Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6f24-e71e-49fb-85de-0e48cf6c83b3/1/XAxSlmTBV9klPUyzcGVDtZ7e4FA.mft
File: XAxSlmTBV9klPUyzcGVDtZ7e4FA.mft (raw, json)
Hash identifier: faONn4MxVKWZstLZA0bZACD7wm94DysCcZHipdi89BE=
Subject key identifier: 56:BC:2D:4E:98:89:3C:17:D9:E3:E3:55:10:21:7A:80:15:45:A5:55
Authority key identifier: 5C:0C:52:96:64:C1:57:D9:25:3D:4C:B3:70:65:43:B5:9E:DE:E0:50
Certificate issuer: /CN=5c0c529664c157d9253d4cb3706543b59edee050
Certificate serial: 019D3A53DEE9BE848EAC7F07B7C4375717C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAxSlmTBV9klPUyzcGVDtZ7e4FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6f24-e71e-49fb-85de-0e48cf6c83b3/1/XAxSlmTBV9klPUyzcGVDtZ7e4FA.mft
Manifest number: 51
Signing time: Sun 29 Mar 2026 16:01:08 +0000
Manifest this update: Sun 29 Mar 2026 16:01:08 +0000
Manifest next update: Mon 30 Mar 2026 16:01:08 +0000
Files and hashes: 1: XAxSlmTBV9klPUyzcGVDtZ7e4FA.crl (hash: 8aejZdZPr/ddFsK+afQwoPOi+7Mxld8IM59FYTjHW6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6f24-e71e-49fb-85de-0e48cf6c83b3/1/XAxSlmTBV9klPUyzcGVDtZ7e4FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6f24-e71e-49fb-85de-0e48cf6c83b3/1/XAxSlmTBV9klPUyzcGVDtZ7e4FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAxSlmTBV9klPUyzcGVDtZ7e4FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:de:e9:be:84:8e:ac:7f:07:b7:c4:37:57:17:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c0c529664c157d9253d4cb3706543b59edee050
Validity
Not Before: Mar 29 16:01:08 2026 GMT
Not After : Mar 30 16:01:08 2026 GMT
Subject: CN=56bc2d4e98893c17d9e3e35510217a801545a555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:5d:f5:c5:a2:df:72:d2:18:42:d4:96:34:
64:0f:d0:ca:e3:05:60:c1:df:bd:31:2e:ea:23:b0:
82:6a:bf:23:23:d5:1c:a2:0e:c3:41:2c:ab:8e:90:
64:40:46:d6:c7:93:97:be:5c:0a:87:a1:e1:82:93:
bc:2c:3f:e4:1a:4b:82:50:9d:9a:df:bc:33:30:6a:
49:d3:d8:78:ff:ae:2f:3b:35:3f:77:f1:31:4c:38:
97:99:e2:6a:16:26:15:52:12:1a:68:1d:75:d0:ac:
dd:a0:a7:58:e0:01:21:7e:10:33:86:cd:ae:e7:c4:
3e:eb:fa:c8:21:d7:15:0f:bc:dc:12:f3:eb:b5:46:
27:20:36:26:bf:78:cb:cc:f5:1d:82:4d:c0:52:a5:
27:ad:c5:e1:9f:c7:0b:d4:6d:cd:15:54:99:08:72:
11:ff:95:0b:42:b7:c0:e6:fa:18:84:2f:6e:d9:14:
64:22:1c:a4:e1:eb:03:c6:e6:d6:d7:01:03:e4:ae:
09:c4:1b:fb:4c:4c:e7:89:7d:0d:f0:55:e0:25:77:
36:3d:6f:de:46:fa:7a:53:8f:4c:02:bb:e7:83:af:
4e:dd:0f:68:e6:b0:f9:66:e3:30:da:70:7d:0b:ca:
4e:ec:97:08:a6:91:87:f8:ce:6e:60:05:cb:d0:99:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:2D:4E:98:89:3C:17:D9:E3:E3:55:10:21:7A:80:15:45:A5:55
X509v3 Authority Key Identifier:
