Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier: O0IzU6dJZmhC2z2uFlicJQvixPdsihcVF7Ut3MbUXa8=
Subject key identifier: 44:51:58:42:2B:1A:F8:93:90:C2:EB:A3:F3:F4:69:21:6B:95:CE:E2
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial: 019D371B4180523F57C3A9F31ED7745EF855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number: 0F6E
Signing time: Sun 29 Mar 2026 01:00:26 +0000
Manifest this update: Sun 29 Mar 2026 01:00:26 +0000
Manifest next update: Mon 30 Mar 2026 01:00:26 +0000
Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: CU0koo5mfZp6P9P4v2AwSO7xO/bkNz3WI8oTSgsUbNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:41:80:52:3f:57:c3:a9:f3:1e:d7:74:5e:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
Validity
Not Before: Mar 29 01:00:26 2026 GMT
Not After : Mar 30 01:00:26 2026 GMT
Subject: CN=445158422b1af89390c2eba3f3f469216b95cee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:67:c0:e7:30:72:04:4d:6d:ac:56:e1:63:
f2:73:41:5c:8d:36:57:b6:e8:21:27:e2:73:c3:8f:
3e:ce:e9:0f:57:32:21:9a:84:48:24:a4:83:93:37:
68:9c:31:ba:75:c9:f5:d4:8c:58:0d:fa:36:17:83:
8a:77:4b:30:ed:e5:77:54:a2:ba:a5:9a:1e:fc:66:
c4:0d:bb:71:0e:8d:3d:97:05:62:45:ed:61:38:84:
aa:45:95:99:62:d5:ab:a0:02:36:a9:8a:8b:fd:9d:
b8:8e:c1:10:ef:d2:f4:3d:cc:26:bc:85:d4:0f:32:
3e:5b:01:65:e4:13:4c:e6:78:8b:7c:91:0e:16:8a:
b5:b4:88:bc:73:af:b2:0c:46:2e:9d:d4:1e:90:cc:
b7:88:58:dd:36:82:14:78:14:eb:eb:39:f0:7c:d8:
8b:6d:77:0e:e3:99:e9:81:3f:83:47:d5:f1:68:87:
5c:b5:0c:dc:92:8d:c0:91:72:62:55:ba:f9:7a:e7:
49:af:6b:7f:3b:6a:5c:60:66:74:e8:f6:08:c8:cc:
d6:6f:f1:62:11:1b:59:74:5a:a0:fa:2b:57:81:c8:
f4:75:5e:7d:55:e2:e1:12:15:e7:ed:2f:7c:57:87:
a3:e3:a2:b6:f2:cc:3d:3e:23:0b:f1:eb:30:46:b0:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:58:42:2B:1A:F8:93:90:C2:EB:A3:F3:F4:69:21:6B:95:CE:E2
X509v3 Authority Key Identifier:
keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d2:dd:97:b8:d9:ed:bd:d0:0d:85:6c:6f:56:08:af:43:64:
d3:e0:19:e3:3c:c3:94:24:4c:5a:7b:b0:ca:a6:72:4e:99:d0:
ee:ab:9a:ac:2a:3a:51:01:2e:39:f5:d0:fd:2b:57:26:e2:c5:
60:73:51:1c:fa:64:35:8f:bf:1b:d3:fa:1f:da:dc:d5:c4:09:
6b:a8:c6:85:ab:3e:49:cc:e7:2b:18:03:a2:62:fd:87:47:bf:
02:4e:61:5e:59:6b:28:5d:89:99:65:c0:e1:38:09:58:ba:ae:
45:a6:f6:af:02:4c:1e:2c:ae:75:89:5e:0a:f2:55:59:92:df:
7d:d7:a1:a4:97:d0:a4:d5:6b:9b:95:55:5a:72:6e:2f:4f:73:
8c:56:5d:ec:bd:67:e8:ea:cc:a6:f2:83:59:7e:76:4f:4b:16:
90:50:ea:20:14:34:ab:f7:57:1d:c0:69:95:af:0b:f7:16:c8:
9d:27:54:a5:fa:65:9a:6a:cc:5b:48:95:1b:dc:83:4d:cc:87:
cb:4d:1d:76:f9:7b:1b:17:ee:ff:2b:81:f1:81:af:3c:72:b9:
fb:e1:e6:3b:42:60:98:10:1e:86:be:97:e2:42:ba:a4:a4:19:
84:40:dd:a7:25:69:3a:6d:53:c1:a8:63:48:90:3f:fd:9f:03:
1a:89:eb:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G0GAUj9Xw6nzHtd0XvhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NGE2NTU4ZDY5MjNiZTQyOWQ5Mzg5NTMxYWRjMTAwODc5
NTI3MGIwHhcNMjYwMzI5MDEwMDI2WhcNMjYwMzMwMDEwMDI2WjAzMTEwLwYDVQQD
Eyg0NDUxNTg0MjJiMWFmODkzOTBjMmViYTNmM2Y0NjkyMTZiOTVjZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqBnwOcwcgRNbaxW4WPyc0FcjTZX
tughJ+Jzw48+zukPVzIhmoRIJKSDkzdonDG6dcn11IxYDfo2F4OKd0sw7eV3VKK6
pZoe/GbEDbtxDo09lwViRe1hOISqRZWZYtWroAI2qYqL/Z24jsEQ79L0PcwmvIXU
DzI+WwFl5BNM5niLfJEOFoq1tIi8c6+yDEYundQekMy3iFjdNoIUeBTr6znwfNiL
bXcO45npgT+DR9XxaIdctQzcko3AkXJiVbr5eudJr2t/O2pcYGZ06PYIyMzWb/Fi
ERtZdFqg+itXgcj0dV59VeLhEhXn7S98V4ej46K28sw9PiML8eswRrCl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERRWEIrGviTkMLro/P0aSFrlc7iMB8GA1UdIwQY
MBaAFMVKZVjWkjvkKdk4lTGtwQCHlScLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2Mt
ZWMyZWQwYjc4MmI3LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2MtZWMyZWQwYjc4MmI3
LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdLdl7jZ
7b3QDYVsb1YIr0Nk0+AZ4zzDlCRMWnuwyqZyTpnQ7quarCo6UQEuOfXQ/StXJuLF
YHNRHPpkNY+/G9P6H9rc1cQJa6jGhas+ScznKxgDomL9h0e/Ak5hXllrKF2JmWXA
4TgJWLquRab2rwJMHiyudYleCvJVWZLffdehpJfQpNVrm5VVWnJuL09zjFZd7L1n
6OrMpvKDWX52T0sWkFDqIBQ0q/dXHcBpla8L9xbInSdUpfplmmrMW0iVG9yDTcyH
y00ddvl7Gxfu/yuB8YGvPHK5++HmO0JgmBAehr6X4kK6pKQZhEDdpyVpOm1Twahj
SJA//Z8DGonrcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:50 2026 by rpki-client