Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier: ptwmYKzNAhervURYSYcUp9e8HN3MAuIXjZ63f1EwutM=
Subject key identifier: FC:15:3B:55:A1:74:AA:EA:FE:6F:3D:6E:FA:FB:AD:EF:7C:E9:0A:2E
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial: 019D3865B36BF2F8DCCD5308B4F856C79625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: yXGDc1r+sKl0f8dp0waEr2psYKGnhrmiV0UBMIJuHBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b3:6b:f2:f8:dc:cd:53:08:b4:f8:56:c7:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=fc153b55a174aaeafe6f3d6efafbadef7ce90a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:35:0d:76:c2:e9:d1:1d:74:fc:49:de:5b:
3b:2e:08:15:79:34:49:4c:2b:0f:04:ac:eb:65:7b:
f7:4b:aa:d7:d5:cb:74:c8:a1:83:9c:b7:08:8a:46:
44:e0:f1:7a:9a:93:ff:93:2d:c1:6c:42:56:51:c9:
dd:65:95:98:e1:1e:32:31:e9:65:dd:31:05:14:33:
a6:07:5c:b3:6b:14:0f:87:ba:2b:35:e9:f6:6c:87:
1c:92:30:db:4c:d8:f4:61:d3:75:83:8d:42:9c:74:
dc:e1:6d:7e:ed:f3:1f:90:7c:ca:3e:63:ac:b2:7e:
9c:30:cc:33:e2:9d:05:f8:c4:45:e9:41:50:9f:3c:
7e:f9:fb:2c:7a:2b:0e:71:92:62:cc:0d:84:82:fc:
13:4e:4c:3d:47:01:62:be:82:e1:86:87:5d:96:ec:
99:31:69:9c:a9:17:47:49:6b:1f:c9:54:29:e8:5e:
a4:45:6a:88:23:b7:13:c7:5a:63:2b:15:53:4e:01:
18:89:75:be:12:5f:8f:13:56:66:ea:db:ae:29:65:
5c:15:e3:2b:a1:ed:65:c5:39:0e:b7:1d:bc:c5:17:
08:78:08:ce:56:38:31:93:bb:17:a2:51:90:c0:67:
83:a8:76:49:d9:15:83:58:95:cf:48:5d:9b:b7:4f:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:15:3B:55:A1:74:AA:EA:FE:6F:3D:6E:FA:FB:AD:EF:7C:E9:0A:2E
X509v3 Authority Key Identifier:
keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:66:24:0d:2b:6d:19:33:d4:c6:73:5b:a8:6b:9b:70:87:73:
57:70:0f:11:02:1d:1a:d1:01:35:db:61:eb:bb:17:fe:e6:b1:
25:7c:ea:1b:64:e5:82:2c:75:c2:ee:ca:8b:b4:9d:ef:0b:ec:
7b:8d:2c:cf:ec:41:52:33:a2:81:64:8b:f3:2c:ea:6c:75:31:
51:c7:f5:aa:a6:16:61:c3:94:0e:23:2a:dc:cd:14:b8:0b:8e:
1e:68:6e:8e:b6:89:8a:77:49:8e:0d:09:c4:4e:a9:b9:b3:8c:
f9:1b:9e:92:48:1e:f1:b8:57:c0:c6:75:9e:c7:ae:47:73:a3:
b7:91:fe:e7:61:84:8e:74:f2:65:24:05:bf:21:58:1c:c3:c3:
97:89:bf:65:90:50:a9:f2:e7:3a:c2:96:41:a9:ee:54:1c:ea:
d4:f0:20:91:2e:ad:17:c5:b7:ce:55:2e:05:f1:74:e1:be:43:
f8:40:25:a8:1a:ab:44:9a:30:14:92:8c:c7:e4:33:06:62:a6:
9a:a7:59:bb:c3:44:4e:94:d3:d4:c5:92:aa:2c:8f:01:36:ec:
72:58:32:5a:f1:be:40:6e:90:e8:bc:b9:92:49:85:4c:0c:e8:
71:d4:f9:78:05:53:05:cb:a0:74:e2:e3:25:76:46:7a:51:78:
9e:e8:cd:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZbNr8vjczVMItPhWx5YlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2FhNDQ3ZjA5YmNiMGRkZjhhZmMxMGM3M2U4ZTkxYmJm
MDhlNTUwHhcNMjYwMzI5MDcwMTIyWhcNMjYwMzMwMDcwMTIyWjAzMTEwLwYDVQQD
EyhmYzE1M2I1NWExNzRhYWVhZmU2ZjNkNmVmYWZiYWRlZjdjZTkwYTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliA1DXbC6dEddPxJ3ls7LggVeTRJ
TCsPBKzrZXv3S6rX1ct0yKGDnLcIikZE4PF6mpP/ky3BbEJWUcndZZWY4R4yMell
3TEFFDOmB1yzaxQPh7orNen2bIcckjDbTNj0YdN1g41CnHTc4W1+7fMfkHzKPmOs
sn6cMMwz4p0F+MRF6UFQnzx++fsseisOcZJizA2EgvwTTkw9RwFivoLhhoddluyZ
MWmcqRdHSWsfyVQp6F6kRWqII7cTx1pjKxVTTgEYiXW+El+PE1Zm6tuuKWVcFeMr
oe1lxTkOtx28xRcIeAjOVjgxk7sXolGQwGeDqHZJ2RWDWJXPSF2bt0+ylwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwVO1WhdKrq/m89bvr7re986QouMB8GA1UdIwQY
MBaAFF7KpEfwm8sN34r8EMc+jpG78I5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDIt
OTNjNDRhYzg0MTRlLzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDItOTNjNDRhYzg0MTRl
LzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2YkDStt
GTPUxnNbqGubcIdzV3APEQIdGtEBNdth67sX/uaxJXzqG2Tlgix1wu7Ki7Sd7wvs
e40sz+xBUjOigWSL8yzqbHUxUcf1qqYWYcOUDiMq3M0UuAuOHmhujraJindJjg0J
xE6pubOM+Ruekkge8bhXwMZ1nseuR3Ojt5H+52GEjnTyZSQFvyFYHMPDl4m/ZZBQ
qfLnOsKWQanuVBzq1PAgkS6tF8W3zlUuBfF04b5D+EAlqBqrRJowFJKMx+QzBmKm
mqdZu8NETpTT1MWSqiyPATbsclgyWvG+QG6Q6Ly5kkmFTAzocdT5eAVTBcugdOLj
JXZGelF4nujNug==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:00 2026 by rpki-client