Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json)
Hash identifier: 5R61ksgkconuDtjeRYx7Qc1mxrC2euHTe1yVJTpfsrw=
Subject key identifier: 74:68:1E:81:A6:19:13:A1:DF:DE:13:D4:FC:31:6F:0D:7E:D9:BB:0C
Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Certificate serial: 019D37F7147A2A6C9145EE38B1E874FEEBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
Manifest number: 0FB2
Signing time: Sun 29 Mar 2026 05:00:32 +0000
Manifest this update: Sun 29 Mar 2026 05:00:32 +0000
Manifest next update: Mon 30 Mar 2026 05:00:32 +0000
Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: p39XyqlhEB0cQhaPYkMhd5v+Sg987dPy5zCjM7s5Zdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:14:7a:2a:6c:91:45:ee:38:b1:e8:74:fe:eb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Validity
Not Before: Mar 29 05:00:32 2026 GMT
Not After : Mar 30 05:00:32 2026 GMT
Subject: CN=74681e81a61913a1dfde13d4fc316f0d7ed9bb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:8e:92:7d:af:70:c3:b7:ef:06:80:8e:c1:
82:86:ac:4d:d9:89:fe:6a:cc:91:20:aa:f0:15:78:
b1:2c:6e:5d:1f:2e:6b:df:21:5a:2a:0d:f7:c5:91:
e8:2d:91:8b:8c:0c:a8:9f:03:f0:a2:67:31:1d:d7:
5a:27:fd:5c:c4:23:84:cc:0a:47:4d:6d:8c:ba:21:
d2:99:73:45:57:48:7b:22:91:ee:41:83:13:82:53:
f3:36:31:f0:1c:a2:62:b5:fe:4d:9b:ab:1a:f6:c6:
f8:5a:90:9c:10:fb:51:75:2d:5d:2f:db:ca:0b:56:
2a:05:a4:a4:49:d6:0f:39:eb:02:37:c2:c5:b9:52:
ed:d2:b0:d8:9b:08:01:6c:04:77:49:31:82:58:aa:
a0:e6:29:90:fb:ee:6c:21:84:32:14:7e:50:2d:c6:
68:c5:65:b0:b2:25:21:22:4f:b6:fd:61:67:b3:f2:
7b:0f:61:6f:7c:52:15:9d:1c:3b:a4:88:43:9c:ef:
a1:ed:de:77:03:69:75:1c:e9:dc:7c:6e:f6:d7:f1:
66:3a:73:5c:75:81:3d:e5:30:05:e1:dc:f7:fa:98:
04:55:7d:94:5c:89:5f:ab:a5:0c:80:65:b6:58:a9:
dd:0e:ff:f6:11:1f:18:91:51:ef:ab:3a:71:5d:bc:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:1E:81:A6:19:13:A1:DF:DE:13:D4:FC:31:6F:0D:7E:D9:BB:0C
X509v3 Authority Key Identifier:
keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:db:f1:0a:62:5a:62:9d:1d:eb:e8:78:c3:79:9e:e2:ea:89:
56:ea:81:2f:e8:09:b9:4c:76:b2:b8:15:92:45:cb:87:d0:81:
37:82:09:0a:18:31:6c:de:37:f0:a3:b5:22:ee:09:f3:29:6b:
c4:7c:3c:f3:76:72:56:b5:f5:16:9b:22:1a:41:69:c8:7c:95:
62:3e:a8:58:df:f0:03:b2:62:42:98:aa:f5:83:6a:08:80:03:
a1:e5:b5:16:58:8a:78:34:4d:05:e0:d1:b1:84:a6:2a:0c:26:
17:7b:0f:74:2c:5d:36:f4:a9:05:c7:a4:93:dd:6a:cf:68:71:
48:1f:86:25:79:16:24:1b:3e:52:bb:73:80:9a:96:fd:bb:fe:
c2:7d:f4:04:d3:30:18:cf:65:9f:05:b5:48:1d:fe:51:f4:7b:
8c:35:de:f7:4f:17:cd:5f:41:47:ba:de:22:b5:c7:24:90:cb:
38:c7:72:2e:9e:7d:d9:e5:aa:62:dd:84:53:fb:c2:e8:6b:32:
96:7d:90:e2:09:54:8e:88:fe:e0:68:13:d3:fe:84:d8:d2:e2:
8c:02:18:d7:35:5b:ed:65:d9:56:77:1b:c6:ee:98:43:99:06:
9f:ce:fb:4e:bf:6c:b5:97:cd:86:a5:3b:8b:6c:65:4b:bf:de:
73:f9:91:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xR6KmyRRe44seh0/uu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTgzYjFiNjE1YTcwZDc5N2MyNzdjZmM4NDBiOTBhMzJk
OTY5NmMwHhcNMjYwMzI5MDUwMDMyWhcNMjYwMzMwMDUwMDMyWjAzMTEwLwYDVQQD
Eyg3NDY4MWU4MWE2MTkxM2ExZGZkZTEzZDRmYzMxNmYwZDdlZDliYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9+Okn2vcMO37waAjsGChqxN2Yn+
asyRIKrwFXixLG5dHy5r3yFaKg33xZHoLZGLjAyonwPwomcxHddaJ/1cxCOEzApH
TW2MuiHSmXNFV0h7IpHuQYMTglPzNjHwHKJitf5Nm6sa9sb4WpCcEPtRdS1dL9vK
C1YqBaSkSdYPOesCN8LFuVLt0rDYmwgBbAR3STGCWKqg5imQ++5sIYQyFH5QLcZo
xWWwsiUhIk+2/WFns/J7D2FvfFIVnRw7pIhDnO+h7d53A2l1HOncfG721/FmOnNc
dYE95TAF4dz3+pgEVX2UXIlfq6UMgGW2WKndDv/2ER8YkVHvqzpxXbz/JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRoHoGmGROh394T1Pwxbw1+2bsMMB8GA1UdIwQY
MBaAFMUYOxthWnDXl8J3z8hAuQoy2WlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMt
NjU2ZTJlYjgwNGM3LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMtNjU2ZTJlYjgwNGM3
LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtvxCmJa
Yp0d6+h4w3me4uqJVuqBL+gJuUx2srgVkkXLh9CBN4IJChgxbN438KO1Iu4J8ylr
xHw883ZyVrX1FpsiGkFpyHyVYj6oWN/wA7JiQpiq9YNqCIADoeW1FliKeDRNBeDR
sYSmKgwmF3sPdCxdNvSpBcekk91qz2hxSB+GJXkWJBs+UrtzgJqW/bv+wn30BNMw
GM9lnwW1SB3+UfR7jDXe908XzV9BR7reIrXHJJDLOMdyLp592eWqYt2EU/vC6Gsy
ln2Q4glUjoj+4GgT0/6E2NLijAIY1zVb7WXZVncbxu6YQ5kGn877Tr9stZfNhqU7
i2xlS7/ec/mR2Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:29 2026 by rpki-client