Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier: FNgvpLbJbUJVbsnqTRA37LJ8Ugch19jnreYa+/jxu3E=
Subject key identifier: D1:03:0F:CA:69:91:F7:15:AF:30:CA:02:89:BB:EB:A8:42:C2:B4:6C
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial: 019D27A865EFC7192BD71B00B47F450E1AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number: 0EC7
Signing time: Thu 26 Mar 2026 01:00:40 +0000
Manifest this update: Thu 26 Mar 2026 01:00:40 +0000
Manifest next update: Fri 27 Mar 2026 01:00:40 +0000
Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: qxofv9rS4fvZRup8csViwlWPT4pfDNDrU2tKCeZxyxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:65:ef:c7:19:2b:d7:1b:00:b4:7f:45:0e:1a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Validity
Not Before: Mar 26 01:00:40 2026 GMT
Not After : Mar 27 01:00:40 2026 GMT
Subject: CN=d1030fca6991f715af30ca0289bbeba842c2b46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:10:75:bd:a5:f0:31:93:f8:5e:0b:2c:22:fc:
2c:e1:8c:b0:ab:bf:9f:b3:d9:b4:73:87:92:e8:e5:
ef:fc:bb:21:e7:06:e0:2d:7c:74:88:24:de:ea:51:
37:d7:47:3d:e7:1a:f2:e0:22:21:af:e2:e4:7b:2a:
f9:55:67:29:8d:3d:91:40:78:62:3a:8a:e6:ba:5b:
74:2a:ed:9c:83:33:1c:30:82:30:c3:e5:68:d0:07:
f1:03:37:90:58:f4:8a:ea:9c:b6:7e:1a:4b:88:a5:
03:9e:90:a4:57:29:0c:c3:ed:d3:1e:ab:07:0a:f1:
fa:49:44:70:bd:ca:f8:45:4b:94:6e:12:67:4b:8d:
c8:17:16:2b:c9:6c:f6:15:e3:72:f8:c8:07:e0:30:
3b:ce:a5:ca:c7:46:5f:42:35:8e:1a:76:ba:65:fe:
69:08:f6:1d:51:12:a8:a4:5c:c0:e7:93:37:cb:23:
08:41:5a:3e:75:88:ea:86:f5:ef:72:5b:20:d4:c6:
ca:44:b7:13:e4:17:43:59:69:6c:ac:46:e2:28:5e:
4b:15:8c:f8:60:6b:13:56:e3:76:77:cd:26:29:b7:
d8:f0:fe:b5:26:f0:0d:c6:94:37:5f:b5:9f:5d:e3:
2f:2a:7f:ac:9e:6a:64:31:b0:5e:1d:07:ae:4c:ad:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:0F:CA:69:91:F7:15:AF:30:CA:02:89:BB:EB:A8:42:C2:B4:6C
X509v3 Authority Key Identifier:
keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:11:b0:89:a1:c3:c4:13:fa:f3:a8:ae:67:e2:c6:af:47:fd:
2f:30:18:2d:39:86:62:c3:77:79:b3:f4:93:87:d7:dc:94:8c:
c9:d7:c2:d3:2c:0f:79:f6:68:af:d8:57:83:30:e5:bf:3d:4b:
47:37:03:fc:54:e6:93:b6:07:9b:33:fc:f9:93:8d:66:3b:ac:
6f:38:fe:e1:62:40:da:7d:df:b5:47:96:78:de:64:5b:91:1b:
23:a6:cb:a1:92:8e:6b:31:95:8e:3a:99:7a:93:8b:eb:9f:ed:
1e:7c:67:de:1e:23:24:b8:eb:69:1a:ac:97:10:12:db:ce:da:
89:42:f0:e7:e9:6a:f5:47:e4:e4:ec:0e:e4:7c:b1:76:17:b1:
65:ef:25:a3:63:65:d6:25:2a:ed:5c:8f:a0:80:7c:88:83:65:
9e:e6:a0:b0:28:de:65:8d:c3:9b:f8:91:75:9b:26:40:0c:bb:
fd:0b:77:8c:cf:50:4d:9f:e2:74:17:fc:a0:6b:ce:6b:1c:e1:
c0:66:aa:23:de:ba:3c:90:4d:28:d9:ee:6b:2b:2a:3e:5a:9d:
b2:42:ec:40:3f:d7:d3:c4:c9:2a:b8:25:3d:a2:55:af:24:b2:
75:a9:63:da:5a:b8:26:ee:6b:94:33:1e:e5:95:a6:f1:ce:d6:
f2:65:3b:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGXvxxkr1xsAtH9FDhqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MjdiYWU5Nzk0MWI2MGYzZGNkM2FhMDdlMmM1ZmQ5ZGQw
M2E2YzEwHhcNMjYwMzI2MDEwMDQwWhcNMjYwMzI3MDEwMDQwWjAzMTEwLwYDVQQD
EyhkMTAzMGZjYTY5OTFmNzE1YWYzMGNhMDI4OWJiZWJhODQyYzJiNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RB1vaXwMZP4XgssIvws4Yywq7+f
s9m0c4eS6OXv/Lsh5wbgLXx0iCTe6lE310c95xry4CIhr+Lkeyr5VWcpjT2RQHhi
Oormult0Ku2cgzMcMIIww+Vo0AfxAzeQWPSK6py2fhpLiKUDnpCkVykMw+3THqsH
CvH6SURwvcr4RUuUbhJnS43IFxYryWz2FeNy+MgH4DA7zqXKx0ZfQjWOGna6Zf5p
CPYdURKopFzA55M3yyMIQVo+dYjqhvXvclsg1MbKRLcT5BdDWWlsrEbiKF5LFYz4
YGsTVuN2d80mKbfY8P61JvANxpQ3X7WfXeMvKn+snmpkMbBeHQeuTK1K8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEDD8ppkfcVrzDKAom766hCwrRsMB8GA1UdIwQY
MBaAFMUnuul5QbYPPc06oH4sX9ndA6bBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQt
MTM2NmQ0ZWY3ZjNiLzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQtMTM2NmQ0ZWY3ZjNi
LzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBGwiaHD
xBP686iuZ+LGr0f9LzAYLTmGYsN3ebP0k4fX3JSMydfC0ywPefZor9hXgzDlvz1L
RzcD/FTmk7YHmzP8+ZONZjusbzj+4WJA2n3ftUeWeN5kW5EbI6bLoZKOazGVjjqZ
epOL65/tHnxn3h4jJLjraRqslxAS287aiULw5+lq9Ufk5OwO5HyxdhexZe8lo2Nl
1iUq7VyPoIB8iINlnuagsCjeZY3Dm/iRdZsmQAy7/Qt3jM9QTZ/idBf8oGvOaxzh
wGaqI966PJBNKNnuaysqPlqdskLsQD/X08TJKrglPaJVrySydalj2lq4Ju5rlDMe
5ZWm8c7W8mU7Ag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:32 2026 by rpki-client