Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: CMTr0voNBzCbks8a2mqJxJ9Y8tHZA7H5hYOaszs4Zs4=
Subject key identifier: C3:2E:6D:C2:29:8D:89:DA:C4:9C:C8:9F:F2:3F:DD:78:ED:8E:1F:A8
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 019D25F169C492E42B34EB24521D0FA870BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 0E38
Signing time: Wed 25 Mar 2026 17:01:11 +0000
Manifest this update: Wed 25 Mar 2026 17:01:11 +0000
Manifest next update: Thu 26 Mar 2026 17:01:11 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: ddxlcSjjh3FY5VCmAu0uyqK4tQJ+PXJBtOD/65gywHs=)
2: cdVP4VMQTXg2CT86yVWAypk62nQ.roa (hash: LC40P/qPiuezV8f6FpcmDk2skf+yITxCG3dFo+ERAAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:69:c4:92:e4:2b:34:eb:24:52:1d:0f:a8:70:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Mar 25 17:01:11 2026 GMT
Not After : Mar 26 17:01:11 2026 GMT
Subject: CN=c32e6dc2298d89dac49cc89ff23fdd78ed8e1fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:f7:ea:fe:75:64:5b:22:b7:6e:87:0f:f2:
ad:72:fb:7f:fb:bb:4d:0c:69:61:2c:96:3c:45:03:
b5:df:08:e5:31:90:0f:91:3b:c0:3e:8e:34:6d:2c:
8c:e4:01:b3:aa:d2:e3:d4:8c:e4:67:38:04:3d:8e:
e8:f0:65:ea:39:5a:03:77:65:84:ee:2c:9d:e5:d7:
34:8e:c2:fe:88:cd:58:f4:cb:0e:97:c2:72:b7:08:
17:40:8d:75:81:b0:13:e8:05:ff:86:84:79:24:1a:
33:7b:89:6d:94:61:84:27:0f:18:26:2e:df:15:3f:
83:4a:58:8c:ee:d0:7b:4c:0e:27:ae:6b:c5:74:a8:
bf:13:44:bb:ce:aa:c2:06:52:1b:bd:34:35:e7:b2:
b7:30:f9:34:8d:12:97:d8:d2:64:e0:5a:a7:fd:9f:
19:f8:48:fa:e0:90:48:a8:aa:b1:73:f7:2a:d2:7d:
49:4a:06:e9:3f:1f:ed:36:bd:f8:98:d4:75:38:38:
2c:b3:af:bb:62:69:97:06:1a:aa:8c:2a:f9:f4:74:
ff:a4:d7:1a:46:39:45:88:2b:71:26:85:da:66:8e:
aa:55:4b:f0:24:25:5f:55:40:00:5b:af:1b:96:74:
38:2b:39:42:e1:63:b1:82:15:72:1a:be:98:da:80:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:6D:C2:29:8D:89:DA:C4:9C:C8:9F:F2:3F:DD:78:ED:8E:1F:A8
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:0a:35:7e:ce:4b:08:b6:22:e2:05:d8:f5:c6:89:eb:46:
63:66:5e:cb:47:7d:75:b0:61:c5:d8:a4:02:9b:9f:49:da:bd:
6b:d0:f2:5a:b2:0b:72:5d:ff:64:3e:eb:8f:42:4b:c6:3b:7d:
32:04:c5:86:f2:27:e8:45:fa:ff:9c:50:88:ac:67:f1:f9:4d:
ec:ca:93:3c:a7:8f:21:f0:b7:85:0d:55:64:68:b7:cf:82:fc:
ff:4f:4e:df:69:b6:2c:4c:53:74:84:3c:92:51:3f:1a:f1:95:
39:2e:9a:86:b7:2d:9b:b5:ad:b6:5c:af:2e:63:0b:ec:a0:fe:
35:48:17:59:4c:2e:cf:26:49:9e:f1:82:b0:65:03:96:53:04:
fc:9a:55:f1:0c:29:74:2d:34:64:29:66:f9:00:57:33:6e:81:
b9:6c:1a:a9:38:14:02:1b:72:46:83:25:2c:89:14:62:c7:27:
6e:0c:23:98:e1:40:a0:fe:96:65:81:a6:f7:b6:2f:ab:ea:3b:
07:25:b9:29:5d:de:03:80:2e:17:d0:dc:b1:71:7a:8d:ab:c6:
8e:bc:35:0f:63:fc:54:2e:7d:4a:83:fa:c6:ab:e4:ae:fd:04:
67:69:fd:50:62:fc:53:4b:49:f8:56:7b:46:21:69:84:3d:e8:
e4:b1:c4:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8WnEkuQrNOskUh0PqHC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh
YWMyZDkwHhcNMjYwMzI1MTcwMTExWhcNMjYwMzI2MTcwMTExWjAzMTEwLwYDVQQD
EyhjMzJlNmRjMjI5OGQ4OWRhYzQ5Y2M4OWZmMjNmZGQ3OGVkOGUxZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbL36v51ZFsit26HD/Ktcvt/+7tN
DGlhLJY8RQO13wjlMZAPkTvAPo40bSyM5AGzqtLj1IzkZzgEPY7o8GXqOVoDd2WE
7iyd5dc0jsL+iM1Y9MsOl8JytwgXQI11gbAT6AX/hoR5JBoze4ltlGGEJw8YJi7f
FT+DSliM7tB7TA4nrmvFdKi/E0S7zqrCBlIbvTQ157K3MPk0jRKX2NJk4Fqn/Z8Z
+Ej64JBIqKqxc/cq0n1JSgbpPx/tNr34mNR1ODgss6+7YmmXBhqqjCr59HT/pNca
RjlFiCtxJoXaZo6qVUvwJCVfVUAAW68blnQ4KzlC4WOxghVyGr6Y2oDB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMubcIpjYnaxJzIn/I/3Xjtjh+oMB8GA1UdIwQY
MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct
MjhhNTZlYTVjZjBiLzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi
LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBkKNX7O
Swi2IuIF2PXGietGY2Zey0d9dbBhxdikApufSdq9a9DyWrILcl3/ZD7rj0JLxjt9
MgTFhvIn6EX6/5xQiKxn8flN7MqTPKePIfC3hQ1VZGi3z4L8/09O32m2LExTdIQ8
klE/GvGVOS6ahrctm7WttlyvLmML7KD+NUgXWUwuzyZJnvGCsGUDllME/JpV8Qwp
dC00ZClm+QBXM26BuWwaqTgUAhtyRoMlLIkUYscnbgwjmOFAoP6WZYGm97Yvq+o7
ByW5KV3eA4AuF9DcsXF6javGjrw1D2P8VC59SoP6xqvkrv0EZ2n9UGL8U0tJ+FZ7
RiFphD3o5LHECw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:24 2026 by rpki-client