Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: AlKUyb4PsbvylpZUTLf7BQmEV+7jVU4fQ87qWTy7zWo=
Subject key identifier: 93:0D:63:8A:0A:E7:6C:02:7C:49:EA:70:98:31:C4:38:A4:C8:91:1C
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 019D2703B9591BC9F4D56C48A413C86602F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 135F
Signing time: Wed 25 Mar 2026 22:00:48 +0000
Manifest this update: Wed 25 Mar 2026 22:00:48 +0000
Manifest next update: Thu 26 Mar 2026 22:00:48 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: 5qNNWFNgkUGShoKKDiezjuJ2ubJCD5N1ZjFq2JDerds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b9:59:1b:c9:f4:d5:6c:48:a4:13:c8:66:02:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Mar 25 22:00:48 2026 GMT
Not After : Mar 26 22:00:48 2026 GMT
Subject: CN=930d638a0ae76c027c49ea709831c438a4c8911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:43:f2:c6:9f:5d:ad:40:3f:27:57:1c:98:
cc:97:2c:50:ca:33:79:08:24:21:9e:af:78:6e:84:
f7:13:f4:b6:43:9b:57:bf:67:d3:fc:32:5d:b1:79:
34:4b:f1:d6:09:70:2e:f7:1b:02:89:d6:69:df:bf:
5c:e6:1c:23:1a:9a:e0:67:d0:75:da:e1:8e:10:c2:
ae:d3:26:6f:49:bb:8d:04:3e:a1:d1:bf:a2:00:e1:
c2:da:37:25:7e:08:54:a9:a4:20:38:18:86:93:97:
47:c7:b3:68:82:6e:df:e6:fd:9e:74:be:00:5d:da:
14:2e:ab:d0:d7:89:cc:0e:a7:62:27:c2:78:33:c9:
3d:1a:2f:2a:2b:c6:09:f3:2c:9c:15:7b:75:ab:39:
88:a5:68:09:72:22:27:be:b7:eb:c5:7d:5b:e7:07:
4c:e3:06:1c:c9:86:ca:ef:5d:81:88:b8:2d:96:f7:
be:5c:61:ff:a9:d6:db:54:5a:dc:24:12:53:83:46:
78:ea:a0:36:04:db:26:ff:69:97:87:78:63:89:34:
22:d3:4d:16:a3:48:d1:ff:b9:fe:8f:5b:aa:f9:87:
97:1c:7c:8d:81:34:04:3f:f1:3b:67:fa:38:8f:07:
43:11:f7:a3:41:93:c9:70:6a:41:ba:26:2b:0c:90:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0D:63:8A:0A:E7:6C:02:7C:49:EA:70:98:31:C4:38:A4:C8:91:1C
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b1:7a:85:1e:75:16:5b:90:33:87:f8:8e:62:4f:a6:38:fc:
f9:85:fe:d7:36:7f:84:7e:cb:a1:9a:f9:50:21:14:8f:0c:d7:
6f:03:0d:de:c1:19:3e:d2:ea:37:b9:25:3a:dd:98:6c:a1:e9:
ce:36:e4:f4:d6:40:95:e5:ba:4a:9b:37:b3:48:a3:d4:51:33:
ff:ee:43:74:3f:a8:6c:82:ff:0c:c5:fe:44:4c:08:b4:bf:5e:
a0:ec:55:37:c4:00:f3:4b:8e:4f:af:8f:b8:cc:43:e6:d1:4a:
f2:26:71:bf:ca:59:f6:7e:7d:13:3f:60:a2:52:15:05:7a:52:
51:fd:07:48:83:76:c6:bf:7e:8f:20:b4:6a:ce:96:83:94:a6:
fa:c6:7e:f2:8f:80:84:52:68:77:ac:0c:22:c3:8d:fb:c8:90:
00:22:cc:d8:e7:67:03:c2:3f:36:75:ee:52:a5:f0:d2:63:e1:
8f:1e:5a:89:e2:f9:14:91:6c:06:28:25:cd:a3:50:15:8e:81:
a4:8b:0c:65:f4:31:10:d9:a3:66:05:2c:0b:0e:c9:93:c5:d6:
c1:91:d1:75:01:7f:0f:83:c3:71:ea:c8:d9:59:04:d5:bb:8c:
57:3c:5c:8e:86:49:b1:93:da:59:40:fb:ad:f3:f8:e5:ec:81:
97:5d:b5:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7lZG8n01WxIpBPIZgLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTYyNWRjMzk4Y2I3MDBmNzJmYThlYTZmNDMxM2JmMzMz
NWE1M2IwHhcNMjYwMzI1MjIwMDQ4WhcNMjYwMzI2MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg5MzBkNjM4YTBhZTc2YzAyN2M0OWVhNzA5ODMxYzQzOGE0Yzg5MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k9D8safXa1APydXHJjMlyxQyjN5
CCQhnq94boT3E/S2Q5tXv2fT/DJdsXk0S/HWCXAu9xsCidZp379c5hwjGprgZ9B1
2uGOEMKu0yZvSbuNBD6h0b+iAOHC2jclfghUqaQgOBiGk5dHx7Nogm7f5v2edL4A
XdoULqvQ14nMDqdiJ8J4M8k9Gi8qK8YJ8yycFXt1qzmIpWgJciInvrfrxX1b5wdM
4wYcyYbK712BiLgtlve+XGH/qdbbVFrcJBJTg0Z46qA2BNsm/2mXh3hjiTQi000W
o0jR/7n+j1uq+YeXHHyNgTQEP/E7Z/o4jwdDEfejQZPJcGpBuiYrDJBZfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMNY4oK52wCfEnqcJgxxDikyJEcMB8GA1UdIwQY
MBaAFF+mJdw5jLcA9y+o6m9DE78zNaU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAt
ZWFjMTA2MzAwYjBhLzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAtZWFjMTA2MzAwYjBh
LzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbF6hR51
FluQM4f4jmJPpjj8+YX+1zZ/hH7LoZr5UCEUjwzXbwMN3sEZPtLqN7klOt2YbKHp
zjbk9NZAleW6Sps3s0ij1FEz/+5DdD+obIL/DMX+REwItL9eoOxVN8QA80uOT6+P
uMxD5tFK8iZxv8pZ9n59Ez9golIVBXpSUf0HSIN2xr9+jyC0as6Wg5Sm+sZ+8o+A
hFJod6wMIsON+8iQACLM2OdnA8I/NnXuUqXw0mPhjx5aieL5FJFsBiglzaNQFY6B
pIsMZfQxENmjZgUsCw7Jk8XWwZHRdQF/D4PDcerI2VkE1buMVzxcjoZJsZPaWUD7
rfP45eyBl1212g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:59 2026 by rpki-client