0000
Manifest next update: Thu 15 Oct 2026 22:00:28 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: DgFFDtXlmaux4u+3WPGZ8NbA3jdum3xwfGKh/4EGZg4=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:5f:ad:53:b7:9c:1b:59:e9:2f:07:ca:73:83:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Oct 14 22:00:28 2026 GMT
Not After : Oct 15 22:00:28 2026 GMT
Subject: CN=974d7bca1950f00868a6b8b6d574ccbfc4a10882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:56:e3:d6:f3:1f:6a:a8:69:3d:c8:fb:fb:
31:7f:7c:e2:e0:31:ea:55:66:77:fe:e9:ed:b2:75:
eb:74:5d:79:f7:70:ab:59:4f:1d:0d:7e:6d:f7:d9:
77:9a:9e:9c:e5:c5:4d:df:c0:f8:0d:e8:ed:f5:32:
14:9b:8a:ff:84:47:a2:cc:ce:84:74:de:bb:fe:77:
16:e6:59:e0:a0:31:68:e8:13:ea:39:b0:66:f4:0e:
a3:c1:1e:24:b1:36:53:af:4f:c8:00:f3:3a:25:c6:
b4:4e:53:83:2d:77:a2:76:d5:a6:4e:9e:11:e2:f9:
a1:fe:7c:d9:1a:1d:3c:1a:d0:f0:eb:1e:1d:8f:d6:
6c:3e:67:17:ed:70:e0:25:8e:2d:3a:2e:1a:a0:6b:
3e:9c:1d:45:47:4a:d2:99:47:01:df:96:56:cc:09:
9e:79:43:34:72:a0:69:ef:91:b3:59:28:7e:19:70:
4f:04:22:ea:fc:0c:7e:15:c1:3b:0e:eb:0b:17:d7:
40:b0:4e:ee:dd:52:22:14:9c:6e:cf:88:42:b1:fc:
a9:01:3e:0e:07:6d:d6:0f:3b:5d:f6:3e:ff:b6:e7:
14:2a:87:f7:10:ae:40:45:1c:60:1c:25:53:32:66:
dd:3e:ba:06:d3:26:19:f1:1f:cc:4f:64:67:20:7f:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4D:7B:CA:19:50:F0:08:68:A6:B8:B6:D5:74:CC:BF:C4:A1:08:82
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9d:83:3a:59:38:49:c2:3c:97:4e:43:e1:e9:23:a9:56:68:
77:37:58:95:91:2d:05:50:9e:1e:80:c4:cc:2b:b5:ed:af:8b:
56:ca:83:1f:23:50:8e:5f:7c:c1:a4:6f:e7:df:aa:cf:ee:31:
46:89:3d:51:a7:46:3a:9b:bd:7a:2d:82:aa:99:70:c1:25:99:
ab:74:56:b4:f9:66:c2:68:a4:d1:9f:54:8d:8d:b0:54:32:85:
74:6a:d0:39:f8:8f:7f:03:de:57:f5:66:45:6e:fe:99:91:e7:
83:d7:ae:fa:cf:61:7c:98:92:ec:a1:a6:47:58:e5:d5:16:66:
94:1a:94:46:e1:96:b1:43:76:43:81:21:29:ef:61:a9:d1:e8:
00:24:1b:ec:93:5d:37:66:c2:2d:d1:dc:4b:20:4f:6f:a4:d0:
3d:80:84:56:26:cb:e8:56:dc:b5:a3:37:f6:1b:67:b1:aa:36:
19:4c:ac:a6:9c:c7:39:d7:2c:52:ae:fc:76:e5:da:f7:90:5d:
0d:82:da:a5:cd:dc:bc:a2:22:f9:04:0d:a5:85:b5:4f:68:11:
61:87:fb:b5:e1:08:4f:1a:a8:77:18:2a:5a:b8:04:38:9f:5e:
7b:42:96:f1:76:5a:5c:7a:24:24:7a:38:d0:c0:0f:aa:d5:74:
07:1b:e5:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8bl+tU7ecG1npLwfKc4O5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi
ODljOTUwHhcNMjYxMDE0MjIwMDI4WhcNMjYxMDE1MjIwMDI4WjAzMTEwLwYDVQQD
Eyg5NzRkN2JjYTE5NTBmMDA4NjhhNmI4YjZkNTc0Y2NiZmM0YTEwODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHVW49bzH2qoaT3I+/sxf3zi4DHq
VWZ3/untsnXrdF1593CrWU8dDX5t99l3mp6c5cVN38D4Dejt9TIUm4r/hEeizM6E
dN67/ncW5lngoDFo6BPqObBm9A6jwR4ksTZTr0/IAPM6Jca0TlODLXeidtWmTp4R
4vmh/nzZGh08GtDw6x4dj9ZsPmcX7XDgJY4tOi4aoGs+nB1FR0rSmUcB35ZWzAme
eUM0cqBp75GzWSh+GXBPBCLq/Ax+FcE7DusLF9dAsE7u3VIiFJxuz4hCsfypAT4O
B23WDztd9j7/tucUKof3EK5ARRxgHCVTMmbdProG0yYZ8R/MT2RnIH+RRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdNe8oZUPAIaKa4ttV0zL/EoQiCMB8GA1UdIwQY
MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt
Mjc1NTBiMjE5NTA3LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3
LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM52DOlk4
ScI8l05D4ekjqVZodzdYlZEtBVCeHoDEzCu17a+LVsqDHyNQjl98waRv59+qz+4x
Rok9UadGOpu9ei2CqplwwSWZq3RWtPlmwmik0Z9UjY2wVDKFdGrQOfiPfwPeV/Vm
RW7+mZHng9eu+s9hfJiS7KGmR1jl1RZmlBqURuGWsUN2Q4EhKe9hqdHoACQb7JNd
N2bCLdHcSyBPb6TQPYCEVibL6FbctaM39htnsao2GUysppzHOdcsUq78duXa95Bd
DYLapc3cvKIi+QQNpYW1T2gRYYf7teEITxqodxgqWrgEOJ9ee0KW8XZaXHokJHo4
0MAPqtV0Bxvl4w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:31:32 2026 by rpki-client