Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: /VVt+/418H4+m6mG5iI2cH1rbaceZg+ncpfOsmLk5Rk=
Subject key identifier: 22:7C:B4:E9:10:20:D9:2B:42:5F:4A:BF:21:7C:9A:4D:56:E3:60:70
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 019D3AC1CB271CF69C11605BAF2FCF80677F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0CB6
Signing time: Sun 29 Mar 2026 18:01:12 +0000
Manifest this update: Sun 29 Mar 2026 18:01:12 +0000
Manifest next update: Mon 30 Mar 2026 18:01:12 +0000
Files and hashes: 1: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: DdqbWIXnv4tB2wfBT+a2JsypUm2KYs47kilHwQDXq7M=)
2: eO46gXXoSZwATk8MoN76YPpN1jQ.roa (hash: F/WomuEJ+uQlAxaPHkR6qqNqSNUL0B0LVxqFRNytneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:cb:27:1c:f6:9c:11:60:5b:af:2f:cf:80:67:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Mar 29 18:01:12 2026 GMT
Not After : Mar 30 18:01:12 2026 GMT
Subject: CN=227cb4e91020d92b425f4abf217c9a4d56e36070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:ea:5d:dd:a8:e5:c9:8f:08:ee:20:9d:3f:
52:2a:5b:ce:89:93:46:df:76:ce:f1:ba:83:01:01:
da:9b:24:aa:6e:1c:cf:81:69:87:28:06:5d:78:a2:
bb:43:ef:78:55:7f:1e:41:80:e4:60:c3:78:ec:ce:
71:9c:e9:24:92:82:b2:3d:41:de:64:89:97:c8:30:
24:5f:35:97:ec:6b:f6:8b:a8:3e:e6:90:52:9b:5f:
5b:80:57:23:08:dd:17:4e:1b:82:41:48:5c:2a:e1:
41:52:fc:55:a9:0f:a8:19:79:9c:b7:88:bd:7c:c6:
b8:64:4a:2a:97:99:a4:19:38:ce:a1:66:a6:3b:43:
93:d8:50:9c:90:95:75:f1:03:a6:33:af:5f:8c:f5:
42:13:73:48:de:0a:f0:0b:74:eb:d6:c2:1e:1a:5d:
f4:ed:e7:82:23:81:dd:e1:4c:f3:bb:ff:c1:94:a7:
d0:5e:1e:25:98:4c:ab:5b:3b:08:d5:ad:4f:a9:c9:
91:9c:ff:6e:81:0c:69:29:2e:97:11:97:bd:6b:10:
73:4d:6b:bd:53:7d:a8:8b:25:d6:4f:98:14:3d:ba:
df:cb:57:37:5b:71:0b:c4:67:54:72:2f:7f:0f:1b:
c3:3c:a9:c1:40:24:31:87:94:a9:5e:59:ed:8f:e0:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:B4:E9:10:20:D9:2B:42:5F:4A:BF:21:7C:9A:4D:56:E3:60:70
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:fd:23:30:ad:7d:5c:81:cb:ef:f0:6f:47:03:53:0d:2f:
02:ad:81:0c:72:6b:06:c9:18:7a:4d:9e:89:ff:32:11:95:0d:
36:0d:95:9e:44:68:a7:44:77:e1:0e:bc:91:6a:2f:9c:b0:58:
b6:57:68:46:e3:02:02:17:23:23:64:ce:71:40:84:35:6e:f4:
fd:e4:16:71:4f:b4:7f:fb:46:f6:04:8c:9b:0d:65:c3:63:ad:
4a:dc:b6:af:a4:29:9f:be:45:06:2e:a8:d5:e8:07:84:75:4c:
d7:bd:e4:49:ed:2e:ad:08:4c:89:13:ef:ed:02:5b:d4:9c:0f:
84:8f:10:f6:86:b5:1f:c2:73:de:d3:21:9e:39:eb:97:7a:6b:
a5:b8:60:f5:83:07:51:e6:63:b6:ec:8b:66:1d:08:ac:a1:68:
29:79:72:11:fb:5d:c9:07:0d:ae:8e:f8:4e:b1:04:57:51:da:
93:f1:2d:84:e6:00:8f:b0:2d:8c:22:27:68:f9:e5:70:1c:e3:
f5:28:c8:bf:6d:d7:8b:6a:77:47:f9:58:66:bb:41:41:05:f0:
74:d8:f7:a5:22:25:7c:e5:0a:97:4e:fb:a1:2a:57:48:bd:b9:
4d:fb:72:e8:53:d3:1a:e7:f7:39:11:df:a7:e0:d4:57:4c:68:
6b:51:56:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wcsnHPacEWBbry/PgGd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj
NGFlMTIwHhcNMjYwMzI5MTgwMTEyWhcNMjYwMzMwMTgwMTEyWjAzMTEwLwYDVQQD
EygyMjdjYjRlOTEwMjBkOTJiNDI1ZjRhYmYyMTdjOWE0ZDU2ZTM2MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48vqXd2o5cmPCO4gnT9SKlvOiZNG
33bO8bqDAQHamySqbhzPgWmHKAZdeKK7Q+94VX8eQYDkYMN47M5xnOkkkoKyPUHe
ZImXyDAkXzWX7Gv2i6g+5pBSm19bgFcjCN0XThuCQUhcKuFBUvxVqQ+oGXmct4i9
fMa4ZEoql5mkGTjOoWamO0OT2FCckJV18QOmM69fjPVCE3NI3grwC3Tr1sIeGl30
7eeCI4Hd4Uzzu//BlKfQXh4lmEyrWzsI1a1PqcmRnP9ugQxpKS6XEZe9axBzTWu9
U32oiyXWT5gUPbrfy1c3W3ELxGdUci9/DxvDPKnBQCQxh5SpXlntj+BQEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ8tOkQINkrQl9KvyF8mk1W42BwMB8GA1UdIwQY
MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt
YmJlYjQ1NTBkOWU2LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2
LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn39IzCt
fVyBy+/wb0cDUw0vAq2BDHJrBskYek2eif8yEZUNNg2VnkRop0R34Q68kWovnLBY
tldoRuMCAhcjI2TOcUCENW70/eQWcU+0f/tG9gSMmw1lw2OtSty2r6Qpn75FBi6o
1egHhHVM173kSe0urQhMiRPv7QJb1JwPhI8Q9oa1H8Jz3tMhnjnrl3prpbhg9YMH
UeZjtuyLZh0IrKFoKXlyEftdyQcNro74TrEEV1Hak/EthOYAj7AtjCInaPnlcBzj
9SjIv23Xi2p3R/lYZrtBQQXwdNj3pSIlfOUKl077oSpXSL25Tfty6FPTGuf3ORHf
p+DUV0xoa1FWJg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:37 2026 by rpki-client