Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: CFAyKoTFjLKTtB+mzpMeek90Aq52RQoqaTsDetYxP68=
Subject key identifier: 6B:68:8F:FB:5E:22:5C:DF:15:F4:87:9D:F6:A3:32:4A:D2:DD:A3:9E
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 019D38D34E919347CF8ED5C7A87D9D64AFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 103F
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: guh73i7RoPOjsVC0ZCpSW2u0u0d+bxjVBK7Enxzz8Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4e:91:93:47:cf:8e:d5:c7:a8:7d:9d:64:af:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=6b688ffb5e225cdf15f4879df6a3324ad2dda39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:2f:d8:0a:38:a2:00:e2:ff:e3:4c:be:19:
c6:48:fe:03:7d:10:b0:d2:9e:31:10:44:e4:92:9e:
41:49:b3:ab:ca:9f:ed:52:66:c4:c1:eb:e2:37:fa:
5c:4d:1e:d1:b3:cb:4a:a4:85:4a:aa:3d:a7:c2:f6:
dc:7c:9c:95:37:02:4c:bc:1a:7a:ca:85:40:a3:2f:
70:3c:f8:f0:09:d4:14:e5:0a:81:fa:ac:33:e0:9c:
3e:ae:33:d0:35:f6:ed:2c:e7:02:c3:b7:1d:23:c8:
f9:93:9c:0e:15:68:9c:0a:31:f6:eb:73:4a:5d:72:
3b:72:67:d7:72:ef:cf:eb:15:a2:52:da:ce:3d:6d:
97:72:a4:a1:08:12:0d:ea:2d:88:bb:42:2c:57:ba:
29:c8:d4:cf:9e:99:8a:12:17:f0:7d:10:b1:f8:bc:
42:2c:a2:af:ba:14:08:43:c3:62:42:d9:e0:86:58:
a9:3d:03:31:08:12:a9:81:f5:81:24:4e:9b:8c:58:
75:8e:18:35:df:94:4c:34:d0:a3:66:27:f1:1b:8e:
40:05:55:7e:b7:d4:dd:d5:ea:7e:67:aa:10:e0:18:
58:3b:6e:63:9d:e2:41:32:f9:78:fb:d8:dd:01:58:
90:2e:56:79:10:90:80:ce:a0:44:79:2e:4c:48:d8:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:8F:FB:5E:22:5C:DF:15:F4:87:9D:F6:A3:32:4A:D2:DD:A3:9E
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:23:b6:0f:3b:67:3d:6c:5c:9a:52:95:c9:9c:19:42:33:8b:
49:8e:60:64:0d:c9:97:f1:33:ea:14:56:e9:75:81:52:17:be:
5c:ee:99:96:e7:58:86:cf:20:76:b0:0a:84:89:93:27:fc:8b:
1f:dd:50:6d:9e:6c:87:90:bd:6c:ee:ec:82:38:50:a1:af:1c:
95:51:df:a0:22:74:74:9d:fb:bc:2d:f7:4d:0e:59:bb:3c:89:
ad:95:f1:02:7e:3c:38:27:c9:64:48:28:b6:77:f8:6d:78:b5:
f0:fd:87:3a:20:38:45:0b:cd:1c:8f:c4:4f:dd:41:a5:1a:17:
62:bf:ed:32:b6:ed:ca:d8:20:3c:7b:10:65:c6:99:1d:70:a5:
00:27:f2:24:c3:47:64:99:25:dd:e6:2b:59:1d:de:d0:d5:9e:
bb:e6:59:4c:4c:99:2f:75:d1:8d:c3:4d:36:ec:f6:fd:14:71:
4d:75:b2:e6:c8:5f:cd:7c:98:2d:d4:02:51:9c:22:61:7f:c7:
f6:37:3b:01:ed:86:29:93:b4:30:0c:72:35:92:d3:4b:aa:ce:
6d:1a:b3:55:fe:61:49:6e:79:0f:34:53:98:af:f7:37:b7:c3:
bb:a9:94:9b:12:0d:37:65:d2:59:e6:73:12:31:d0:56:f6:aa:
26:a7:4e:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04006Rk0fPjtXHqH2dZK/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNzJkNjY0NTEwYTZiZmI5NmYyYTZhNWMxMjA5ODdkYzk3
NzRiZjgwHhcNMjYwMzI5MDkwMTA1WhcNMjYwMzMwMDkwMTA1WjAzMTEwLwYDVQQD
Eyg2YjY4OGZmYjVlMjI1Y2RmMTVmNDg3OWRmNmEzMzI0YWQyZGRhMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvMv2Ao4ogDi/+NMvhnGSP4DfRCw
0p4xEETkkp5BSbOryp/tUmbEweviN/pcTR7Rs8tKpIVKqj2nwvbcfJyVNwJMvBp6
yoVAoy9wPPjwCdQU5QqB+qwz4Jw+rjPQNfbtLOcCw7cdI8j5k5wOFWicCjH263NK
XXI7cmfXcu/P6xWiUtrOPW2XcqShCBIN6i2Iu0IsV7opyNTPnpmKEhfwfRCx+LxC
LKKvuhQIQ8NiQtnghlipPQMxCBKpgfWBJE6bjFh1jhg135RMNNCjZifxG45ABVV+
t9Td1ep+Z6oQ4BhYO25jneJBMvl4+9jdAViQLlZ5EJCAzqBEeS5MSNjyHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtoj/teIlzfFfSHnfajMkrS3aOeMB8GA1UdIwQY
MBaAFK1y1mRRCmv7lvKmpcEgmH3Jd0v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjkt
NzcwZDlhMzg5Mjk1LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjktNzcwZDlhMzg5Mjk1
LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6SO2Dztn
PWxcmlKVyZwZQjOLSY5gZA3Jl/Ez6hRW6XWBUhe+XO6ZludYhs8gdrAKhImTJ/yL
H91QbZ5sh5C9bO7sgjhQoa8clVHfoCJ0dJ37vC33TQ5ZuzyJrZXxAn48OCfJZEgo
tnf4bXi18P2HOiA4RQvNHI/ET91BpRoXYr/tMrbtytggPHsQZcaZHXClACfyJMNH
ZJkl3eYrWR3e0NWeu+ZZTEyZL3XRjcNNNuz2/RRxTXWy5shfzXyYLdQCUZwiYX/H
9jc7Ae2GKZO0MAxyNZLTS6rObRqzVf5hSW55DzRTmK/3N7fDu6mUmxINN2XSWeZz
EjHQVvaqJqdOvA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:52 2026 by rpki-client