Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: P2C62X31fDJt7EjeyVXdZPB9yzNgx1NqGWUUXxBPQgo=
Subject key identifier: 71:F4:B5:ED:7D:B5:B5:81:21:46:D9:4F:95:44:57:D3:17:DC:30:B2
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 019D38D2F622C96C6C234F8BD9E029744251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 1476
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: 6zQ97iC+1Pqn/V8H2XJc5wHpNr6aq0SHtOOyIvtD/Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f6:22:c9:6c:6c:23:4f:8b:d9:e0:29:74:42:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=71f4b5ed7db5b5812146d94f954457d317dc30b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:d1:71:b3:1c:f3:19:a0:aa:4b:6b:13:2a:
8b:63:81:4d:1b:3c:11:d3:e4:c4:22:40:3a:fc:e4:
02:5f:22:6f:d9:39:6f:f2:19:d3:b6:f8:f3:e2:3e:
14:32:8b:d3:33:bb:6a:5a:a8:67:97:1c:7b:31:84:
33:d0:68:e7:8e:a3:80:6d:cd:c3:89:76:32:2c:e6:
73:dd:c9:0d:43:11:6b:e7:d8:08:eb:4c:2b:9a:c6:
6e:47:c4:aa:33:14:8e:1b:e9:bf:a3:e6:71:8c:be:
94:3d:a9:c8:34:b7:38:ee:13:3a:4c:26:04:d9:ed:
06:37:52:66:83:90:c3:32:eb:86:8a:6d:76:94:85:
86:d1:f3:af:1c:37:55:f5:bd:ca:1f:ce:67:7e:12:
94:69:5f:13:dd:bb:ed:0c:9f:9f:1f:e0:04:9f:9c:
7a:68:b8:a2:3a:a5:6d:cb:4f:1e:b9:c6:aa:e7:90:
f6:fc:e6:73:ab:36:10:b0:dc:37:76:8e:c5:29:99:
c8:d6:76:34:ff:e3:12:70:bd:99:af:73:cb:c9:0a:
69:b2:11:c4:55:50:49:57:22:44:2b:6a:64:a3:ab:
5f:1b:b5:e2:f8:45:49:f7:cb:96:62:e0:55:0c:ef:
76:40:c4:66:5d:4c:68:74:3e:ba:6f:d4:36:e8:b0:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F4:B5:ED:7D:B5:B5:81:21:46:D9:4F:95:44:57:D3:17:DC:30:B2
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cd:07:2f:06:79:27:03:6c:b0:d9:53:b8:f5:9f:cd:af:84:
ec:68:1c:96:10:a9:c2:79:0e:10:04:f6:29:6f:fc:77:fa:03:
81:50:48:10:1d:e0:cd:45:93:fe:67:48:03:75:de:a8:16:79:
d5:db:37:d7:33:6b:be:79:3c:02:66:2a:fd:b3:ac:5a:b7:25:
73:1d:68:4d:2b:d7:ea:42:22:60:74:2a:ed:0b:22:46:fb:0d:
34:0d:94:0c:d1:2f:41:de:c4:bc:30:40:9b:89:d1:8d:b5:1d:
4f:bc:13:66:bc:cb:ff:bf:a9:63:b8:ae:88:54:66:f2:04:47:
07:9d:b8:77:db:89:dd:ce:af:17:b2:09:a6:1f:29:98:63:e7:
94:bb:ac:7a:41:f6:9c:7b:81:2b:59:5b:1c:ae:3f:a0:e5:ef:
df:b7:bf:e3:82:c9:a7:06:cc:a4:d6:02:12:f3:2b:fa:c4:35:
8c:05:c3:42:5c:51:8b:83:32:b8:63:34:1d:9b:1d:d2:1f:f2:
0f:ec:dd:7c:a4:5b:5d:eb:9d:c9:05:77:3e:51:80:cd:77:9b:
ae:23:8a:1a:29:82:13:f5:34:b5:eb:7e:40:c9:08:bc:b4:4a:
58:8c:c8:74:b6:06:27:7a:a1:63:aa:a8:7a:ed:51:83:e9:e4:
69:31:b7:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040vYiyWxsI0+L2eApdEJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZWE4MTRhOTkyYTcxZjVhMmE5YmVmY2VmNjZmYzYyMjBm
MTc4ZjcwHhcNMjYwMzI5MDkwMDQyWhcNMjYwMzMwMDkwMDQyWjAzMTEwLwYDVQQD
Eyg3MWY0YjVlZDdkYjViNTgxMjE0NmQ5NGY5NTQ0NTdkMzE3ZGMzMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkofRcbMc8xmgqktrEyqLY4FNGzwR
0+TEIkA6/OQCXyJv2Tlv8hnTtvjz4j4UMovTM7tqWqhnlxx7MYQz0GjnjqOAbc3D
iXYyLOZz3ckNQxFr59gI60wrmsZuR8SqMxSOG+m/o+ZxjL6UPanINLc47hM6TCYE
2e0GN1Jmg5DDMuuGim12lIWG0fOvHDdV9b3KH85nfhKUaV8T3bvtDJ+fH+AEn5x6
aLiiOqVty08eucaq55D2/OZzqzYQsNw3do7FKZnI1nY0/+MScL2Zr3PLyQppshHE
VVBJVyJEK2pko6tfG7Xi+EVJ98uWYuBVDO92QMRmXUxodD66b9Q26LAOhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH0te19tbWBIUbZT5VEV9MX3DCyMB8GA1UdIwQY
MBaAFMbqgUqZKnH1oqm+/O9m/GIg8Xj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjY2NGEtM2JiZS00OTM5LWE1ZTAt
YWZhNjNkOGZhNjM4LzEveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kZjY2NGEtM2JiZS00OTM5LWE1ZTAtYWZhNjNkOGZhNjM4
LzEveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAec0HLwZ5
JwNssNlTuPWfza+E7GgclhCpwnkOEAT2KW/8d/oDgVBIEB3gzUWT/mdIA3XeqBZ5
1ds31zNrvnk8AmYq/bOsWrclcx1oTSvX6kIiYHQq7QsiRvsNNA2UDNEvQd7EvDBA
m4nRjbUdT7wTZrzL/7+pY7iuiFRm8gRHB524d9uJ3c6vF7IJph8pmGPnlLusekH2
nHuBK1lbHK4/oOXv37e/44LJpwbMpNYCEvMr+sQ1jAXDQlxRi4MyuGM0HZsd0h/y
D+zdfKRbXeudyQV3PlGAzXebriOKGimCE/U0tet+QMkIvLRKWIzIdLYGJ3qhY6qo
eu1Rg+nkaTG3yQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:56 2026 by rpki-client