Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: DU9O5E6MTpvaeDNE42ZuHYfru1QritB1O/WmFhU/FRM=
Subject key identifier: 69:7A:39:70:71:08:A6:F5:A5:08:07:B9:11:85:75:65:25:AF:93:08
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 019D27A89832C2AC800407EE19D788F78FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 0880
Signing time: Thu 26 Mar 2026 01:00:53 +0000
Manifest this update: Thu 26 Mar 2026 01:00:53 +0000
Manifest next update: Fri 27 Mar 2026 01:00:53 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: yL4BwjI/CH1gKZWYYPZAwwzldTcu3JNZaj2qqxjSqWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:98:32:c2:ac:80:04:07:ee:19:d7:88:f7:8f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Mar 26 01:00:53 2026 GMT
Not After : Mar 27 01:00:53 2026 GMT
Subject: CN=697a39707108a6f5a50807b91185756525af9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:0e:0d:bc:cc:de:4e:60:9f:33:55:a1:74:
4d:69:c1:0a:9d:ab:51:a0:eb:78:e3:91:09:d2:7e:
47:da:51:48:a4:e5:fd:ff:7a:57:22:1e:f3:10:c3:
a3:9b:47:01:0e:10:f3:7f:ef:28:90:81:9b:0d:35:
74:fa:73:46:1c:41:59:c1:61:70:ea:1c:05:bc:2c:
bf:8c:ba:1e:6b:66:66:2e:a7:93:8f:16:b5:b4:dd:
da:5a:75:e6:d5:ff:94:79:64:5f:80:00:0e:ec:20:
28:f4:fb:fb:2f:ed:b7:22:78:81:78:d5:ce:d8:ea:
af:64:9c:15:22:69:61:f4:c5:4a:72:42:cd:ef:37:
5d:95:75:cf:b6:be:3f:93:83:16:a8:cf:6c:d3:fc:
53:26:60:d3:c8:d7:8a:6a:2e:f4:66:31:d2:b4:5c:
d2:55:a4:d3:09:73:1c:a3:e9:7c:3a:7c:70:e2:2d:
76:9f:05:d0:83:5c:2e:51:b3:2c:4d:b2:4f:90:10:
fb:c2:7c:91:ae:5e:88:38:64:d5:d8:53:b5:af:b1:
e0:a4:95:e3:5b:03:76:e7:8e:3a:9a:16:5e:98:06:
35:7d:aa:eb:4d:e2:34:d8:0e:0d:a3:31:1b:9b:0b:
ad:1d:c3:55:78:46:17:74:cf:c0:f3:69:2e:51:6b:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7A:39:70:71:08:A6:F5:A5:08:07:B9:11:85:75:65:25:AF:93:08
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f3:0a:27:5e:9d:c1:9a:2d:63:00:9b:22:04:cf:21:bd:dc:
77:76:b3:fb:82:8a:34:f5:fc:a3:21:2b:3a:85:ab:d3:4b:a1:
99:23:65:3d:51:e1:82:74:c9:77:e7:b1:20:ba:cb:9c:2c:5d:
9d:21:ed:ee:ac:ef:2c:3f:03:d6:16:7c:82:8a:cf:b2:30:f6:
69:75:1a:2d:5e:b6:02:61:04:0f:10:0f:88:43:0b:6c:a9:8d:
95:63:d7:49:89:96:03:7e:47:78:d8:70:8f:42:ee:f8:0e:91:
c0:19:5e:59:59:21:60:34:77:20:b4:d5:f7:42:41:b2:8b:81:
1b:57:36:8f:0e:32:78:e4:11:8c:6a:02:9e:e0:3f:2e:ec:79:
a1:6f:dc:bc:4c:14:b6:a9:d1:1c:38:fe:76:97:81:9d:32:c2:
bc:33:31:84:60:df:b2:7b:fa:41:46:44:fb:d2:ee:fd:b0:a3:
0c:d9:c3:65:2f:f9:2d:31:7e:0c:54:2c:be:17:50:6a:ac:91:
99:f9:95:bb:2f:df:37:e4:6e:a4:57:56:5b:c6:69:72:0a:a7:
99:90:aa:bc:36:f6:f2:24:2a:80:71:aa:90:db:fa:04:ed:31:
ca:35:6e:16:99:75:c6:5a:27:23:fe:0a:40:61:84:d5:77:96:
ef:bb:a8:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJgywqyABAfuGdeI94/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTFjMzM5NTkxZWRmYzk2NjdhM2U3OTExOGRkMjNjNDAy
YmU4N2YwHhcNMjYwMzI2MDEwMDUzWhcNMjYwMzI3MDEwMDUzWjAzMTEwLwYDVQQD
Eyg2OTdhMzk3MDcxMDhhNmY1YTUwODA3YjkxMTg1NzU2NTI1YWY5MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06AODbzM3k5gnzNVoXRNacEKnatR
oOt445EJ0n5H2lFIpOX9/3pXIh7zEMOjm0cBDhDzf+8okIGbDTV0+nNGHEFZwWFw
6hwFvCy/jLoea2ZmLqeTjxa1tN3aWnXm1f+UeWRfgAAO7CAo9Pv7L+23IniBeNXO
2OqvZJwVImlh9MVKckLN7zddlXXPtr4/k4MWqM9s0/xTJmDTyNeKai70ZjHStFzS
VaTTCXMco+l8Onxw4i12nwXQg1wuUbMsTbJPkBD7wnyRrl6IOGTV2FO1r7HgpJXj
WwN25446mhZemAY1farrTeI02A4NozEbmwutHcNVeEYXdM/A82kuUWuCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl6OXBxCKb1pQgHuRGFdWUlr5MIMB8GA1UdIwQY
MBaAFMQRwzlZHt/JZno+eRGN0jxAK+h/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kMjMzNDQtYjI4MS00MmQyLWJjMzMt
ZWNiZjdmMTdmNjA0LzEveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kMjMzNDQtYjI4MS00MmQyLWJjMzMtZWNiZjdmMTdmNjA0
LzEveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfMKJ16d
wZotYwCbIgTPIb3cd3az+4KKNPX8oyErOoWr00uhmSNlPVHhgnTJd+exILrLnCxd
nSHt7qzvLD8D1hZ8gorPsjD2aXUaLV62AmEEDxAPiEMLbKmNlWPXSYmWA35HeNhw
j0Lu+A6RwBleWVkhYDR3ILTV90JBsouBG1c2jw4yeOQRjGoCnuA/Lux5oW/cvEwU
tqnRHDj+dpeBnTLCvDMxhGDfsnv6QUZE+9Lu/bCjDNnDZS/5LTF+DFQsvhdQaqyR
mfmVuy/fN+RupFdWW8ZpcgqnmZCqvDb28iQqgHGqkNv6BO0xyjVuFpl1xlonI/4K
QGGE1XeW77uoNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:43 2026 by rpki-client