Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
File: X06OdhPaoX6FqhB4yOwlXPGNQio.mft (raw, json)
Hash identifier: pT06aNd3Xtrk/CS7nQoYUzQs3oycunhJW2Mkuj8USQg=
Subject key identifier: D7:4D:69:77:AF:E6:FA:72:B4:75:8C:75:50:40:15:DD:2E:9B:C7:EC
Authority key identifier: 5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
Certificate issuer: /CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
Certificate serial: 019D28F23CFE7AF11AF843AB0F59255EB8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
Manifest number: 0FB2
Signing time: Thu 26 Mar 2026 07:00:57 +0000
Manifest this update: Thu 26 Mar 2026 07:00:57 +0000
Manifest next update: Fri 27 Mar 2026 07:00:57 +0000
Files and hashes: 1: X06OdhPaoX6FqhB4yOwlXPGNQio.crl (hash: X6/aBmIY7G3mZ9kXsVIj8XkjFZZDQX/jXU8SkPsk+l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3c:fe:7a:f1:1a:f8:43:ab:0f:59:25:5e:b8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
Validity
Not Before: Mar 26 07:00:57 2026 GMT
Not After : Mar 27 07:00:57 2026 GMT
Subject: CN=d74d6977afe6fa72b4758c75504015dd2e9bc7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:24:45:0c:16:0b:5f:ae:c8:4c:1d:da:20:
aa:9e:8c:81:48:eb:00:c6:41:5a:82:17:44:e6:af:
cb:18:ed:9c:f4:19:ea:df:cc:fc:7f:c1:92:31:14:
c4:1b:e5:a2:f5:b1:17:b8:a7:e2:5c:b7:36:6e:89:
da:97:94:61:76:dc:38:c9:5c:85:52:78:0e:c9:f9:
e8:5c:dd:b9:8d:f1:75:86:e4:89:1b:aa:8d:55:80:
3e:c7:ea:4a:0d:05:8a:0e:e6:38:f2:6d:43:5a:13:
a7:1f:d4:5d:40:57:0a:a2:7e:fc:d5:6f:43:28:63:
1f:2f:a2:e1:87:c9:7f:a2:36:22:07:83:47:19:c7:
bd:2c:f0:5e:13:45:e1:57:62:0e:15:13:1f:5a:4a:
83:bc:57:48:e0:7f:c1:9c:99:22:5d:a6:e5:78:bc:
09:6a:f4:ec:12:75:c4:58:1b:e4:b6:fb:f3:ed:f0:
1f:d8:a2:a2:8a:2e:3f:48:a2:b9:84:23:fd:aa:25:
9c:fe:a8:88:00:3a:75:6e:50:02:23:8a:1b:ab:44:
de:0e:6f:d4:14:65:72:8a:64:41:0d:7d:aa:11:4c:
d5:f7:f2:02:dc:36:a8:20:79:6e:aa:17:0c:21:45:
0c:ea:28:87:be:4a:fb:1b:3b:b8:a5:e0:07:40:13:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:69:77:AF:E6:FA:72:B4:75:8C:75:50:40:15:DD:2E:9B:C7:EC
X509v3 Authority Key Identifier:
keyid:5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:00:49:d5:68:e7:23:88:c7:cd:32:0a:2b:db:a6:93:d8:
37:be:aa:1e:c3:1a:9b:17:3d:61:8c:14:e7:89:29:13:4b:78:
c7:8a:fb:2b:3f:e0:7e:21:02:8d:fb:79:49:29:bd:d9:71:12:
4a:9e:e4:90:29:a0:fc:81:e8:2d:e0:32:88:ff:ed:c0:b2:6f:
69:dd:92:94:be:98:26:fc:25:18:23:e1:cc:a7:be:20:2b:28:
ab:1f:85:2d:84:d6:dc:72:b5:49:30:60:8c:a5:1c:84:60:79:
4c:67:70:42:38:66:ba:6a:a3:43:50:dc:7a:56:6f:38:f4:85:
13:39:2f:1e:80:f8:4b:8d:09:79:66:2d:03:bb:ba:5a:bc:a2:
c7:89:4d:50:71:6e:ee:ab:d8:78:cf:6f:10:b9:12:4b:0a:79:
e1:fa:15:6a:5a:8a:08:7b:41:11:4c:eb:77:25:9a:bc:3f:18:
95:8f:a9:a6:c9:f0:1f:c1:5c:5a:4e:52:a9:d7:ba:59:07:33:
2a:54:eb:80:55:5f:b9:9f:85:25:cc:3f:12:7d:63:35:ee:8a:
08:93:10:10:ef:cd:22:8f:98:35:03:39:b0:a8:9b:3f:6a:29:
16:06:29:44:b5:9a:dd:50:1a:0e:78:ae:f8:44:90:a2:78:9c:
cd:38:20:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8jz+evEa+EOrD1klXri4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNGU4ZTc2MTNkYWExN2U4NWFhMTA3OGM4ZWMyNTVjZjE4
ZDQyMmEwHhcNMjYwMzI2MDcwMDU3WhcNMjYwMzI3MDcwMDU3WjAzMTEwLwYDVQQD
EyhkNzRkNjk3N2FmZTZmYTcyYjQ3NThjNzU1MDQwMTVkZDJlOWJjN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTMkRQwWC1+uyEwd2iCqnoyBSOsA
xkFaghdE5q/LGO2c9Bnq38z8f8GSMRTEG+Wi9bEXuKfiXLc2bonal5Rhdtw4yVyF
UngOyfnoXN25jfF1huSJG6qNVYA+x+pKDQWKDuY48m1DWhOnH9RdQFcKon781W9D
KGMfL6Lhh8l/ojYiB4NHGce9LPBeE0XhV2IOFRMfWkqDvFdI4H/BnJkiXableLwJ
avTsEnXEWBvktvvz7fAf2KKiii4/SKK5hCP9qiWc/qiIADp1blACI4obq0TeDm/U
FGVyimRBDX2qEUzV9/IC3DaoIHluqhcMIUUM6iiHvkr7Gzu4peAHQBMDdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdNaXev5vpytHWMdVBAFd0um8fsMB8GA1UdIwQY
MBaAFF9OjnYT2qF+haoQeMjsJVzxjUIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDA2T2RoUGFvWDZGcWhCNHlPd2xYUEdOUWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MGJmZDctNzExZC00YWQ5LTgyZjct
MmYzYzAwMzJlNDQ2LzEvWDA2T2RoUGFvWDZGcWhCNHlPd2xYUEdOUWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MGJmZDctNzExZC00YWQ5LTgyZjctMmYzYzAwMzJlNDQ2
LzEvWDA2T2RoUGFvWDZGcWhCNHlPd2xYUEdOUWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQ0ASdVo
5yOIx80yCivbppPYN76qHsMamxc9YYwU54kpE0t4x4r7Kz/gfiECjft5SSm92XES
Sp7kkCmg/IHoLeAyiP/twLJvad2SlL6YJvwlGCPhzKe+ICsoqx+FLYTW3HK1STBg
jKUchGB5TGdwQjhmumqjQ1DcelZvOPSFEzkvHoD4S40JeWYtA7u6Wryix4lNUHFu
7qvYeM9vELkSSwp54foValqKCHtBEUzrdyWavD8YlY+ppsnwH8FcWk5Sqde6WQcz
KlTrgFVfuZ+FJcw/En1jNe6KCJMQEO/NIo+YNQM5sKibP2opFgYpRLWa3VAaDniu
+ESQoniczTgg/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:13 2026 by rpki-client