Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: qlKfEnmWajJ3rBei6rdLIMM/ZyHXDBGcg1Kz0YioFnY=
Subject key identifier: CB:B8:6A:48:9A:D4:7B:EB:41:FE:60:EA:A5:AD:65:59:B5:E2:1A:B8
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 01A12654986AE9D383705CA68EBA7B060C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 1989
Signing time: Sat 10 Oct 2026 15:00:40 +0000
Manifest this update: Sat 10 Oct 2026 15:00:40 +0000
Manifest next update: Sun 11 Oct 2026 15:00:40 +0000
Files and hashes: 1: Oanj9HZBO6pjmAia4pctaEcwILk.roa (hash: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: P17wzGU2ddDt1b/X3nbKWdC+VSbPZN2D7fNM0GJ/KZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:54:98:6a:e9:d3:83:70:5c:a6:8e:ba:7b:06:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Oct 10 15:00:40 2026 GMT
Not After : Oct 11 15:00:40 2026 GMT
Subject: CN=cbb86a489ad47beb41fe60eaa5ad6559b5e21ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:cc:e2:7e:e3:dc:d8:67:4c:1b:e9:5b:b6:
84:01:63:7c:e3:13:fd:1a:8e:3c:b5:78:38:c9:11:
05:d9:1e:a8:f4:9f:2d:79:f2:2a:18:bd:be:96:93:
b8:99:da:73:ef:83:92:1e:52:da:20:8f:02:0c:2b:
a1:31:07:02:2d:b7:57:93:37:3f:98:85:13:cf:57:
28:e8:a9:6e:24:ae:e6:08:15:7e:09:ea:93:ce:a4:
ac:13:0e:c5:0e:6e:8a:5b:60:ce:45:76:d6:8b:55:
cd:d5:cc:0e:3f:45:6b:33:89:30:84:cf:f6:f0:7a:
63:e8:09:bc:9a:75:05:48:bb:bb:82:4a:92:f0:8b:
44:2d:86:5f:5f:4a:3b:7d:2c:f5:37:03:05:14:05:
19:a4:61:3c:7b:61:88:f4:67:29:73:dd:d6:33:4b:
e1:fc:af:c7:53:06:91:c9:32:19:03:f4:bb:a9:5c:
21:e0:96:06:a0:3f:f2:1c:95:be:b3:88:ae:c6:fd:
86:7b:62:e9:1f:c5:7b:88:d2:8a:5b:f9:27:a2:0c:
de:95:48:67:57:3b:24:c3:8b:73:47:39:fa:20:fd:
a0:0a:e1:0e:33:8d:1e:d4:80:53:c1:3b:34:4f:dd:
ac:48:5e:e2:a3:8f:0a:6e:b9:e8:9d:ed:f9:89:b8:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:6A:48:9A:D4:7B:EB:41:FE:60:EA:A5:AD:65:59:B5:E2:1A:B8
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:17:1a:cf:f6:d1:70:f1:72:8c:d9:7d:68:0d:a3:84:a8:
7a:a9:c3:b7:74:68:0f:5b:b3:63:f1:48:3d:18:4b:74:e1:59:
c1:42:d0:59:f8:53:cd:18:da:e6:cd:bf:c5:e6:61:71:02:97:
ef:93:c7:1f:c2:1f:d0:76:57:6a:6a:30:fc:39:17:ee:70:ab:
33:83:55:a6:c6:bd:d5:ff:7a:02:3c:25:65:e1:4e:82:b6:c5:
7b:95:ee:e9:1b:90:e7:85:73:20:7b:c9:1d:2d:51:20:d3:55:
f7:8f:27:d9:27:62:6e:99:ed:62:06:8f:d5:9a:35:38:13:19:
c3:c7:44:18:d8:8d:32:11:a6:35:48:8b:37:7b:2e:82:84:7f:
18:8d:83:90:17:00:53:53:9a:d2:c6:ab:83:fe:93:0d:c6:20:
b1:4e:07:2e:96:02:cd:06:e7:40:4e:20:46:f7:1c:52:65:64:
ec:26:6d:3d:ac:09:3b:85:27:56:d7:0a:8c:42:82:37:78:af:
6c:c8:41:c0:ac:67:36:02:43:3b:c5:0e:22:bd:41:78:e7:56:
33:bb:b4:ce:14:70:c9:91:f3:50:b5:84:81:f9:53:72:25:b9:
57:b4:0f:c9:9a:1e:ac:5f:e6:31:8d:6c:c9:89:50:38:b8:b4:
1d:94:2d:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmVJhq6dODcFymjrp7BgxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy
ZjU4ZTIwHhcNMjYxMDEwMTUwMDQwWhcNMjYxMDExMTUwMDQwWjAzMTEwLwYDVQQD
EyhjYmI4NmE0ODlhZDQ3YmViNDFmZTYwZWFhNWFkNjU1OWI1ZTIxYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSTM4n7j3NhnTBvpW7aEAWN84xP9
Go48tXg4yREF2R6o9J8tefIqGL2+lpO4mdpz74OSHlLaII8CDCuhMQcCLbdXkzc/
mIUTz1co6KluJK7mCBV+CeqTzqSsEw7FDm6KW2DORXbWi1XN1cwOP0VrM4kwhM/2
8Hpj6Am8mnUFSLu7gkqS8ItELYZfX0o7fSz1NwMFFAUZpGE8e2GI9Gcpc93WM0vh
/K/HUwaRyTIZA/S7qVwh4JYGoD/yHJW+s4iuxv2Ge2LpH8V7iNKKW/knogzelUhn
Vzskw4tzRzn6IP2gCuEOM40e1IBTwTs0T92sSF7io48Kbrnone35ibgpjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu4akia1HvrQf5g6qWtZVm14hq4MB8GA1UdIwQY
MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt
Mjc5ZjU5NGIzYTJmLzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm
LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4cXGs/2
0XDxcozZfWgNo4SoeqnDt3RoD1uzY/FIPRhLdOFZwULQWfhTzRja5s2/xeZhcQKX
75PHH8If0HZXamow/DkX7nCrM4NVpsa91f96AjwlZeFOgrbFe5Xu6RuQ54VzIHvJ
HS1RINNV948n2SdibpntYgaP1Zo1OBMZw8dEGNiNMhGmNUiLN3sugoR/GI2DkBcA
U1Oa0sarg/6TDcYgsU4HLpYCzQbnQE4gRvccUmVk7CZtPawJO4UnVtcKjEKCN3iv
bMhBwKxnNgJDO8UOIr1BeOdWM7u0zhRwyZHzULWEgflTciW5V7QPyZoerF/mMY1s
yYlQOLi0HZQtdQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:03:15 2026 by rpki-client