Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: +dYTFvUjYXvcp8Sqn4ZuoSURZFuntiMs5oXBs/OCgp4=
Subject key identifier: F2:5D:1F:D6:44:B3:08:3E:76:04:8D:DE:9D:D8:74:AF:61:07:C0:B6
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 019D3940E291C7C0AA2C8E9BD9D43F0981CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 0789
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: lD5l74gVd9wXDKAeeggnK2TpRO/5Pm1FKqpHOVHNIGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e2:91:c7:c0:aa:2c:8e:9b:d9:d4:3f:09:81:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=f25d1fd644b3083e76048dde9dd874af6107c0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:c6:e6:d6:84:3c:b7:7e:0c:3b:de:a6:4f:
22:01:05:94:d8:96:34:58:1c:ac:65:52:16:b0:fc:
d9:35:1d:2f:2b:45:5b:81:91:bb:77:66:db:e9:1c:
1e:e5:7a:d2:7f:20:2d:83:5b:68:f5:1c:7d:13:b3:
da:d1:79:9a:49:e1:fc:65:69:4f:8b:d5:c9:9b:c2:
aa:fa:e6:29:40:74:a4:a5:2e:c0:d1:4f:73:7c:41:
7e:29:55:e7:71:be:56:bd:af:42:66:30:ae:90:35:
e9:cc:5d:26:1e:87:76:97:46:97:58:3d:e1:ee:21:
4f:ef:75:f6:02:4e:4c:04:52:f7:10:c6:12:34:4f:
17:d4:35:a8:8e:05:29:96:9b:15:3a:e1:66:4c:b6:
fe:ce:d8:b6:46:c3:8b:74:66:ca:69:8c:ee:12:bb:
3a:a7:1c:c1:ae:f3:61:e3:e7:b8:38:30:06:ff:3e:
d8:74:f1:61:0c:55:a5:ea:47:4e:61:93:b4:eb:24:
01:69:b1:54:2c:b7:ea:13:4f:b6:90:d7:6f:24:3d:
d2:0e:74:1f:1b:c3:10:92:2e:21:3c:e4:d4:86:5e:
4c:83:f0:ca:15:89:d5:3f:0c:0d:fc:59:07:19:71:
75:fd:92:e3:26:16:85:26:ba:f7:27:04:04:01:c5:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5D:1F:D6:44:B3:08:3E:76:04:8D:DE:9D:D8:74:AF:61:07:C0:B6
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d0:e7:db:c1:10:82:30:19:06:f6:10:ab:72:82:11:ba:d9:
09:53:a8:4d:ba:1b:db:bb:60:45:44:5b:a3:17:00:1d:6d:63:
7a:73:b5:74:e2:19:1c:97:2a:a9:5a:ed:3f:14:2c:a6:b6:a4:
5a:a3:d7:53:4c:cf:f4:e0:bf:34:73:43:9f:b7:d1:c6:30:52:
88:ee:de:1d:a5:7a:53:7b:59:08:f7:e2:54:b7:ed:a6:5e:9a:
91:82:f7:ff:13:24:b2:52:f7:0e:43:a0:20:22:fe:ef:a8:35:
46:db:1f:57:c8:d1:04:fe:75:10:a0:b1:7a:99:53:1f:0f:da:
4f:70:6a:71:7e:1e:5a:cd:2c:6f:fa:25:41:42:7a:65:82:68:
5f:f5:bf:15:5c:51:f3:bc:df:c3:33:f5:7f:b4:9d:1d:7b:d9:
b5:39:47:b1:b3:47:f0:c6:69:2c:69:77:b2:39:2a:0e:b0:7f:
56:5c:dd:c0:ac:db:64:4d:1d:05:f5:7a:20:47:cb:ea:02:4f:
10:a1:9d:ed:1e:77:3d:b9:d8:a8:8b:f9:04:ce:4f:69:de:1a:
d3:7b:95:50:5d:f6:31:d1:03:0b:54:9c:4c:e5:c6:87:57:48:
09:c7:e5:35:a3:48:cf:be:93:bb:a9:a5:51:af:5d:9b:e4:1a:
22:c5:9e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QOKRx8CqLI6b2dQ/CYHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWM1OGEwMDI0OTVkMDNhZDVkOWQxMWRkMTQyMWYxOTUx
Mjg1MjQwHhcNMjYwMzI5MTEwMDQ2WhcNMjYwMzMwMTEwMDQ2WjAzMTEwLwYDVQQD
EyhmMjVkMWZkNjQ0YjMwODNlNzYwNDhkZGU5ZGQ4NzRhZjYxMDdjMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuvG5taEPLd+DDvepk8iAQWU2JY0
WBysZVIWsPzZNR0vK0VbgZG7d2bb6Rwe5XrSfyAtg1to9Rx9E7Pa0XmaSeH8ZWlP
i9XJm8Kq+uYpQHSkpS7A0U9zfEF+KVXncb5Wva9CZjCukDXpzF0mHod2l0aXWD3h
7iFP73X2Ak5MBFL3EMYSNE8X1DWojgUplpsVOuFmTLb+zti2RsOLdGbKaYzuErs6
pxzBrvNh4+e4ODAG/z7YdPFhDFWl6kdOYZO06yQBabFULLfqE0+2kNdvJD3SDnQf
G8MQki4hPOTUhl5Mg/DKFYnVPwwN/FkHGXF1/ZLjJhaFJrr3JwQEAcXzTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJdH9ZEswg+dgSN3p3YdK9hB8C2MB8GA1UdIwQY
MBaAFK3sWKACSV0DrV2dEd0UIfGVEoUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgt
NzQ1ZTUwMGQ4ZmNmLzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgtNzQ1ZTUwMGQ4ZmNm
LzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdDn28EQ
gjAZBvYQq3KCEbrZCVOoTbob27tgRURboxcAHW1jenO1dOIZHJcqqVrtPxQsprak
WqPXU0zP9OC/NHNDn7fRxjBSiO7eHaV6U3tZCPfiVLftpl6akYL3/xMkslL3DkOg
ICL+76g1RtsfV8jRBP51EKCxeplTHw/aT3BqcX4eWs0sb/olQUJ6ZYJoX/W/FVxR
87zfwzP1f7SdHXvZtTlHsbNH8MZpLGl3sjkqDrB/VlzdwKzbZE0dBfV6IEfL6gJP
EKGd7R53PbnYqIv5BM5Pad4a03uVUF32MdEDC1ScTOXGh1dICcflNaNIz76Tu6ml
Ua9dm+QaIsWe7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:50 2026 by rpki-client