Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: ph1LugeT8+YPCj+MjjymzH8JJQ404vKEHaSkq6Rn1cA=
Subject key identifier: FF:73:D9:52:A2:3D:83:02:14:78:43:2B:06:F2:AF:34:0C:21:E2:3B
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 01A1A8CBB16FA7D6FA6FF3C2C41D190340A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 1AE1
Signing time: Wed 04 Nov 2026 23:01:23 +0000
Manifest this update: Wed 04 Nov 2026 23:01:23 +0000
Manifest next update: Thu 05 Nov 2026 23:01:23 +0000
Files and hashes: 1: GpZIgv126Cl3UoGhkY1Uvof1iPY.roa (hash: fP30v2kEF8neAtWHSrqD3PG/OVeu+YIU3qixidi5CQc=)
2: idf0hZZENN-4_aae9KN1w6rgM4Q.roa (hash: qK834woHIrutz8SD0paYhf0sMnrUCo/j6IC8hJut1/0=)
3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: LRy0uxs3FjttQZaDkpPQ2ZlS/5v7TYex96NjOhQO7Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:cb:b1:6f:a7:d6:fa:6f:f3:c2:c4:1d:19:03:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Nov 4 23:01:23 2026 GMT
Not After : Nov 5 23:01:23 2026 GMT
Subject: CN=ff73d952a23d83021478432b06f2af340c21e23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:7a:9a:31:d2:85:bd:fe:68:63:3a:c6:c0:
2e:56:a3:d9:6d:c0:ff:66:5a:ba:d0:dc:a3:f2:a9:
b1:5d:f2:51:5c:08:43:de:be:cb:ff:2c:56:96:23:
ed:c9:86:26:71:9d:3a:93:f9:a4:b3:09:d4:1d:ba:
07:a1:86:43:33:02:4c:f4:0c:d0:a6:50:9e:e9:05:
69:09:66:41:f8:02:7c:1f:43:ac:db:78:54:23:31:
5d:65:70:21:8d:e0:31:82:43:8e:34:9c:f7:df:03:
02:42:8f:2b:50:f6:95:20:45:f2:0e:fe:32:bf:26:
bb:cb:d8:39:fe:de:1d:e6:0e:cf:42:5e:a3:6a:10:
28:c8:f3:cd:6e:d2:bb:74:bb:bb:e1:81:af:10:9a:
9c:6b:88:fa:b5:50:6e:e2:52:cb:5e:e1:a6:02:2c:
62:f2:35:05:c5:bd:70:80:5a:4e:29:eb:29:fa:ff:
ae:48:89:c9:b6:f9:a3:2b:1f:64:ef:49:ea:59:7a:
c1:4d:ee:36:bf:21:8c:33:10:78:5d:8c:26:5e:3e:
eb:19:b3:5d:e3:95:95:ae:5f:a7:f4:84:69:f3:6e:
ec:21:f0:68:85:3c:74:ba:78:e0:41:97:71:5c:70:
ac:90:37:66:81:08:fc:e5:68:aa:fc:cf:4a:f8:11:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:D9:52:A2:3D:83:02:14:78:43:2B:06:F2:AF:34:0C:21:E2:3B
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9d:29:bc:85:ba:03:79:8f:44:9d:d9:ad:63:3c:63:83:d0:
c4:0c:09:e3:7d:b5:0c:1e:9e:36:6f:2c:6a:ab:8f:72:f8:b7:
80:e1:c0:53:d1:24:5a:00:69:c4:c8:d9:2f:15:3c:ea:13:cb:
12:80:bd:40:c3:46:98:18:d5:46:fa:66:5a:27:49:9d:93:82:
5f:d2:a5:37:c9:54:00:26:87:46:ff:3a:54:25:8e:df:e0:ef:
9d:7b:12:37:fd:a0:6c:d6:2c:ee:8b:23:67:0b:ef:6c:c1:12:
1d:70:1d:50:1c:31:78:ea:ac:cb:92:e3:27:bc:4d:e8:d0:81:
82:73:05:13:aa:bb:b7:c8:8e:4d:2d:e8:a3:41:6c:74:3a:cf:
5b:f5:42:21:aa:24:cf:f3:f2:69:21:4f:9b:60:a8:cd:0a:a9:
81:6c:55:8a:ea:b5:47:24:9d:06:9a:36:f2:10:13:ff:33:78:
69:90:a7:f9:79:1f:74:39:c5:67:fa:14:55:08:2a:43:cf:84:
e6:62:54:24:a9:b5:b2:f8:30:a5:e8:4e:32:69:72:60:c9:5c:
82:06:d2:b1:d9:7d:55:fc:48:2d:f2:3f:16:00:5d:e7:74:4b:
6d:92:65:d2:a5:22:8d:f3:ee:e2:1e:49:3a:1b:d0:3e:bc:22:
be:26:66:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoy7Fvp9b6b/PCxB0ZA0CgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTc5MWE1ODExYzdmNmVkODFmZDQ0MWI1MDI2NWFmNWU5
YzYxYjAwHhcNMjYxMTA0MjMwMTIzWhcNMjYxMTA1MjMwMTIzWjAzMTEwLwYDVQQD
EyhmZjczZDk1MmEyM2Q4MzAyMTQ3ODQzMmIwNmYyYWYzNDBjMjFlMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbJ6mjHShb3+aGM6xsAuVqPZbcD/
Zlq60Nyj8qmxXfJRXAhD3r7L/yxWliPtyYYmcZ06k/mkswnUHboHoYZDMwJM9AzQ
plCe6QVpCWZB+AJ8H0Os23hUIzFdZXAhjeAxgkOONJz33wMCQo8rUPaVIEXyDv4y
vya7y9g5/t4d5g7PQl6jahAoyPPNbtK7dLu74YGvEJqca4j6tVBu4lLLXuGmAixi
8jUFxb1wgFpOKesp+v+uSInJtvmjKx9k70nqWXrBTe42vyGMMxB4XYwmXj7rGbNd
45WVrl+n9IRp827sIfBohTx0unjgQZdxXHCskDdmgQj85Wiq/M9K+BFGyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9z2VKiPYMCFHhDKwbyrzQMIeI7MB8GA1UdIwQY
MBaAFMUXkaWBHH9u2B/UQbUCZa9enGGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEt
ODE5MTY0YjkyYjg4LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEtODE5MTY0YjkyYjg4
LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp0pvIW6
A3mPRJ3ZrWM8Y4PQxAwJ4321DB6eNm8saquPcvi3gOHAU9EkWgBpxMjZLxU86hPL
EoC9QMNGmBjVRvpmWidJnZOCX9KlN8lUACaHRv86VCWO3+DvnXsSN/2gbNYs7osj
ZwvvbMESHXAdUBwxeOqsy5LjJ7xN6NCBgnMFE6q7t8iOTS3oo0FsdDrPW/VCIaok
z/PyaSFPm2CozQqpgWxViuq1RySdBpo28hAT/zN4aZCn+XkfdDnFZ/oUVQgqQ8+E
5mJUJKm1svgwpehOMmlyYMlcggbSsdl9VfxILfI/FgBd53RLbZJl0qUijfPu4h5J
OhvQPrwiviZmhw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 10:12:52 2026 by rpki-client