Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
File: XgSwLaV7ADebVhowISLnjl1Qick.mft (raw, json)
Hash identifier: +G1yagXgk6JAdHwem2dYxcagbbfebkX3mLiGb2KpXBc=
Subject key identifier: DC:EA:9E:9F:2C:48:24:61:88:C8:62:4C:F5:1C:69:88:3F:A5:76:D2
Authority key identifier: 5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
Certificate issuer: /CN=5e04b02da57b00379b561a302122e78e5d5089c9
Certificate serial: 01A12AD717B8FD9076AA9BACAC13DAE85428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:41 +0000
Manifest this update: Sun 11 Oct 2026 12:01:41 +0000
Manifest next update: Mon 12 Oct 2026 12:01:41 +0000
Files and hashes: 1: Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa (hash: NhBr92QCCO8QbowM/v9LvYLKA9Dujq44YfaPAibmCTM=)
2: TQ0wM6huTqh458ZZSQM0KI52teM.roa (hash: nBLiANju/5qfI/HxdXcGxBhrz2L2pBNw4FU6t8WZ4B4=)
3: XgSwLaV7ADebVhowISLnjl1Qick.crl (hash: h5QIck0mcwgikTEK0C8LvZty6pLiZIOKmsXPA9Ps/78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:17:b8:fd:90:76:aa:9b:ac:ac:13:da:e8:54:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e04b02da57b00379b561a302122e78e5d5089c9
Validity
Not Before: Oct 11 12:01:41 2026 GMT
Not After : Oct 12 12:01:41 2026 GMT
Subject: CN=dcea9e9f2c48246188c8624cf51c69883fa576d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:46:91:ac:bc:ac:c7:45:56:95:04:30:b3:
12:65:43:20:0d:ad:92:43:51:6b:b1:98:00:0f:71:
b3:6d:56:81:4c:23:0c:5e:b2:01:99:5a:31:31:eb:
5b:f5:23:72:7c:dd:ce:a0:89:5f:fb:2e:d4:1c:58:
73:3f:87:3c:7d:e9:c3:f3:96:ad:eb:58:a6:4f:8d:
e5:25:c7:bf:ad:ca:8f:9f:e8:53:07:1f:8d:e6:6a:
d6:47:9d:c4:51:5a:70:cc:40:c1:b8:d9:26:73:02:
71:29:54:57:d7:3d:00:3e:4c:a1:4b:b3:87:09:a0:
86:ba:90:0a:ba:e0:67:07:a8:6e:69:38:f2:f4:76:
fb:c3:d6:94:f5:37:6c:18:72:fa:5d:1d:10:f9:4b:
8f:34:3c:9c:0a:e6:a9:ed:32:00:28:3c:24:86:da:
84:e0:3b:d0:78:42:3a:f0:6d:73:5e:56:4b:18:be:
de:0b:b3:71:8e:1b:18:9b:a9:67:67:a1:4b:10:9d:
23:36:8b:7a:0c:4f:6e:85:0a:ba:4b:6a:d1:56:e5:
67:83:48:01:e9:e3:f1:ea:8a:9d:72:12:e1:20:a8:
63:c1:1e:76:62:16:16:56:76:cc:c6:ce:e6:d1:0e:
73:42:33:65:5c:82:29:7c:18:bd:cc:70:ab:25:f3:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:9E:9F:2C:48:24:61:88:C8:62:4C:F5:1C:69:88:3F:A5:76:D2
X509v3 Authority Key Identifier:
keyid:5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:52:39:4d:ed:88:48:2a:4f:d3:5d:56:c9:c0:25:d7:b9:23:
