Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: 5bpIK1OW1QP6/hfWk3+0//w/GRvuV9VCOXkL3IBL3e0=
Subject key identifier: 85:4F:AC:52:EA:3E:50:FC:11:66:7D:30:83:6B:7D:4B:81:60:3A:7B
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 019D270404714777BF98B3FA8BAAF0AE92D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 1857
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: YIRKGv+E+EgB60wIjKOjJ85gyyPg3Fh083ZnwBkHw1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:04:71:47:77:bf:98:b3:fa:8b:aa:f0:ae:92:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=854fac52ea3e50fc11667d30836b7d4b81603a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:b5:9b:8e:04:13:d1:a5:c4:36:87:b5:c1:
2d:2c:58:98:8f:23:84:8c:50:84:22:ed:79:ab:59:
17:3b:4d:27:87:bd:34:3e:fe:53:31:04:47:35:18:
98:53:84:fa:6a:4d:4b:d5:13:b5:aa:45:39:af:d9:
31:cf:66:94:07:39:2b:ce:a1:7c:3a:30:32:d9:5d:
e6:5c:21:32:6a:e2:18:8e:4d:6d:ba:3e:42:01:53:
ac:b6:9a:d1:4b:5e:05:c9:63:4c:bb:40:d6:5a:a9:
66:f7:8f:c2:0c:e1:2a:51:39:4c:95:d8:48:93:1a:
0a:41:87:93:e5:51:e2:93:16:60:15:f9:93:9d:0f:
b0:67:1c:02:30:f8:74:a5:4b:f2:c6:dc:85:48:d6:
2e:a4:bd:17:28:f2:90:73:a9:e3:d3:e0:b1:99:f4:
38:03:cf:48:60:25:89:a6:e6:ef:b1:5e:2e:b7:4a:
5f:72:6b:ae:dd:46:ab:6a:72:63:50:04:19:e4:61:
3a:b0:7b:9e:3c:2b:11:73:41:fa:fd:d6:21:08:f1:
11:a5:c2:f5:b0:69:6b:59:b5:57:10:63:9a:02:0f:
2c:d0:5b:1e:9b:9a:b0:86:fa:55:99:ff:f4:15:61:
ba:e3:80:74:ee:26:cd:02:da:83:55:ad:d0:f1:1f:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:AC:52:EA:3E:50:FC:11:66:7D:30:83:6B:7D:4B:81:60:3A:7B
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:49:81:53:50:d8:47:94:f4:b7:73:cc:76:ab:3e:b0:4b:a9:
6d:9d:39:4b:6e:8e:c6:0f:37:c7:f1:c7:c5:18:5a:66:67:b3:
43:05:46:39:e6:e3:94:9b:8f:77:05:38:70:a9:7d:15:61:58:
98:a1:52:60:e4:96:76:7e:b0:18:a3:12:d0:8b:6f:82:e9:df:
ec:09:d5:9c:97:a6:6e:f7:ac:ad:98:28:d1:b4:f6:49:47:fd:
e4:fd:8f:54:c2:a8:72:a6:32:b5:bc:1c:fb:4d:f7:9b:e5:e7:
eb:7e:73:08:82:04:f9:13:c8:a0:df:2a:41:b6:2e:91:60:ce:
30:3b:ed:db:10:ff:ad:21:24:7f:5b:5a:68:cd:78:c9:c5:96:
9e:13:ad:19:93:3b:a1:f9:ce:5a:cf:74:79:e4:8c:a8:82:f2:
39:c1:c2:04:8a:1f:3c:b3:ed:3a:31:42:a5:1e:86:9e:68:6a:
3f:2f:c4:f0:9a:e6:7e:30:7a:c6:e9:22:cd:8e:a5:c3:8b:cb:
1c:87:25:01:3b:2b:a0:64:c6:07:35:16:d5:97:7d:a7:c4:9b:
3c:ce:74:9b:76:36:16:e8:54:d1:e4:69:c0:49:e7:90:46:8f:
dd:6b:7d:85:82:58:af:0d:f6:c0:9f:14:ee:6e:84:0f:88:ac:
ca:44:88:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBARxR3e/mLP6i6rwrpLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTk5NjIzZWQwZjBjNDlmZWFiOTU3ZmNkMDI2MTQ4Njk0
MDg3YTgwHhcNMjYwMzI1MjIwMTA3WhcNMjYwMzI2MjIwMTA3WjAzMTEwLwYDVQQD
Eyg4NTRmYWM1MmVhM2U1MGZjMTE2NjdkMzA4MzZiN2Q0YjgxNjAzYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV+1m44EE9GlxDaHtcEtLFiYjyOE
jFCEIu15q1kXO00nh700Pv5TMQRHNRiYU4T6ak1L1RO1qkU5r9kxz2aUBzkrzqF8
OjAy2V3mXCEyauIYjk1tuj5CAVOstprRS14FyWNMu0DWWqlm94/CDOEqUTlMldhI
kxoKQYeT5VHikxZgFfmTnQ+wZxwCMPh0pUvyxtyFSNYupL0XKPKQc6nj0+CxmfQ4
A89IYCWJpubvsV4ut0pfcmuu3UaranJjUAQZ5GE6sHuePCsRc0H6/dYhCPERpcL1
sGlrWbVXEGOaAg8s0Fsem5qwhvpVmf/0FWG644B07ibNAtqDVa3Q8R8rGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVPrFLqPlD8EWZ9MINrfUuBYDp7MB8GA1UdIwQY
MBaAFMaZliPtDwxJ/quVf80CYUhpQIeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2Ut
MDViNTdkMmQ1NzZjLzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2UtMDViNTdkMmQ1NzZj
LzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUmBU1DY
R5T0t3PMdqs+sEupbZ05S26Oxg83x/HHxRhaZmezQwVGOebjlJuPdwU4cKl9FWFY
mKFSYOSWdn6wGKMS0Itvgunf7AnVnJembvesrZgo0bT2SUf95P2PVMKocqYytbwc
+033m+Xn635zCIIE+RPIoN8qQbYukWDOMDvt2xD/rSEkf1taaM14ycWWnhOtGZM7
ofnOWs90eeSMqILyOcHCBIofPLPtOjFCpR6GnmhqPy/E8JrmfjB6xukizY6lw4vL
HIclATsroGTGBzUW1Zd9p8SbPM50m3Y2FuhU0eRpwEnnkEaP3Wt9hYJYrw32wJ8U
7m6ED4isykSIMg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:31 2026 by rpki-client