Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
File: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft (raw, json)
Hash identifier: j+JNcu+Nznty6DNbFYiNxjscWpJ4S7haoVGlcFxUKCY=
Subject key identifier: CE:27:33:85:92:6F:48:27:B4:35:88:BD:05:DF:5C:6C:CB:C3:6D:A2
Authority key identifier: 5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
Certificate issuer: /CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Certificate serial: 019FA14D7E696145007650CD312340F43349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
Manifest number: 0FA3
Signing time: Mon 27 Jul 2026 02:00:38 +0000
Manifest this update: Mon 27 Jul 2026 02:00:38 +0000
Manifest next update: Tue 28 Jul 2026 02:00:38 +0000
Files and hashes: 1: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl (hash: HQIPKvXRxUig8BAEPCO9tY9wQAzTydZMik0mznC6FYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:7e:69:61:45:00:76:50:cd:31:23:40:f4:33:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Validity
Not Before: Jul 27 02:00:38 2026 GMT
Not After : Jul 28 02:00:38 2026 GMT
Subject: CN=ce273385926f4827b43588bd05df5c6ccbc36da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:93:c9:2d:c4:56:13:55:07:68:c8:48:13:
12:37:f4:f1:04:d3:53:36:48:7d:16:a2:ff:2e:d3:
27:aa:12:55:e6:7d:0d:e5:b5:29:63:f1:74:11:49:
19:09:30:03:a8:21:c6:b1:a2:3c:a7:72:79:3e:0d:
bb:4b:38:c5:d5:e8:e1:b0:26:b0:64:9d:51:b5:4b:
02:17:d3:d7:aa:fc:c1:e9:7d:c7:c7:68:18:6d:77:
86:a2:42:6d:30:4a:bb:98:58:56:b8:1f:0e:70:c9:
2a:44:bb:3a:fd:6d:75:a8:77:ee:e0:13:6e:97:84:
74:97:82:b2:d7:0c:01:9a:55:b8:dc:1c:cb:a5:05:
8d:17:ea:28:9c:d8:88:8d:32:9c:bf:3f:42:39:57:
9a:87:f5:27:4c:0c:54:ab:79:dd:3e:bb:a7:a4:a9:
92:8f:d9:0c:62:5d:79:c4:22:10:66:62:57:b0:fe:
20:bc:01:c8:3a:4f:7b:c1:6a:b0:f7:64:90:cf:fb:
20:1d:ff:b0:31:9a:de:83:e7:a6:74:b6:2a:4b:8e:
e2:08:4b:28:b4:6d:30:71:3b:05:ba:b1:84:cf:fd:
3a:33:40:da:f4:33:d9:84:f8:40:35:c4:49:6b:4b:
1c:84:c3:46:a4:7e:76:0c:e4:32:6c:41:e5:7c:cf:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:27:33:85:92:6F:48:27:B4:35:88:BD:05:DF:5C:6C:CB:C3:6D:A2
X509v3 Authority Key Identifier:
keyid:5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:27:22:fd:3b:cd:48:4e:5a:64:3c:44:e6:2d:d1:d7:37:29:
5d:25:a7:4e:59:29:5f:96:19:8a:c3:1d:78:a9:ff:84:72:95:
4b:23:29:ef:85:dc:28:77:3a:15:aa:38:e2:ce:4b:ca:52:82:
aa:4c:fc:52:57:f1:d2:c6:50:ed:8b:72:b9:2d:96:5d:49:2a:
e9:df:b2:6a:d0:d3:82:fc:bc:45:e1:3f:02:af:38:76:62:17:
5f:75:11:65:34:79:c5:c6:b2:f7:ac:7b:76:7b:57:54:85:94:
36:df:4e:93:49:51:49:23:05:86:0b:72:3a:83:5e:0e:43:55:
5f:0a:6f:a6:b0:a3:5d:99:ef:f4:9d:ef:98:6e:ee:90:43:ed:
2f:d0:ca:9f:71:f4:e7:20:05:f0:ef:59:ba:40:b3:58:23:fd:
64:df:01:64:86:7b:cd:aa:8c:95:8f:8e:67:69:9e:73:60:05:
4c:ae:34:a3:f4:41:23:da:fb:c4:5e:2d:0b:df:9d:4b:ce:01:
be:8f:e7:06:ce:c3:81:bc:fc:c3:c7:72:7d:72:76:6a:5c:e5:
e4:1a:01:3e:96:57:ac:4a:cf:7d:a9:82:92:6f:9d:03:14:d5:
20:2f:c8:a2:3b:e0:c2:74:75:e1:f0:65:a6:88:bd:ba:1f:ed:
1c:5a:99:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTX5pYUUAdlDNMSNA9DNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzhlYjI5NTk1NjA3ZWQ0ZDhmNGQ5YmYwNmNiYTQyOTky
Njg2NGEwHhcNMjYwNzI3MDIwMDM4WhcNMjYwNzI4MDIwMDM4WjAzMTEwLwYDVQQD
EyhjZTI3MzM4NTkyNmY0ODI3YjQzNTg4YmQwNWRmNWM2Y2NiYzM2ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT6TyS3EVhNVB2jISBMSN/TxBNNT
Nkh9FqL/LtMnqhJV5n0N5bUpY/F0EUkZCTADqCHGsaI8p3J5Pg27SzjF1ejhsCaw
ZJ1RtUsCF9PXqvzB6X3Hx2gYbXeGokJtMEq7mFhWuB8OcMkqRLs6/W11qHfu4BNu
l4R0l4Ky1wwBmlW43BzLpQWNF+oonNiIjTKcvz9COVeah/UnTAxUq3ndPrunpKmS
j9kMYl15xCIQZmJXsP4gvAHIOk97wWqw92SQz/sgHf+wMZreg+emdLYqS47iCEso
tG0wcTsFurGEz/06M0Da9DPZhPhANcRJa0schMNGpH52DOQybEHlfM9hUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4nM4WSb0gntDWIvQXfXGzLw22iMB8GA1UdIwQY
MBaAFF046ylZVgftTY9Nm/BsukKZJoZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRqcktWbFdCLTFOajAyYjhHeTZRcGttaGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jN2JhOTUtOTE1My00NDE0LWFiMGMt
ZDI0YjRhNWIxY2RjLzEvWFRqcktWbFdCLTFOajAyYjhHeTZRcGttaGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jN2JhOTUtOTE1My00NDE0LWFiMGMtZDI0YjRhNWIxY2Rj
LzEvWFRqcktWbFdCLTFOajAyYjhHeTZRcGttaGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwici/TvN
SE5aZDxE5i3R1zcpXSWnTlkpX5YZisMdeKn/hHKVSyMp74XcKHc6Fao44s5LylKC
qkz8Ulfx0sZQ7YtyuS2WXUkq6d+yatDTgvy8ReE/Aq84dmIXX3URZTR5xcay96x7
dntXVIWUNt9Ok0lRSSMFhgtyOoNeDkNVXwpvprCjXZnv9J3vmG7ukEPtL9DKn3H0
5yAF8O9ZukCzWCP9ZN8BZIZ7zaqMlY+OZ2mec2AFTK40o/RBI9r7xF4tC9+dS84B
vo/nBs7Dgbz8w8dyfXJ2alzl5BoBPpZXrErPfamCkm+dAxTVIC/IojvgwnR14fBl
poi9uh/tHFqZkQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:33 2026 by rpki-client