cf:7c:a4:bf:dc:7e:50:f8:08:bb:b7:3c:f3:a5:25:01:ec:28:
15:c9:7e:f6:fc:53:af:a3:1b:fe:6d:4f:ce:f3:4b:09:29:7a:
fe:b4:82:8c:e8:ba:ed:14:79:dc:26:3c:62:0a:a7:73:ea:d9:
d9:fe:21:2a:6b:01:19:65:4c:59:fc:a7:de:60:26:e1:f3:6c:
8e:ee:9b:fc:b0:85:1f:1a:3c:03:9e:3f:7b:3e:1f:60:01:e3:
e5:e4:bc:62:58:a5:ec:1f:52:52:4e:2d:34:2b:af:d0:59:78:
72:e3:2c:b2:1d:e6:ea:e4:6d:c1:ea:22:e4:0b:33:78:cf:7d:
fa:da:fb:97:c9:df:48:f6:fe:72:b5:2b:9b:19:55:16:c7:3b:
a9:23:1b:75:0c:40:c8:10:19:ad:27:35:ca:bb:0f:be:2b:2d:
77:12:20:51:1e:89:f1:b0:70:da:40:6c:1d:e7:c7:4c:7a:ed:
4c:03:83:01:03:46:f8:4b:b4:f7:42:7b:b2:da:f3:a1:ce:82:
f9:5e:38:95:6e:75:81:35:02:b3:2c:7b:c7:98:a5:e1:5b:91:
ba:20:52:f2:46:ef:bd:3f:5b:22:3a:bf:db:4b:15:a2:af:2d:
e5:53:c1:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEq1xe4/ZB2qpusrBPa6FQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDRiMDJkYTU3YjAwMzc5YjU2MWEzMDIxMjJlNzhlNWQ1
MDg5YzkwHhcNMjYxMDExMTIwMTQxWhcNMjYxMDEyMTIwMTQxWjAzMTEwLwYDVQQD
EyhkY2VhOWU5ZjJjNDgyNDYxODhjODYyNGNmNTFjNjk4ODNmYTU3NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzpGkay8rMdFVpUEMLMSZUMgDa2S
Q1FrsZgAD3GzbVaBTCMMXrIBmVoxMetb9SNyfN3OoIlf+y7UHFhzP4c8fenD85at
61imT43lJce/rcqPn+hTBx+N5mrWR53EUVpwzEDBuNkmcwJxKVRX1z0APkyhS7OH
CaCGupAKuuBnB6huaTjy9Hb7w9aU9TdsGHL6XR0Q+UuPNDycCuap7TIAKDwkhtqE
4DvQeEI68G1zXlZLGL7eC7NxjhsYm6lnZ6FLEJ0jNot6DE9uhQq6S2rRVuVng0gB
6ePx6oqdchLhIKhjwR52YhYWVnbMxs7m0Q5zQjNlXIIpfBi9zHCrJfMeUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzqnp8sSCRhiMhiTPUcaYg/pXbSMB8GA1UdIwQY
MBaAFF4EsC2lewA3m1YaMCEi545dUInJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdTd0xhVjdBRGViVmhvd0lTTG5qbDFRaWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NWUzNmMtZGIxZi00ODNlLWIwZWYt
MjI5MDUxODc5Yjc0LzEvWGdTd0xhVjdBRGViVmhvd0lTTG5qbDFRaWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83NWUzNmMtZGIxZi00ODNlLWIwZWYtMjI5MDUxODc5Yjc0
LzEvWGdTd0xhVjdBRGViVmhvd0lTTG5qbDFRaWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVI5Te2I
SCpP011WycAl17kjz3ykv9x+UPgIu7c886UlAewoFcl+9vxTr6Mb/m1PzvNLCSl6
/rSCjOi67RR53CY8Ygqnc+rZ2f4hKmsBGWVMWfyn3mAm4fNsju6b/LCFHxo8A54/
ez4fYAHj5eS8Ylil7B9SUk4tNCuv0Fl4cuMssh3m6uRtweoi5AszeM99+tr7l8nf
SPb+crUrmxlVFsc7qSMbdQxAyBAZrSc1yrsPvistdxIgUR6J8bBw2kBsHefHTHrt
TAODAQNG+Eu090J7strzoc6C+V44lW51gTUCsyx7x5il4VuRuiBS8kbvvT9bIjq/
20sVoq8t5VPB6A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:12:12 2026 by rpki-client