Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
File: mdXL9__sUlSnHvex7fem12x1liU.mft (raw, json)
Hash identifier: ISuwaEIk5/cPEQOy2+BZnNOFuJiz6iI/CCWVLQxkA/Q=
Subject key identifier: 71:EC:7F:C8:3F:FE:15:15:3F:F8:E2:D1:8C:36:67:4C:D8:E9:21:C9
Authority key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
Certificate issuer: /CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Certificate serial: 019D3866AACF32FE5345D6933AD5943BEF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:02:25 +0000
Manifest this update: Sun 29 Mar 2026 07:02:25 +0000
Manifest next update: Mon 30 Mar 2026 07:02:25 +0000
Files and hashes: 1: mdXL9__sUlSnHvex7fem12x1liU.crl (hash: TMimQvtFofUerOsFm+lUmvl2fL4BPIgXXB4UEGhIvWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:aa:cf:32:fe:53:45:d6:93:3a:d5:94:3b:ef:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Validity
Not Before: Mar 29 07:02:25 2026 GMT
Not After : Mar 30 07:02:25 2026 GMT
Subject: CN=71ec7fc83ffe15153ff8e2d18c36674cd8e921c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:8b:82:b6:9f:e2:4c:e6:f7:2e:d5:33:5b:
c4:32:e3:d5:ae:f7:4a:ba:5d:6f:a8:5e:ac:4c:4f:
85:34:e7:c2:c4:f6:0c:1a:3d:f3:2b:50:5c:cb:61:
fa:35:73:5e:6d:7a:14:c5:ed:74:f2:0a:cb:a0:96:
09:4d:0e:e7:0c:ca:13:4f:48:1d:20:34:c9:df:0a:
1e:28:29:29:00:01:d7:97:5f:bc:96:b9:fb:3f:10:
12:8f:51:0f:11:2e:6c:5f:9b:ce:3e:92:ec:23:93:
93:9b:6a:42:dd:3d:5f:82:cf:12:ca:27:fa:88:ae:
26:71:9c:aa:74:ac:e9:49:8a:fd:12:d7:a6:de:b3:
90:56:43:21:f7:42:b4:26:c9:7a:d9:0b:4d:cb:85:
61:1a:83:dd:86:1f:7b:99:8d:0f:27:d5:2b:6c:f3:
23:cd:df:90:6f:78:64:57:08:3c:72:8c:a4:b4:98:
c3:32:8c:04:a4:d1:e4:d7:29:c6:84:61:90:32:cb:
63:c3:84:f1:ea:7d:d0:9a:cf:fd:4b:51:2f:09:ad:
f9:98:d6:4c:75:88:8c:13:7f:06:09:81:8e:ad:24:
44:af:81:15:61:28:c0:03:a3:c9:97:e0:10:bf:02:
c6:8d:28:29:c3:15:7e:b8:66:e7:51:ee:6b:6c:25:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EC:7F:C8:3F:FE:15:15:3F:F8:E2:D1:8C:36:67:4C:D8:E9:21:C9
X509v3 Authority Key Identifier:
keyid:99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:96:5f:df:5a:2a:ca:75:fb:ef:b0:69:87:55:c1:21:ff:c8:
ad:4f:a4:b3:17:19:26:18:36:23:78:ea:04:46:82:04:c7:02:
90:3d:ba:1a:5c:9e:7d:0c:cf:e9:63:2f:7e:cc:91:ec:ee:53:
ad:0a:a7:8f:a5:e3:e3:83:58:d6:76:be:62:a5:9e:33:71:56:
cd:12:09:c6:2b:60:37:f5:a3:09:98:e4:89:88:e4:78:cf:94:
ec:b7:4e:6c:da:5d:16:6e:76:a5:76:a3:be:96:44:6e:e0:ce:
59:18:f0:1d:d1:59:22:28:c2:74:bc:a9:e1:8c:99:a9:62:d0:
be:36:3f:f8:4c:b2:5d:2d:a2:cc:c8:77:87:94:f8:f3:f3:52:
79:06:c4:39:ee:13:14:5a:82:fd:68:b2:7b:37:bd:af:18:14:
f9:7a:14:66:66:ed:74:98:65:4e:85:40:e9:21:47:fb:52:bb:
69:de:ad:9d:ab:d9:b9:37:57:1c:85:f7:9e:2b:0f:d5:83:e3:
da:bf:8e:f6:96:88:91:f9:be:f5:d5:ad:84:80:86:b0:c0:39:
b2:06:6f:0e:db:48:38:bd:20:51:52:53:26:34:2c:10:6a:72:
71:4f:8f:51:bc:be:ef:ff:54:ca:66:38:6d:82:15:44:9a:6c:
53:1c:fe:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZqrPMv5TRdaTOtWUO+9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDVjYmY3ZmZlYzUyNTRhNzFlZjdiMWVkZjdhNmQ3NmM3
NTk2MjUwHhcNMjYwMzI5MDcwMjI1WhcNMjYwMzMwMDcwMjI1WjAzMTEwLwYDVQQD
Eyg3MWVjN2ZjODNmZmUxNTE1M2ZmOGUyZDE4YzM2Njc0Y2Q4ZTkyMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6WLgraf4kzm9y7VM1vEMuPVrvdK
ul1vqF6sTE+FNOfCxPYMGj3zK1Bcy2H6NXNebXoUxe108grLoJYJTQ7nDMoTT0gd
IDTJ3woeKCkpAAHXl1+8lrn7PxASj1EPES5sX5vOPpLsI5OTm2pC3T1fgs8Syif6
iK4mcZyqdKzpSYr9Etem3rOQVkMh90K0Jsl62QtNy4VhGoPdhh97mY0PJ9UrbPMj
zd+Qb3hkVwg8coyktJjDMowEpNHk1ynGhGGQMstjw4Tx6n3Qms/9S1EvCa35mNZM
dYiME38GCYGOrSREr4EVYSjAA6PJl+AQvwLGjSgpwxV+uGbnUe5rbCUwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHsf8g//hUVP/ji0Yw2Z0zY6SHJMB8GA1UdIwQY
MBaAFJnVy/f/7FJUpx73se33ptdsdZYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRYTDlfX3NVbFNuSHZleDdmZW0xMngxbGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MjM2ZTktZmY1YS00MDE5LTk0ZDQt
YWVhZTZlMzU5M2E3LzEvbWRYTDlfX3NVbFNuSHZleDdmZW0xMngxbGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81MjM2ZTktZmY1YS00MDE5LTk0ZDQtYWVhZTZlMzU5M2E3
LzEvbWRYTDlfX3NVbFNuSHZleDdmZW0xMngxbGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5Zf31oq
ynX777Bph1XBIf/IrU+ksxcZJhg2I3jqBEaCBMcCkD26GlyefQzP6WMvfsyR7O5T
rQqnj6Xj44NY1na+YqWeM3FWzRIJxitgN/WjCZjkiYjkeM+U7LdObNpdFm52pXaj
vpZEbuDOWRjwHdFZIijCdLyp4YyZqWLQvjY/+EyyXS2izMh3h5T48/NSeQbEOe4T
FFqC/Wiyeze9rxgU+XoUZmbtdJhlToVA6SFH+1K7ad6tnavZuTdXHIX3nisP1YPj
2r+O9paIkfm+9dWthICGsMA5sgZvDttIOL0gUVJTJjQsEGpycU+PUby+7/9UymY4
bYIVRJpsUxz+hA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:18 2026 by rpki-client