Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier: VkOWlykEVDKeB5mTwOfudUgPXZNGuTGLc54qfFtk0eU=
Subject key identifier: 7F:52:BC:A6:05:6E:74:CA:2B:5A:C8:FC:3B:78:AD:83:51:68:0D:8B
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial: 019D37C0413F23CC24017C7F3C0E3212601D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number: 11AE
Signing time: Sun 29 Mar 2026 04:00:39 +0000
Manifest this update: Sun 29 Mar 2026 04:00:39 +0000
Manifest next update: Mon 30 Mar 2026 04:00:39 +0000
Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: /MJDMvs8BNzLaFqHLVdmjW/e5r6djDGPwO2HlPoXNk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:41:3f:23:cc:24:01:7c:7f:3c:0e:32:12:60:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Validity
Not Before: Mar 29 04:00:39 2026 GMT
Not After : Mar 30 04:00:39 2026 GMT
Subject: CN=7f52bca6056e74ca2b5ac8fc3b78ad8351680d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:3b:d9:c0:b4:52:11:40:6c:47:15:e0:ca:
a8:41:38:26:8c:28:cc:d6:c2:8f:72:3d:7c:b4:5a:
9e:1f:a8:52:f3:25:40:d8:5f:0f:91:15:0f:ee:41:
cc:de:c9:64:72:8e:cd:bb:65:e6:e8:8d:9d:1d:c8:
81:fc:ac:9e:af:ef:3e:ee:86:f1:a5:60:36:5b:3e:
15:3f:7e:90:0d:87:8e:e0:56:cd:1d:bb:99:fd:2b:
71:69:30:b1:38:d9:ba:0e:87:d5:b9:0a:b0:c4:d5:
4a:fa:61:98:7f:da:71:c4:d0:0d:00:7d:a7:5a:61:
11:39:ef:15:57:0e:9a:49:36:cf:4c:6b:11:2f:55:
83:d7:cc:ad:82:dd:33:9c:7a:19:72:1b:5d:78:c8:
e2:c9:73:2a:46:73:35:e8:b7:3f:b0:5d:ff:8a:18:
c0:e6:ab:66:9f:fd:2a:83:ea:54:f0:54:cd:0f:7c:
e2:0d:08:b0:fa:7d:d3:43:ac:2f:a5:f5:af:67:74:
35:98:45:6b:c3:60:1c:cc:11:8a:be:c3:6c:f2:a0:
14:c0:ee:72:08:8a:5e:f0:c9:31:d7:ec:0c:9b:17:
c9:df:1e:94:f8:45:ef:e8:9e:99:5f:ac:ee:f8:c2:
3d:0c:ab:22:ac:da:08:49:86:8a:83:3e:58:9f:51:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:BC:A6:05:6E:74:CA:2B:5A:C8:FC:3B:78:AD:83:51:68:0D:8B
X509v3 Authority Key Identifier:
keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:21:3e:9f:0d:f4:22:21:db:c6:78:41:94:4e:c9:3f:85:9a:
56:94:b4:0b:19:ea:6b:d7:a9:a2:fe:33:c7:b5:dc:4a:2a:5d:
ad:f0:94:58:28:4a:15:f9:f9:2c:b1:29:93:62:2a:88:84:15:
39:a1:e6:48:1d:07:70:f3:18:b5:b2:bd:cf:b1:41:c1:6c:34:
a8:f4:0a:60:60:e5:5a:93:56:ad:4f:a8:23:32:89:c9:1d:36:
fb:60:cb:f6:f3:8b:07:93:19:a7:2f:8e:83:2e:c4:d5:80:cc:
ab:b3:68:4b:2d:25:e8:a4:3d:b1:7f:e7:b1:cd:b6:cd:9a:f1:
61:ac:bf:29:b4:98:6f:ce:9d:a7:ea:8b:e0:d9:fe:cf:60:d2:
67:53:c6:d1:bb:9e:4f:61:28:43:a0:b6:af:18:37:d4:4d:a3:
97:52:7f:5b:12:8a:cd:9c:4f:6c:0d:57:fc:93:c2:48:7a:32:
9f:92:cb:08:92:e0:5a:7e:26:76:3d:e5:54:c0:31:a6:6f:6d:
1c:06:79:dc:dc:39:a7:0e:43:68:58:67:ba:ad:84:3f:67:85:
99:79:72:7e:95:b9:d5:7d:12:b8:7d:00:7b:60:45:73:76:bd:
98:7c:1e:dc:e1:19:79:7b:9d:bf:87:98:2a:29:ce:b3:72:12:
1b:19:6c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wEE/I8wkAXx/PA4yEmAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTQ0Y2U0MGQxMWQ2MWQzYjgwYTdkMTAzMjMwMTIzZmI3
ZDY4YTUwHhcNMjYwMzI5MDQwMDM5WhcNMjYwMzMwMDQwMDM5WjAzMTEwLwYDVQQD
Eyg3ZjUyYmNhNjA1NmU3NGNhMmI1YWM4ZmMzYjc4YWQ4MzUxNjgwZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOU72cC0UhFAbEcV4MqoQTgmjCjM
1sKPcj18tFqeH6hS8yVA2F8PkRUP7kHM3slkco7Nu2Xm6I2dHciB/Kyer+8+7obx
pWA2Wz4VP36QDYeO4FbNHbuZ/StxaTCxONm6DofVuQqwxNVK+mGYf9pxxNANAH2n
WmEROe8VVw6aSTbPTGsRL1WD18ytgt0znHoZchtdeMjiyXMqRnM16Lc/sF3/ihjA
5qtmn/0qg+pU8FTND3ziDQiw+n3TQ6wvpfWvZ3Q1mEVrw2AczBGKvsNs8qAUwO5y
CIpe8Mkx1+wMmxfJ3x6U+EXv6J6ZX6zu+MI9DKsirNoISYaKgz5Yn1E0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9SvKYFbnTKK1rI/Dt4rYNRaA2LMB8GA1UdIwQY
MBaAFMVUTOQNEdYdO4Cn0QMjASP7fWilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQt
NTI3Y2IyNGRiZDQwLzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQtNTI3Y2IyNGRiZDQw
LzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCE+nw30
IiHbxnhBlE7JP4WaVpS0Cxnqa9epov4zx7XcSipdrfCUWChKFfn5LLEpk2IqiIQV
OaHmSB0HcPMYtbK9z7FBwWw0qPQKYGDlWpNWrU+oIzKJyR02+2DL9vOLB5MZpy+O
gy7E1YDMq7NoSy0l6KQ9sX/nsc22zZrxYay/KbSYb86dp+qL4Nn+z2DSZ1PG0bue
T2EoQ6C2rxg31E2jl1J/WxKKzZxPbA1X/JPCSHoyn5LLCJLgWn4mdj3lVMAxpm9t
HAZ53Nw5pw5DaFhnuq2EP2eFmXlyfpW51X0SuH0Ae2BFc3a9mHwe3OEZeXudv4eY
KinOs3ISGxlsdA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:56 2026 by rpki-client