Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
File: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft (raw, json)
Hash identifier: HXLIMtVNLE02NiQOns79cCk1J0RpYg4NdQFxhZXN4X0=
Subject key identifier: 9F:AA:E3:41:30:F7:A5:5F:CF:AE:94:B0:19:A1:AA:23:80:BF:94:FE
Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
Certificate issuer: /CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Certificate serial: 019D38D35D031B37CE991AF41D363D101640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
Manifest number: 08DB
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl (hash: KpPiL3G5jW1qrBiWNC+d8HhL/YfDAoVZe5nNyo7JPdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5d:03:1b:37:ce:99:1a:f4:1d:36:3d:10:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=9faae34130f7a55fcfae94b019a1aa2380bf94fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:a1:a0:76:1b:6c:f8:36:2a:21:a4:df:4d:
3d:0d:60:21:ca:0a:cf:51:81:7c:4d:ba:8f:fe:8c:
c5:0b:3f:ac:23:12:41:4b:8b:d9:9b:f0:40:6f:b7:
7b:79:27:ba:b4:a3:b5:95:1b:d3:fa:61:bd:76:78:
d0:53:30:5e:7f:ea:7c:bf:a7:f3:05:8d:11:3a:24:
cc:a3:2d:3b:ec:98:8d:fc:77:c7:ae:4e:ba:4f:8a:
f2:de:71:87:ba:9a:0e:ff:6d:04:bd:28:1e:78:39:
e6:cc:2a:5b:b3:80:d1:e6:06:83:59:9c:5f:3a:05:
a4:9c:69:ae:2c:92:ba:2d:6a:1d:2e:cb:7f:22:fe:
de:66:5e:1d:73:19:c9:21:fa:32:61:e7:08:61:8d:
85:8a:ca:cc:c3:97:31:71:00:67:5c:23:51:a0:a7:
ca:f8:f6:36:aa:f7:a7:5c:6b:6d:88:a1:58:24:b4:
26:f4:05:35:82:ad:11:20:52:a0:1f:c3:bc:33:52:
a1:df:68:37:59:df:b2:b8:36:fd:53:f3:d2:6e:3d:
dd:62:7d:b5:47:56:2b:1a:3c:e5:c7:1e:a9:97:e6:
17:80:29:fd:6d:34:69:2f:eb:1f:d3:29:c2:17:93:
6f:7b:3e:db:ed:9c:ea:28:f7:34:53:85:d6:17:10:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:E3:41:30:F7:A5:5F:CF:AE:94:B0:19:A1:AA:23:80:BF:94:FE
X509v3 Authority Key Identifier:
keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:58:78:12:e8:cc:18:25:15:62:4f:ea:7f:ca:f0:45:33:7d:
5c:61:f0:70:ea:ec:2f:a1:d4:63:46:10:f0:02:49:9a:0a:6b:
d5:21:18:bc:80:4c:a4:fd:9e:f5:d6:36:45:69:29:88:98:62:
76:2c:c7:5b:e6:a4:61:dc:81:2f:f9:22:41:34:c7:22:1b:28:
9b:83:e0:74:94:cc:53:03:14:ae:27:8f:c5:07:da:77:ba:b2:
a3:e7:f4:ed:bd:64:76:29:c3:b4:8d:3c:7b:6f:5a:7a:06:c6:
97:40:85:62:f7:37:6a:8d:a7:80:71:c7:36:72:96:cf:9f:c8:
ae:8d:63:ad:f1:df:f9:c2:1e:f9:20:be:f5:e3:de:09:d5:6c:
8a:b1:42:a6:53:7b:cc:ce:c9:b2:94:37:6b:65:54:f4:dd:2b:
ab:a2:fb:b0:a9:f0:d9:5c:2b:c7:a9:21:f3:ee:4c:68:86:8b:
9a:6b:60:9f:41:8f:a4:55:bb:aa:33:42:d6:ff:98:da:44:a5:
44:2c:95:19:ee:36:e7:16:2b:4e:01:bb:fa:b5:e1:26:26:56:
32:65:76:c0:80:60:09:dc:48:2a:d1:98:35:21:5a:5b:b2:1c:
61:c5:14:aa:24:be:2e:3c:b7:4b:06:c2:8d:25:5c:7a:94:77:
3b:e2:f1:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04010DGzfOmRr0HTY9EBZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTIxNDE1OGFmMzEwZmZhOWMzMTUyOTgzNDNmNGMzZTY2
YWVjOWEwHhcNMjYwMzI5MDkwMTA5WhcNMjYwMzMwMDkwMTA5WjAzMTEwLwYDVQQD
Eyg5ZmFhZTM0MTMwZjdhNTVmY2ZhZTk0YjAxOWExYWEyMzgwYmY5NGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRmhoHYbbPg2KiGk3009DWAhygrP
UYF8TbqP/ozFCz+sIxJBS4vZm/BAb7d7eSe6tKO1lRvT+mG9dnjQUzBef+p8v6fz
BY0ROiTMoy077JiN/HfHrk66T4ry3nGHupoO/20EvSgeeDnmzCpbs4DR5gaDWZxf
OgWknGmuLJK6LWodLst/Iv7eZl4dcxnJIfoyYecIYY2FisrMw5cxcQBnXCNRoKfK
+PY2qvenXGttiKFYJLQm9AU1gq0RIFKgH8O8M1Kh32g3Wd+yuDb9U/PSbj3dYn21
R1YrGjzlxx6pl+YXgCn9bTRpL+sf0ynCF5Nvez7b7ZzqKPc0U4XWFxAc7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+q40Ew96Vfz66UsBmhqiOAv5T+MB8GA1UdIwQY
MBaAFF5SFBWK8xD/qcMVKYND9MPmauyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxJVUZZcnpFUC1wd3hVcGcwUDB3LVpxN0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hOTkyZmUtYzFjZi00ZGU4LWJiYjAt
Zjk2ZjZmNzY5ODM4LzEvWGxJVUZZcnpFUC1wd3hVcGcwUDB3LVpxN0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hOTkyZmUtYzFjZi00ZGU4LWJiYjAtZjk2ZjZmNzY5ODM4
LzEvWGxJVUZZcnpFUC1wd3hVcGcwUDB3LVpxN0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVh4EujM
GCUVYk/qf8rwRTN9XGHwcOrsL6HUY0YQ8AJJmgpr1SEYvIBMpP2e9dY2RWkpiJhi
dizHW+akYdyBL/kiQTTHIhsom4PgdJTMUwMUriePxQfad7qyo+f07b1kdinDtI08
e29aegbGl0CFYvc3ao2ngHHHNnKWz5/Iro1jrfHf+cIe+SC+9ePeCdVsirFCplN7
zM7JspQ3a2VU9N0rq6L7sKnw2Vwrx6kh8+5MaIaLmmtgn0GPpFW7qjNC1v+Y2kSl
RCyVGe425xYrTgG7+rXhJiZWMmV2wIBgCdxIKtGYNSFaW7IcYcUUqiS+Ljy3SwbC
jSVcepR3O+LxPg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:30 2026 by rpki-client