keyid:5C:0C:52:96:64:C1:57:D9:25:3D:4C:B3:70:65:43:B5:9E:DE:E0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAxSlmTBV9klPUyzcGVDtZ7e4FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6f24-e71e-49fb-85de-0e48cf6c83b3/1/XAxSlmTBV9klPUyzcGVDtZ7e4FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6f24-e71e-49fb-85de-0e48cf6c83b3/1/XAxSlmTBV9klPUyzcGVDtZ7e4FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:da:ae:1d:3b:da:59:ff:77:61:d4:62:36:5a:6e:de:b0:6a:
be:31:e8:f7:2f:20:92:96:a1:93:82:fd:a4:2c:70:5a:52:07:
d5:31:52:61:f0:83:2b:36:eb:9b:f6:da:80:a7:79:7f:03:f0:
90:52:00:54:ea:0a:60:a7:96:e2:2f:34:24:c3:77:f9:df:c5:
8e:be:6a:bf:d8:3a:bb:94:0d:5d:af:bd:ba:4e:cf:f5:21:ac:
57:3d:6f:23:62:da:f9:c0:f6:40:9a:68:49:1e:fe:dd:5e:71:
ec:ea:65:27:ba:a3:a7:01:85:b5:72:27:2d:ee:cb:d3:f2:da:
67:a1:d1:9c:1c:86:b4:a1:b2:46:48:ec:75:67:e0:82:f7:a2:
ec:77:7c:54:46:c7:3b:c8:60:73:f3:9e:2d:d3:c6:b2:9e:ec:
81:8a:82:52:5c:06:aa:e7:f0:f5:7f:81:45:28:0f:92:8d:5f:
fb:86:ae:a8:22:8e:13:fc:a2:6e:2f:3c:a9:cb:fe:08:9d:49:
2b:e0:2d:27:25:0b:b8:65:86:02:15:f9:c9:8d:56:7e:e7:36:
9a:94:f1:36:6f:e4:64:81:b8:bb:89:ac:41:bb:f4:5b:37:fb:
d0:fa:e7:80:18:98:f9:5a:08:e6:a0:33:77:64:07:8c:1c:94:
77:ed:5f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U97pvoSOrH8Ht8Q3VxfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMGM1Mjk2NjRjMTU3ZDkyNTNkNGNiMzcwNjU0M2I1OWVk
ZWUwNTAwHhcNMjYwMzI5MTYwMTA4WhcNMjYwMzMwMTYwMTA4WjAzMTEwLwYDVQQD
Eyg1NmJjMmQ0ZTk4ODkzYzE3ZDllM2UzNTUxMDIxN2E4MDE1NDVhNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ld9cWi33LSGELUljRkD9DK4wVg
wd+9MS7qI7CCar8jI9Ucog7DQSyrjpBkQEbWx5OXvlwKh6HhgpO8LD/kGkuCUJ2a
37wzMGpJ09h4/64vOzU/d/ExTDiXmeJqFiYVUhIaaB110KzdoKdY4AEhfhAzhs2u
58Q+6/rIIdcVD7zcEvPrtUYnIDYmv3jLzPUdgk3AUqUnrcXhn8cL1G3NFVSZCHIR
/5ULQrfA5voYhC9u2RRkIhyk4esDxubW1wED5K4JxBv7TEzniX0N8FXgJXc2PW/e
Rvp6U49MArvng69O3Q9o5rD5ZuMw2nB9C8pO7JcIppGH+M5uYAXL0JkpBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa8LU6YiTwX2ePjVRAheoAVRaVVMB8GA1UdIwQY
MBaAFFwMUpZkwVfZJT1Ms3BlQ7We3uBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEF4U2xtVEJWOWtsUFV5emNHVkR0WjdlNEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYTZmMjQtZTcxZS00OWZiLTg1ZGUt
MGU0OGNmNmM4M2IzLzEvWEF4U2xtVEJWOWtsUFV5emNHVkR0WjdlNEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yYTZmMjQtZTcxZS00OWZiLTg1ZGUtMGU0OGNmNmM4M2Iz
LzEvWEF4U2xtVEJWOWtsUFV5emNHVkR0WjdlNEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdquHTva
Wf93YdRiNlpu3rBqvjHo9y8gkpahk4L9pCxwWlIH1TFSYfCDKzbrm/bagKd5fwPw
kFIAVOoKYKeW4i80JMN3+d/Fjr5qv9g6u5QNXa+9uk7P9SGsVz1vI2La+cD2QJpo
SR7+3V5x7OplJ7qjpwGFtXInLe7L0/LaZ6HRnByGtKGyRkjsdWfggvei7Hd8VEbH
O8hgc/OeLdPGsp7sgYqCUlwGqufw9X+BRSgPko1f+4auqCKOE/yibi88qcv+CJ1J
K+AtJyULuGWGAhX5yY1Wfuc2mpTxNm/kZIG4u4msQbv0Wzf70PrngBiY+VoI5qAz
d2QHjByUd+1fig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:46 2026 by rpki-client