Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
File: XOackdRTOWv6Fm8FG_jwbAOghcs.mft (raw, json)
Hash identifier: kzIjtm8Lb2qgjIpbLBY3tm6acaATzncxao3KcbaOVyE=
Subject key identifier: 02:F7:92:F9:10:A5:66:59:4F:49:9A:C4:FD:34:29:9F:16:36:F7:3B
Authority key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
Certificate issuer: /CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Certificate serial: 019D2AE005AEDA626789EA46CC42576E4541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
Manifest number: 0D94
Signing time: Thu 26 Mar 2026 16:00:17 +0000
Manifest this update: Thu 26 Mar 2026 16:00:17 +0000
Manifest next update: Fri 27 Mar 2026 16:00:17 +0000
Files and hashes: 1: XOackdRTOWv6Fm8FG_jwbAOghcs.crl (hash: FrfHPSESYxODkvsH7s5SyY7i6BrQWh+tB3DTEbcwZrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:05:ae:da:62:67:89:ea:46:cc:42:57:6e:45:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Validity
Not Before: Mar 26 16:00:17 2026 GMT
Not After : Mar 27 16:00:17 2026 GMT
Subject: CN=02f792f910a566594f499ac4fd34299f1636f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:e2:12:16:a2:23:9e:c6:a1:76:c1:f6:d9:
b8:d4:c7:ef:9d:96:3d:da:9f:5f:0c:8f:2d:eb:2a:
42:05:55:af:c5:6f:13:9c:06:73:a7:33:54:4d:b1:
c8:a3:fb:d7:1d:e4:e3:45:8c:cd:5e:23:1b:b7:5e:
08:11:be:05:09:a3:ac:15:82:0b:e4:a5:b7:27:ca:
07:06:72:58:67:4f:49:d4:84:b4:48:f9:f1:ac:e1:
b0:8c:9a:f5:42:c8:de:9b:c8:4a:92:c6:d5:d5:fc:
cd:3b:34:ed:92:05:92:50:8d:a5:12:ba:d3:08:bf:
d1:10:83:8e:b9:03:a1:2c:a2:00:12:69:23:9e:3f:
c2:b7:04:dc:d6:1d:37:63:dd:9e:a5:82:77:c8:f9:
36:00:46:8a:0c:c5:ad:9c:88:d6:50:93:98:9c:c0:
e3:35:31:f2:ba:32:f4:4f:11:b8:84:5a:8f:46:68:
f6:07:69:62:e9:9c:3c:4e:ba:a9:be:88:7b:b1:a1:
c3:59:0b:e1:41:53:ca:72:01:bc:72:97:57:b9:9a:
97:f5:99:c3:ad:b7:f0:31:c0:65:d4:15:ff:e9:14:
3b:87:e7:4e:c6:67:f6:09:7a:70:38:d8:ae:9d:f3:
96:ff:e7:11:44:40:a4:71:01:88:3a:0b:2f:ab:51:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:92:F9:10:A5:66:59:4F:49:9A:C4:FD:34:29:9F:16:36:F7:3B
X509v3 Authority Key Identifier:
keyid:5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f2:bb:af:b3:c9:32:ad:83:37:21:16:5d:22:d3:f8:ee:4a:
fd:74:45:48:54:52:20:4e:d9:c6:ff:78:10:bd:ea:81:2b:86:
46:ae:aa:50:db:c8:5f:25:84:99:c9:a0:30:b4:1a:7b:91:3c:
6f:43:d3:c5:70:21:e1:69:be:23:20:4f:98:88:bf:f2:82:c4:
f4:90:38:a3:78:d7:ef:e5:ac:6c:95:d0:f4:a9:4b:5e:23:69:
47:e2:e8:6a:9d:d9:5d:1b:d8:21:d4:8f:6c:24:d0:2c:65:0e:
76:d1:ee:c1:f1:57:a9:08:f8:aa:fa:47:63:58:da:ff:04:7c:
34:6d:54:f5:07:c7:1c:20:70:61:f0:eb:47:c8:8f:31:7c:93:
b3:e2:62:59:cf:29:d2:89:66:65:61:43:90:f2:3a:c6:ab:af:
bd:91:e6:a7:16:27:1c:c7:9e:58:13:ab:4a:b5:80:3e:dd:58:
34:4d:dd:08:85:ae:9f:94:81:b2:99:15:42:85:43:e5:6c:34:
80:91:ae:ca:86:de:63:af:6f:87:35:4f:0b:06:5e:1c:54:24:
e8:42:b7:4a:08:06:a0:34:b3:ab:88:aa:f2:da:5c:0c:d1:eb:
30:82:b3:9c:54:88:00:f5:bf:c8:cf:5b:b3:7d:b2:91:f2:0c:
3a:f1:0c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4AWu2mJniepGzEJXbkVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTY5YzkxZDQ1MzM5NmJmYTE2NmYwNTFiZjhmMDZjMDNh
MDg1Y2IwHhcNMjYwMzI2MTYwMDE3WhcNMjYwMzI3MTYwMDE3WjAzMTEwLwYDVQQD
EygwMmY3OTJmOTEwYTU2NjU5NGY0OTlhYzRmZDM0Mjk5ZjE2MzZmNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYniEhaiI57GoXbB9tm41MfvnZY9
2p9fDI8t6ypCBVWvxW8TnAZzpzNUTbHIo/vXHeTjRYzNXiMbt14IEb4FCaOsFYIL
5KW3J8oHBnJYZ09J1IS0SPnxrOGwjJr1Qsjem8hKksbV1fzNOzTtkgWSUI2lErrT
CL/REIOOuQOhLKIAEmkjnj/CtwTc1h03Y92epYJ3yPk2AEaKDMWtnIjWUJOYnMDj
NTHyujL0TxG4hFqPRmj2B2li6Zw8Trqpvoh7saHDWQvhQVPKcgG8cpdXuZqX9ZnD
rbfwMcBl1BX/6RQ7h+dOxmf2CXpwONiunfOW/+cRRECkcQGIOgsvq1Er0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL3kvkQpWZZT0maxP00KZ8WNvc7MB8GA1UdIwQY
MBaAFFzmnJHUUzlr+hZvBRv48GwDoIXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQt
YTU5N2VlNjM3ZGI0LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQtYTU5N2VlNjM3ZGI0
LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPK7r7PJ
Mq2DNyEWXSLT+O5K/XRFSFRSIE7Zxv94EL3qgSuGRq6qUNvIXyWEmcmgMLQae5E8
b0PTxXAh4Wm+IyBPmIi/8oLE9JA4o3jX7+WsbJXQ9KlLXiNpR+Loap3ZXRvYIdSP
bCTQLGUOdtHuwfFXqQj4qvpHY1ja/wR8NG1U9QfHHCBwYfDrR8iPMXyTs+JiWc8p
0olmZWFDkPI6xquvvZHmpxYnHMeeWBOrSrWAPt1YNE3dCIWun5SBspkVQoVD5Ww0
gJGuyobeY69vhzVPCwZeHFQk6EK3SggGoDSzq4iq8tpcDNHrMIKznFSIAPW/yM9b
s32ykfIMOvEMEQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:58 2026 by rpki-client