Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: b+HrIajCCAmykMvIhpANQZCtUTNGthJrxsl6UUAFz/I=
Subject key identifier: 72:99:19:68:9D:42:B8:8C:4B:9B:0B:37:8C:A4:A0:34:3F:3A:0A:7A
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 019D36E50F327E3C8FF941BECFE7A4DFE90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 125C
Signing time: Sun 29 Mar 2026 00:01:14 +0000
Manifest this update: Sun 29 Mar 2026 00:01:14 +0000
Manifest next update: Mon 30 Mar 2026 00:01:14 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: oJnzhD9LdKu7IIqEMJLuNPwLWYh7rVO/rDeeYaQl/m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:0f:32:7e:3c:8f:f9:41:be:cf:e7:a4:df:e9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Mar 29 00:01:14 2026 GMT
Not After : Mar 30 00:01:14 2026 GMT
Subject: CN=729919689d42b88c4b9b0b378ca4a0343f3a0a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:aa:5e:99:b5:4d:1c:06:29:52:66:a3:ad:
0b:17:70:07:e2:86:99:d9:e2:f1:6c:36:fe:3c:53:
71:5f:5b:3e:c5:b0:b5:38:7e:e7:08:23:47:0d:18:
7d:b0:25:0f:63:82:9c:36:d0:c7:57:5d:1e:73:0d:
b6:7d:92:91:23:5f:20:27:00:59:5d:6b:ab:89:a9:
79:85:ec:e5:0c:ba:56:88:aa:39:51:e9:0c:55:d5:
2d:21:20:25:e0:61:a5:00:4f:a7:d5:ac:c9:ec:1f:
d9:52:1c:b8:92:bc:fa:e4:b6:0e:b6:c9:ae:9b:1a:
b3:1b:4b:0e:cc:38:a1:47:e9:48:e3:fe:62:18:b5:
3e:e5:53:10:5a:4e:69:11:f0:4f:a4:8f:1a:d7:3b:
d5:a7:c7:c6:59:70:04:3e:04:f6:bc:bf:29:00:9d:
79:f7:0b:23:60:44:e9:b4:41:f1:e7:bf:80:f2:35:
cc:05:5d:87:6a:5a:b0:4e:86:af:f9:1f:14:5e:8d:
45:c7:eb:c1:0c:89:f2:3a:b5:6b:6f:ed:06:07:b7:
6a:e7:5b:78:db:d4:19:0a:32:79:0b:42:92:c0:14:
6a:97:0c:ac:bd:78:46:a5:ac:67:42:ee:42:4a:1c:
78:df:5b:52:61:04:13:d4:8c:a1:b6:3e:cd:01:1e:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:19:68:9D:42:B8:8C:4B:9B:0B:37:8C:A4:A0:34:3F:3A:0A:7A
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9e:4d:20:fb:2f:c8:fd:b9:3f:da:6a:6f:5a:34:8a:24:89:
2e:37:e3:e0:39:9d:bb:c7:d7:a0:56:27:91:ff:aa:2b:71:0a:
c6:ff:1f:01:76:9d:34:59:39:b3:23:6d:08:be:3d:86:82:f0:
a0:e9:0c:d5:b8:42:87:bf:4c:6a:12:98:1e:09:55:3f:92:6d:
c9:31:ff:00:cd:9e:a3:3e:fd:76:6c:b6:d4:e9:28:7a:79:3d:
3a:ff:f9:49:1d:9c:4c:cd:ea:04:4a:72:1f:c9:1d:dc:71:bd:
b2:f5:cd:fa:3d:7f:a7:e9:d5:9a:a7:e9:25:eb:6a:eb:0b:98:
1f:04:b4:ef:c5:bd:56:67:5f:8f:07:14:99:cf:ba:31:d4:fe:
98:78:b3:33:4a:f3:8e:06:0f:d6:e2:94:09:19:c7:19:0c:fc:
cd:0e:3a:ff:69:85:4c:ba:b1:7a:11:ea:e6:7e:f0:4c:86:f2:
27:c0:5f:c6:ce:b9:c8:9f:d8:e7:cb:45:e2:e3:74:68:43:b0:
03:9d:56:3b:51:91:a2:85:9d:86:a7:9f:2f:f4:43:64:4d:8d:
33:91:d9:58:b5:a6:4f:be:20:67:5c:7a:92:7d:e2:48:85:d4:
00:e7:12:7d:ad:c6:2b:d7:87:c5:50:87:d3:f4:bb:c1:e2:38:
fb:87:5b:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ025Q8yfjyP+UG+z+ek3+kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmJmNmU2NjAxMjZmZjQ5MDRlMDk5Y2EwYWRlZGU5ZjZj
ZWE1NzAwHhcNMjYwMzI5MDAwMTE0WhcNMjYwMzMwMDAwMTE0WjAzMTEwLwYDVQQD
Eyg3Mjk5MTk2ODlkNDJiODhjNGI5YjBiMzc4Y2E0YTAzNDNmM2EwYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMCqXpm1TRwGKVJmo60LF3AH4oaZ
2eLxbDb+PFNxX1s+xbC1OH7nCCNHDRh9sCUPY4KcNtDHV10ecw22fZKRI18gJwBZ
XWurial5hezlDLpWiKo5UekMVdUtISAl4GGlAE+n1azJ7B/ZUhy4krz65LYOtsmu
mxqzG0sOzDihR+lI4/5iGLU+5VMQWk5pEfBPpI8a1zvVp8fGWXAEPgT2vL8pAJ15
9wsjYETptEHx57+A8jXMBV2HalqwToav+R8UXo1Fx+vBDInyOrVrb+0GB7dq51t4
29QZCjJ5C0KSwBRqlwysvXhGpaxnQu5CShx431tSYQQT1Iyhtj7NAR4qtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKZGWidQriMS5sLN4ykoDQ/Ogp6MB8GA1UdIwQY
MBaAFF779uZgEm/0kE4JnKCt7en2zqVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81Mjc4MmEtM2RlMy00ODI5LTgxOTkt
NDRmZGNlYzVkMjg4LzEvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81Mjc4MmEtM2RlMy00ODI5LTgxOTktNDRmZGNlYzVkMjg4
LzEvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALp5NIPsv
yP25P9pqb1o0iiSJLjfj4Dmdu8fXoFYnkf+qK3EKxv8fAXadNFk5syNtCL49hoLw
oOkM1bhCh79MahKYHglVP5JtyTH/AM2eoz79dmy21Okoenk9Ov/5SR2cTM3qBEpy
H8kd3HG9svXN+j1/p+nVmqfpJetq6wuYHwS078W9VmdfjwcUmc+6MdT+mHizM0rz
jgYP1uKUCRnHGQz8zQ46/2mFTLqxehHq5n7wTIbyJ8Bfxs65yJ/Y58tF4uN0aEOw
A51WO1GRooWdhqefL/RDZE2NM5HZWLWmT74gZ1x6kn3iSIXUAOcSfa3GK9eHxVCH
0/S7weI4+4dbIA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:05 2026 by rpki-client