Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: AeLHisRsQoApvFpezzKQy6wcfojc6cUdnWp1a6+Cz/E=
Subject key identifier: 68:EE:6E:21:0F:96:8D:D1:B5:FC:A1:C3:4C:57:CE:42:E3:D9:A1:0B
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 019D38D3A5DD7FF9C42F2CC1D04E6A37BD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 07E0
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: RZixfbOCtEZd24/ZgHM2hxKBVB/5w6xvrZRXXZyIRq8=)
2: _z_wVcXFgGyo2KL2OVSqBhSh8xw.asa (hash: /1A8zlKWYmqlgxFi5Pz0OpVqaauhxn3c+pURid2tACQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a5:dd:7f:f9:c4:2f:2c:c1:d0:4e:6a:37:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=68ee6e210f968dd1b5fca1c34c57ce42e3d9a10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:e8:ec:aa:60:7c:21:8b:27:f5:22:3e:68:
b2:44:a8:48:f2:a2:c8:4f:9b:6a:7f:3f:b3:36:02:
34:7c:66:0b:7d:01:b4:53:4e:cc:c5:2f:a4:41:a1:
34:49:b1:7e:9b:d0:79:2c:79:ae:24:d4:cc:b9:72:
23:13:e0:dc:51:3b:3e:98:64:ba:79:08:20:ed:70:
69:8f:79:83:6d:55:14:87:ec:52:e7:59:c8:7e:06:
31:e6:45:5b:cc:e2:a5:9a:95:05:f3:54:3e:b0:7e:
23:a0:cf:f0:f0:89:8a:77:91:b2:fe:1d:b9:10:74:
06:5b:62:da:0e:39:8e:c0:66:a8:ef:8e:99:b1:b3:
f4:44:e2:50:e4:4f:76:53:0c:65:75:38:69:d2:fc:
26:17:ef:a7:b0:70:c0:02:80:d6:c1:61:88:f7:22:
9a:b1:c0:a6:c6:37:5c:ec:7e:29:09:24:46:71:48:
8c:be:0c:96:a5:05:3c:1d:60:d3:67:08:df:e0:31:
d4:96:48:ff:26:46:d1:de:61:52:19:2b:7c:58:f8:
96:d4:79:1b:6d:6a:04:e0:a1:ce:16:03:10:97:3e:
39:fb:c8:d1:5d:07:fd:e7:e7:ab:ad:21:17:07:3c:
60:d8:ad:e8:1c:1b:6e:9a:86:8b:8d:3c:6a:84:30:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EE:6E:21:0F:96:8D:D1:B5:FC:A1:C3:4C:57:CE:42:E3:D9:A1:0B
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:72:a1:c6:a3:09:7e:b6:77:d3:f5:b4:c4:fb:e8:17:09:ed:
cb:0d:f2:9a:07:ef:25:23:ca:f5:16:c8:80:72:7f:ce:14:7e:
a7:c5:79:0f:5c:fe:71:76:d0:9a:6a:66:31:78:57:35:80:d3:
70:75:ce:d8:0a:04:97:33:89:45:a5:6c:06:b3:2b:38:f5:ad:
b0:6c:8a:d0:75:cc:75:6a:77:65:ee:dd:41:5b:79:1a:6a:91:
9e:04:99:f6:41:de:00:5c:45:c9:9a:0f:5c:00:f4:3e:15:56:
f7:5f:ad:12:31:d7:dc:9c:b5:f0:1f:68:20:88:3f:29:9b:48:
74:c0:84:04:4c:17:68:e8:c4:2b:21:7b:b3:bb:62:29:b5:bc:
37:63:54:8b:24:19:98:bf:98:4e:23:95:db:c4:90:e7:c8:5d:
76:8c:d2:78:ea:60:0f:1b:80:b1:84:36:30:10:8b:33:5d:4b:
aa:a5:54:8a:00:d2:3a:14:25:70:e6:da:33:85:d2:e3:f0:af:
c4:96:4a:3b:7f:82:2c:27:0c:35:01:2c:43:47:e8:55:27:46:
0f:55:b4:6c:98:16:81:7c:b9:5b:a5:52:46:10:12:7d:b0:b0:
dc:d3:88:99:b1:f9:52:50:6b:28:61:8d:97:3b:18:e9:15:27:
35:c0:f7:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0406Xdf/nELyzB0E5qN71+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTViZGE4Y2U5ODdkN2U0YWFiMWMzNTUxNzhkY2EzM2Uz
YjhlYTQwHhcNMjYwMzI5MDkwMTI3WhcNMjYwMzMwMDkwMTI3WjAzMTEwLwYDVQQD
Eyg2OGVlNmUyMTBmOTY4ZGQxYjVmY2ExYzM0YzU3Y2U0MmUzZDlhMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBLo7KpgfCGLJ/UiPmiyRKhI8qLI
T5tqfz+zNgI0fGYLfQG0U07MxS+kQaE0SbF+m9B5LHmuJNTMuXIjE+DcUTs+mGS6
eQgg7XBpj3mDbVUUh+xS51nIfgYx5kVbzOKlmpUF81Q+sH4joM/w8ImKd5Gy/h25
EHQGW2LaDjmOwGao746ZsbP0ROJQ5E92UwxldThp0vwmF++nsHDAAoDWwWGI9yKa
scCmxjdc7H4pCSRGcUiMvgyWpQU8HWDTZwjf4DHUlkj/JkbR3mFSGSt8WPiW1Hkb
bWoE4KHOFgMQlz45+8jRXQf95+errSEXBzxg2K3oHBtumoaLjTxqhDAv0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjubiEPlo3Rtfyhw0xXzkLj2aELMB8GA1UdIwQY
MBaAFF0VvajOmH1+SqscNVF43KM+O46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2Yt
YmJhM2M4Y2IwZjdhLzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2YtYmJhM2M4Y2IwZjdh
LzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnKhxqMJ
frZ30/W0xPvoFwntyw3ymgfvJSPK9RbIgHJ/zhR+p8V5D1z+cXbQmmpmMXhXNYDT
cHXO2AoElzOJRaVsBrMrOPWtsGyK0HXMdWp3Ze7dQVt5GmqRngSZ9kHeAFxFyZoP
XAD0PhVW91+tEjHX3Jy18B9oIIg/KZtIdMCEBEwXaOjEKyF7s7tiKbW8N2NUiyQZ
mL+YTiOV28SQ58hddozSeOpgDxuAsYQ2MBCLM11LqqVUigDSOhQlcObaM4XS4/Cv
xJZKO3+CLCcMNQEsQ0foVSdGD1W0bJgWgXy5W6VSRhASfbCw3NOImbH5UlBrKGGN
lzsY6RUnNcD30Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:56 2026 by rpki-client