Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: Zvg+LN3fREKfMi5PA+kKhCgqz66WOeusPERrhk+vxac=
Subject key identifier: 11:A2:3A:7D:1B:65:5C:47:E7:2A:F6:DF:45:12:06:D8:51:F2:49:34
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01A1AA834C2B5D76521AE5A20FD32609A610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0E73
Signing time: Thu 05 Nov 2026 07:01:33 +0000
Manifest this update: Thu 05 Nov 2026 07:01:33 +0000
Manifest next update: Fri 06 Nov 2026 07:01:33 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: RqZ8N+lj6USEnvcxHTq3+l+9lIt+ZrDmhXrmx88x5vM=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:4c:2b:5d:76:52:1a:e5:a2:0f:d3:26:09:a6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Nov 5 07:01:33 2026 GMT
Not After : Nov 6 07:01:33 2026 GMT
Subject: CN=11a23a7d1b655c47e72af6df451206d851f24934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:da:c1:53:c8:b8:5b:a0:36:98:07:65:4b:
66:a7:60:73:3d:a4:44:77:eb:85:39:c0:c4:53:1a:
fe:b6:da:21:5d:e2:90:b8:cf:31:6e:a3:a1:b1:2f:
c6:02:f0:ff:af:84:63:76:a7:95:ab:60:13:05:57:
71:69:84:0a:1c:b9:d4:64:5b:d7:7f:73:8f:30:6c:
4f:bf:40:dd:e6:66:93:12:fd:32:55:f1:71:2d:9c:
a3:dc:cf:b2:9f:96:69:05:2c:74:59:c3:da:fa:15:
47:e4:ab:61:b9:07:52:55:21:40:6b:c3:86:f3:5a:
a8:0b:48:14:47:d5:73:63:35:71:c9:0a:5b:77:ed:
39:ba:ef:5f:7f:a3:72:61:3a:e5:99:f9:45:3c:df:
bb:fa:f5:1b:b7:4e:b7:7e:eb:61:9f:d5:d4:f8:22:
17:06:d3:07:a2:38:48:cb:e8:7d:a9:ed:04:74:08:
f8:25:85:cf:b8:f0:f4:ea:e4:76:0e:f6:6f:91:86:
e3:c6:0f:22:3a:f2:7e:de:ce:4b:6b:47:00:e5:fb:
43:93:8b:03:ba:6e:55:53:d8:7c:7a:72:c5:e5:b8:
60:f5:8c:c3:9b:55:ea:9a:3c:2a:1d:4a:bd:85:28:
2b:bd:da:0b:7a:ab:57:e2:f9:9d:3d:29:68:00:d3:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:3A:7D:1B:65:5C:47:E7:2A:F6:DF:45:12:06:D8:51:F2:49:34
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f3:20:3d:a4:98:38:f3:58:ff:4e:36:b6:75:c3:68:28:68:
a4:a3:7d:36:3e:6b:4a:3b:1c:2e:de:6d:47:d9:8f:d1:09:76:
f6:85:7f:77:ad:83:ae:48:f3:ce:1e:c0:cd:d2:da:2c:74:f0:
83:f7:c2:c7:be:5b:68:47:35:ab:31:3e:57:1f:c2:4c:9b:7f:
e8:24:8c:27:24:6e:36:68:a7:0c:be:21:6c:87:a3:64:bb:e6:
7d:1c:e9:a1:17:30:1e:0f:d8:fc:16:43:8e:d0:97:b0:23:7d:
b9:2a:fa:a6:5a:f0:35:cb:1c:19:65:13:5b:40:e4:6a:c6:23:
20:40:d8:22:49:2b:81:a4:ac:d0:71:cd:56:38:28:91:32:0d:
19:fd:fd:8a:a2:ee:65:4a:7e:03:67:cc:72:cc:77:30:c6:d2:
b2:b0:c8:78:4f:92:bd:7e:af:e9:f5:c5:d2:eb:1c:63:77:19:
74:38:74:ef:8e:82:8f:c2:d9:84:84:52:bb:fd:e9:a6:80:47:
4d:b6:57:1d:19:82:4f:07:22:87:e2:27:35:18:88:7a:20:d8:
82:d5:39:92:b5:6b:7b:19:7e:73:2f:2b:8a:e7:3d:34:0d:af:
cf:81:32:c7:1e:ff:61:bf:82:25:2c:69:92:82:b8:8b:5a:1b:
5c:66:18:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGqg0wrXXZSGuWiD9MmCaYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl
NmRiMGUwHhcNMjYxMTA1MDcwMTMzWhcNMjYxMTA2MDcwMTMzWjAzMTEwLwYDVQQD
EygxMWEyM2E3ZDFiNjU1YzQ3ZTcyYWY2ZGY0NTEyMDZkODUxZjI0OTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15nawVPIuFugNpgHZUtmp2BzPaRE
d+uFOcDEUxr+ttohXeKQuM8xbqOhsS/GAvD/r4RjdqeVq2ATBVdxaYQKHLnUZFvX
f3OPMGxPv0Dd5maTEv0yVfFxLZyj3M+yn5ZpBSx0WcPa+hVH5KthuQdSVSFAa8OG
81qoC0gUR9VzYzVxyQpbd+05uu9ff6NyYTrlmflFPN+7+vUbt063futhn9XU+CIX
BtMHojhIy+h9qe0EdAj4JYXPuPD06uR2DvZvkYbjxg8iOvJ+3s5La0cA5ftDk4sD
um5VU9h8enLF5bhg9YzDm1XqmjwqHUq9hSgrvdoLeqtX4vmdPSloANOwqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGiOn0bZVxH5yr230USBthR8kk0MB8GA1UdIwQY
MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt
ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm
LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfMgPaSY
OPNY/042tnXDaChopKN9Nj5rSjscLt5tR9mP0Ql29oV/d62Drkjzzh7AzdLaLHTw
g/fCx75baEc1qzE+Vx/CTJt/6CSMJyRuNminDL4hbIejZLvmfRzpoRcwHg/Y/BZD
jtCXsCN9uSr6plrwNcscGWUTW0DkasYjIEDYIkkrgaSs0HHNVjgokTINGf39iqLu
ZUp+A2fMcsx3MMbSsrDIeE+SvX6v6fXF0uscY3cZdDh0746Cj8LZhIRSu/3ppoBH
TbZXHRmCTwcih+InNRiIeiDYgtU5krVrexl+cy8riuc9NA2vz4Eyxx7/Yb+CJSxp
koK4i1obXGYYbQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:32:46 2026 by rpki-client