Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: bqs2omkPxro18+iFnCtFjDwmKhGHdrxuWLdHTqSKcHs=
Subject key identifier: 80:C1:2D:7B:C8:D2:4D:08:4E:A3:AD:7A:3A:D7:93:F1:77:5A:9F:60
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019D744379B94A75ABC38F8214BD4C5BB862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 7F
Signing time: Thu 09 Apr 2026 22:01:12 +0000
Manifest this update: Thu 09 Apr 2026 22:01:12 +0000
Manifest next update: Fri 10 Apr 2026 22:01:12 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: bNL0NPfm6PXL81r651Jzi1GaFw01HKD6jo4vKeK0tgU=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:74:43:79:b9:4a:75:ab:c3:8f:82:14:bd:4c:5b:b8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Apr 9 22:01:12 2026 GMT
Not After : Apr 10 22:01:12 2026 GMT
Subject: CN=80c12d7bc8d24d084ea3ad7a3ad793f1775a9f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:76:28:dc:3a:e3:03:69:c9:c8:b6:c8:23:
cc:53:61:ae:f3:af:0e:17:e2:6e:11:64:52:d6:dc:
67:b3:e1:cc:2b:c9:9a:f0:7b:30:20:4b:d1:85:fd:
51:33:1d:51:b6:5a:18:84:22:e2:e7:3b:41:57:5c:
91:06:5a:47:a7:1e:42:7e:ab:d5:a7:7d:31:d4:6b:
2a:62:19:11:04:10:04:52:2a:44:ea:0a:87:0f:45:
55:e0:11:3d:24:a0:05:37:af:44:f7:df:46:d2:12:
c2:f3:1d:58:ce:65:36:1b:40:ab:7f:73:35:b7:7b:
50:67:5e:93:e2:43:78:a0:c0:d1:b4:b1:e4:81:34:
91:3e:d0:d8:03:db:44:04:68:2e:5a:5e:39:97:c1:
c2:a4:29:4a:a9:c0:38:bf:f7:b8:9e:0d:b1:90:7a:
32:70:53:fe:83:a2:35:5a:7e:bf:e4:da:73:61:75:
07:02:ec:0a:91:01:19:b1:46:74:b3:01:c3:4b:19:
4d:62:fd:6c:bf:20:a5:c0:ea:fa:a6:90:9d:ce:a9:
35:d6:df:b6:a6:52:cf:eb:bb:ce:55:9c:cf:74:c0:
6c:69:3e:85:0b:df:57:51:d3:3f:ab:33:de:56:df:
d1:09:60:75:a2:13:2f:72:1c:cf:57:44:27:34:80:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:2D:7B:C8:D2:4D:08:4E:A3:AD:7A:3A:D7:93:F1:77:5A:9F:60
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fa:f8:27:96:86:5d:49:87:b0:5e:36:27:d9:71:4b:06:64:
35:c5:91:b4:49:11:e3:7e:16:c3:27:e9:8d:c7:61:36:68:ec:
9f:df:89:9f:b5:10:ad:a7:0b:1f:1e:20:c5:ea:ec:12:fa:c5:
6e:17:b1:7c:98:9d:7e:db:f7:24:a5:bd:2f:c2:1f:2d:80:e8:
de:02:4a:d4:6f:f0:59:48:7b:00:74:50:31:43:57:d3:17:ab:
2c:01:b7:23:59:c0:e9:99:4d:45:43:33:56:5a:49:30:8a:69:
aa:7c:80:fa:ea:7a:94:b3:77:a1:a5:03:0a:85:eb:a2:85:b3:
ed:31:20:76:d4:ae:81:e2:8a:96:a9:67:90:20:72:9c:e9:03:
6c:8e:fd:c5:05:60:00:9c:29:35:c6:78:f5:0e:be:00:ad:44:
11:37:a0:91:b9:7e:dd:91:45:80:2b:63:c1:c5:d9:85:6a:1b:
4b:96:ad:13:2b:09:e4:96:74:a2:93:b1:4b:11:75:6d:1b:25:
0f:55:cc:c5:f8:36:48:69:ae:bf:7b:18:9e:99:c4:55:d3:7d:
25:8f:1e:4e:d6:60:e1:a3:17:65:c6:c3:a7:f7:7b:0b:0a:d9:
7a:47:26:54:f6:43:ef:28:6f:52:6a:19:dc:99:5a:be:e3:a0:
9a:b1:99:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ10Q3m5SnWrw4+CFL1MW7hiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTE1NGMxYTEwYmUxZTI1YWE2ZDRmOGFlZmE0NmFkMzFm
OWI5NmUwHhcNMjYwNDA5MjIwMTEyWhcNMjYwNDEwMjIwMTEyWjAzMTEwLwYDVQQD
Eyg4MGMxMmQ3YmM4ZDI0ZDA4NGVhM2FkN2EzYWQ3OTNmMTc3NWE5ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS92KNw64wNpyci2yCPMU2Gu868O
F+JuEWRS1txns+HMK8ma8HswIEvRhf1RMx1RtloYhCLi5ztBV1yRBlpHpx5CfqvV
p30x1GsqYhkRBBAEUipE6gqHD0VV4BE9JKAFN69E999G0hLC8x1YzmU2G0Crf3M1
t3tQZ16T4kN4oMDRtLHkgTSRPtDYA9tEBGguWl45l8HCpClKqcA4v/e4ng2xkHoy
cFP+g6I1Wn6/5NpzYXUHAuwKkQEZsUZ0swHDSxlNYv1svyClwOr6ppCdzqk11t+2
plLP67vOVZzPdMBsaT6FC99XUdM/qzPeVt/RCWB1ohMvchzPV0QnNIAWywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDBLXvI0k0ITqOtejrXk/F3Wp9gMB8GA1UdIwQY
MBaAFF5RVMGhC+HiWqbU+K76Rq0x+bluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zYTdlZjgtNTc3MC00NDhhLWExMmMt
ZGM4ZTkwZjYyOTJjLzEvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zYTdlZjgtNTc3MC00NDhhLWExMmMtZGM4ZTkwZjYyOTJj
LzEvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfr4J5aG
XUmHsF42J9lxSwZkNcWRtEkR434WwyfpjcdhNmjsn9+Jn7UQracLHx4gxersEvrF
bhexfJidftv3JKW9L8IfLYDo3gJK1G/wWUh7AHRQMUNX0xerLAG3I1nA6ZlNRUMz
VlpJMIppqnyA+up6lLN3oaUDCoXrooWz7TEgdtSugeKKlqlnkCBynOkDbI79xQVg
AJwpNcZ49Q6+AK1EETegkbl+3ZFFgCtjwcXZhWobS5atEysJ5JZ0opOxSxF1bRsl
D1XMxfg2SGmuv3sYnpnEVdN9JY8eTtZg4aMXZcbDp/d7CwrZekcmVPZD7yhvUmoZ
3JlavuOgmrGZfA==
-----END CERTIFICATE-----
Generated at Fri Apr 10 02:58:35 2026 by rpki-client