Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: Sjx16LNf7OMKOwjq/Or3OtQlZnAucVs8JCyVOdVh/hA=
Subject key identifier: 89:35:B3:7B:31:D8:7A:C2:DF:22:5B:E8:03:B2:8F:D6:CE:2C:64:69
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A0C3A04CB1727E84589AED661FE532F919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 085A
Signing time: Mon 21 Sep 2026 11:00:57 +0000
Manifest this update: Mon 21 Sep 2026 11:00:57 +0000
Manifest next update: Tue 22 Sep 2026 11:00:57 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: iTIqkNeWHurlEgfKlrMj334hHtCCDHy4Btc8uNGPdYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:4c:b1:72:7e:84:58:9a:ed:66:1f:e5:32:f9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Sep 21 11:00:57 2026 GMT
Not After : Sep 22 11:00:57 2026 GMT
Subject: CN=8935b37b31d87ac2df225be803b28fd6ce2c6469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:58:5f:77:70:3b:5f:b4:e9:dc:f8:11:c6:
12:a9:ad:0a:de:6c:f3:b9:0f:5b:a3:77:63:02:65:
3b:e2:25:17:cd:de:31:ab:1b:2b:39:71:85:98:36:
6d:7b:e1:74:5f:16:89:b7:d8:31:18:22:11:26:25:
cf:9d:4f:fc:c4:98:2a:04:68:67:f8:f3:ad:76:ce:
76:37:30:d9:de:e5:f1:b9:2d:61:62:c3:90:db:f7:
f6:80:72:9b:94:4f:d5:b1:b5:09:39:b5:8f:c2:6c:
f7:24:52:01:9c:31:58:b8:0a:33:31:f1:48:89:16:
3f:de:9c:68:82:94:7d:ee:49:8f:9b:a2:8b:cb:6b:
ef:15:2a:ac:5b:d5:fe:3b:07:9e:64:ed:d8:bd:92:
10:dc:ab:dc:5f:2c:95:a5:1d:14:47:12:93:36:a8:
e7:a1:1c:71:69:2b:3c:96:c4:59:eb:1c:de:c6:27:
c1:7e:82:2b:17:0f:44:09:07:df:af:58:a8:f2:6b:
eb:22:de:d1:c0:d0:b8:93:ac:1c:85:e0:47:5c:ed:
4d:19:d0:aa:0b:65:6d:36:1e:72:a3:c6:5a:a0:bc:
09:0d:f1:6b:42:d4:99:11:79:ea:fa:86:11:fe:69:
7e:1e:60:d3:17:e9:99:73:69:f6:d1:f3:16:0a:e3:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:B3:7B:31:D8:7A:C2:DF:22:5B:E8:03:B2:8F:D6:CE:2C:64:69
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:fa:bf:6c:01:07:11:bf:62:42:c6:41:89:0a:68:56:54:
cf:79:36:6f:1d:5d:17:54:69:06:b7:3d:2b:18:ad:30:05:49:
c6:f8:cf:5c:05:50:5c:3a:57:c7:69:4f:2b:d3:fb:cd:b6:a9:
12:d8:75:23:a5:8e:91:82:af:91:dc:3a:12:87:66:a9:17:8d:
7a:4f:4c:81:1f:1e:4d:60:d5:12:3f:a2:a3:c3:1d:a9:72:2c:
d1:5a:a1:45:50:50:44:76:80:8d:ee:35:28:31:5e:0f:69:c0:
77:9f:f4:82:04:f9:90:14:40:34:f1:10:de:66:89:90:31:eb:
11:12:05:83:9c:2b:65:9e:35:0f:4f:71:d3:4a:42:d5:30:37:
c7:2f:f6:3d:94:84:b3:98:6b:ac:a9:5e:23:6f:5f:5e:99:eb:
2d:6f:b7:b9:0f:12:4e:8b:50:32:cd:09:69:ea:fa:86:49:e8:
a7:09:64:88:3b:55:c2:09:19:47:a3:66:6e:20:83:f8:d5:4f:
fa:9a:c0:0d:a6:ad:ab:09:d0:54:6b:ab:4d:21:41:90:1d:18:
6a:1a:07:88:ce:94:27:7f:bb:00:9e:48:77:e6:58:b4:8c:64:
7c:cf:18:d1:12:0e:1d:83:51:6f:c6:5a:c8:90:4b:33:3e:a3:
ae:6c:0e:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoEyxcn6EWJrtZh/lMvkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjYwOTIxMTEwMDU3WhcNMjYwOTIyMTEwMDU3WjAzMTEwLwYDVQQD
Eyg4OTM1YjM3YjMxZDg3YWMyZGYyMjViZTgwM2IyOGZkNmNlMmM2NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EpYX3dwO1+06dz4EcYSqa0K3mzz
uQ9bo3djAmU74iUXzd4xqxsrOXGFmDZte+F0XxaJt9gxGCIRJiXPnU/8xJgqBGhn
+POtds52NzDZ3uXxuS1hYsOQ2/f2gHKblE/VsbUJObWPwmz3JFIBnDFYuAozMfFI
iRY/3pxogpR97kmPm6KLy2vvFSqsW9X+OweeZO3YvZIQ3KvcXyyVpR0URxKTNqjn
oRxxaSs8lsRZ6xzexifBfoIrFw9ECQffr1io8mvrIt7RwNC4k6wcheBHXO1NGdCq
C2VtNh5yo8ZaoLwJDfFrQtSZEXnq+oYR/ml+HmDTF+mZc2n20fMWCuOLfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk1s3sx2HrC3yJb6AOyj9bOLGRpMB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCv6v2wB
BxG/YkLGQYkKaFZUz3k2bx1dF1RpBrc9KxitMAVJxvjPXAVQXDpXx2lPK9P7zbap
Eth1I6WOkYKvkdw6EodmqReNek9MgR8eTWDVEj+io8MdqXIs0VqhRVBQRHaAje41
KDFeD2nAd5/0ggT5kBRANPEQ3maJkDHrERIFg5wrZZ41D09x00pC1TA3xy/2PZSE
s5hrrKleI29fXpnrLW+3uQ8STotQMs0Jaer6hknopwlkiDtVwgkZR6NmbiCD+NVP
+prADaatqwnQVGurTSFBkB0YahoHiM6UJ3+7AJ5Id+ZYtIxkfM8Y0RIOHYNRb8Za
yJBLMz6jrmwOfw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:33:46 2026 by rpki-client