Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
File: xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft (raw, json)
Hash identifier: ffMkh7q8qOZ30/m8v6YxcSXzGdNiW5OucNAe0mS8MKk=
Subject key identifier: 94:24:B8:B9:72:47:49:6E:00:FF:6D:8B:83:59:41:B6:28:BC:C3:64
Authority key identifier: C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0
Certificate issuer: /CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0
Certificate serial: 019D2703F6D4B490D0C2DD6AE5D083B531CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:04 +0000
Manifest this update: Wed 25 Mar 2026 22:01:04 +0000
Manifest next update: Thu 26 Mar 2026 22:01:04 +0000
Files and hashes: 1: xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl (hash: u/lK8Ft9zOrFnbUwsOs1iPU9nHaI9yPsWozXEIVw7QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f6:d4:b4:90:d0:c2:dd:6a:e5:d0:83:b5:31:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0
Validity
Not Before: Mar 25 22:01:04 2026 GMT
Not After : Mar 26 22:01:04 2026 GMT
Subject: CN=9424b8b97247496e00ff6d8b835941b628bcc364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:5f:1d:37:f4:8c:ff:13:16:db:36:1d:10:
40:cf:e5:3c:ba:5d:e2:0e:fc:54:3f:70:b4:65:b5:
66:8c:0e:db:89:01:d3:ae:5f:b3:3b:31:28:8f:e4:
a3:91:6e:ee:68:76:00:e0:43:cf:16:6f:59:b0:d8:
9b:b5:2e:ca:0d:68:a2:9b:91:79:5e:27:61:2d:30:
cb:df:c8:d1:c8:52:2a:2f:a7:94:ab:a6:65:ed:a6:
4c:75:c1:a5:61:06:f1:42:b3:de:d9:4a:5e:b5:cf:
a6:99:97:cc:d5:28:c4:9a:51:38:5e:29:6a:e3:cb:
20:ab:56:dc:da:5e:7b:ac:6b:f4:23:67:41:9e:d5:
22:99:48:11:ba:48:8a:c5:3e:da:e3:32:e2:03:db:
fb:7d:0f:43:97:0d:af:d5:d2:bd:74:11:0c:b9:26:
65:89:65:17:bc:6d:dd:07:fe:90:a7:4f:a2:27:f3:
78:0b:fa:ac:28:e0:53:0d:61:c6:af:1a:3b:1b:70:
cc:ef:32:27:56:06:3e:b6:88:88:29:91:26:b7:fa:
d0:3d:75:17:ed:6e:6c:58:64:58:5c:f4:80:15:67:
b2:ab:0c:1c:a2:df:b5:fd:3b:be:cb:ba:63:14:f9:
f6:a2:da:ce:6d:8a:29:dd:d2:17:32:4c:89:b5:31:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:B8:B9:72:47:49:6E:00:FF:6D:8B:83:59:41:B6:28:BC:C3:64
X509v3 Authority Key Identifier:
keyid:C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bc:7d:94:28:fa:97:0d:2a:d8:fd:34:48:42:de:58:38:8f:
09:c7:2a:e2:2d:b4:a7:9d:7b:90:e4:8a:93:09:82:44:8a:2f:
1b:2c:da:b1:24:3f:31:d6:d3:67:42:ee:1d:e9:00:dc:7e:d3:
90:94:80:1e:5d:8f:db:d0:4e:cd:99:43:bd:15:48:55:33:ec:
0f:b5:76:f1:60:c0:af:a5:40:97:0d:ab:0f:ce:b3:08:18:f2:
7b:5a:72:95:91:2f:9b:c3:51:4d:8f:cb:e8:4b:bd:f6:da:00:
3e:26:33:5f:31:2e:9e:c8:16:ef:98:4e:24:f8:16:8c:33:6e:
9b:d7:cb:a8:4a:82:d1:7a:78:63:49:4f:19:fb:8b:19:0f:da:
1f:41:74:be:38:67:ec:02:d6:14:03:e7:8f:f7:45:f5:8e:ef:
d9:2b:cb:42:e8:bc:c4:d5:4e:5d:f2:be:80:07:47:1d:b9:f6:
cc:2e:f2:67:c0:01:12:2f:43:c2:7f:77:7d:80:77:14:9a:cc:
9b:26:1f:0b:bc:7d:ba:ea:49:ae:97:12:b2:4a:a0:34:0b:38:
d9:e9:5b:c2:59:b2:5e:7d:86:3f:39:48:4e:07:fa:3f:1e:c8:
91:ee:97:66:6a:f6:b0:41:e5:fc:05:90:44:da:0e:6a:fa:f7:
1a:a4:33:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA/bUtJDQwt1q5dCDtTHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZDE4ZTFhMWRjNjU1OGM0ZGJhNzMxZWZhMzI3NjljNDVm
NTRiYTAwHhcNMjYwMzI1MjIwMTA0WhcNMjYwMzI2MjIwMTA0WjAzMTEwLwYDVQQD
Eyg5NDI0YjhiOTcyNDc0OTZlMDBmZjZkOGI4MzU5NDFiNjI4YmNjMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzxfHTf0jP8TFts2HRBAz+U8ul3i
DvxUP3C0ZbVmjA7biQHTrl+zOzEoj+SjkW7uaHYA4EPPFm9ZsNibtS7KDWiim5F5
XidhLTDL38jRyFIqL6eUq6Zl7aZMdcGlYQbxQrPe2Upetc+mmZfM1SjEmlE4Xilq
48sgq1bc2l57rGv0I2dBntUimUgRukiKxT7a4zLiA9v7fQ9Dlw2v1dK9dBEMuSZl
iWUXvG3dB/6Qp0+iJ/N4C/qsKOBTDWHGrxo7G3DM7zInVgY+toiIKZEmt/rQPXUX
7W5sWGRYXPSAFWeyqwwcot+1/Tu+y7pjFPn2otrObYop3dIXMkyJtTFPsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQkuLlyR0luAP9ti4NZQbYovMNkMB8GA1UdIwQY
MBaAFMXRjhodxlWMTbpzHvoydpxF9UugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGRHT0doM0dWWXhOdW5NZS1qSjJuRVgxUzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZjZiMDctMmU0NS00MTBmLTkzMTgt
MWNiZTY2MWE2M2ZmLzEveGRHT0doM0dWWXhOdW5NZS1qSjJuRVgxUzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZjZiMDctMmU0NS00MTBmLTkzMTgtMWNiZTY2MWE2M2Zm
LzEveGRHT0doM0dWWXhOdW5NZS1qSjJuRVgxUzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7x9lCj6
lw0q2P00SELeWDiPCccq4i20p517kOSKkwmCRIovGyzasSQ/MdbTZ0LuHekA3H7T
kJSAHl2P29BOzZlDvRVIVTPsD7V28WDAr6VAlw2rD86zCBjye1pylZEvm8NRTY/L
6Eu99toAPiYzXzEunsgW75hOJPgWjDNum9fLqEqC0Xp4Y0lPGfuLGQ/aH0F0vjhn
7ALWFAPnj/dF9Y7v2SvLQui8xNVOXfK+gAdHHbn2zC7yZ8ABEi9Dwn93fYB3FJrM
myYfC7x9uupJrpcSskqgNAs42elbwlmyXn2GPzlITgf6Px7Ike6XZmr2sEHl/AWQ
RNoOavr3GqQzQg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:58 2026 by rpki-client