Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
File: XEXOsYsUpzcoK3WvC6Fs_9emq64.mft (raw, json)
Hash identifier: zKPV8coaD97ZY5ZMaJEWQPheLr7Ahr1tLtJxA+ezEi4=
Subject key identifier: D2:A8:53:15:B9:3A:A9:73:96:8D:45:5D:FB:BE:59:E5:63:7D:A6:FB
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 019D2695C21061D0186867B2E1BEE1025028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
Manifest number: 0F1E
Signing time: Wed 25 Mar 2026 20:00:41 +0000
Manifest this update: Wed 25 Mar 2026 20:00:41 +0000
Manifest next update: Thu 26 Mar 2026 20:00:41 +0000
Files and hashes: 1: XEXOsYsUpzcoK3WvC6Fs_9emq64.crl (hash: /Rl9iKtXj92Hkzgea+yC3w0h+ivQgZPJBt2xlEipW5A=)
2: eBNuMo07R9Rok08GU5ID6cj0SjA.roa (hash: j6Q0bMuqq65JKWtLWZGUVMSHVDu2JJZS79yRoP4Slq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c2:10:61:d0:18:68:67:b2:e1:be:e1:02:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: Mar 25 20:00:41 2026 GMT
Not After : Mar 26 20:00:41 2026 GMT
Subject: CN=d2a85315b93aa973968d455dfbbe59e5637da6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:a6:00:c9:37:47:c1:af:8f:d0:4c:31:56:
bb:2f:e8:c0:da:33:e6:db:ad:44:36:69:e1:81:51:
3c:a8:1e:32:a2:b4:22:e6:ee:e6:5c:ae:ee:2e:e0:
16:ac:af:5b:55:dc:3f:38:ce:d9:75:47:7e:f3:5f:
0e:ae:e8:a9:e1:60:65:48:1b:79:5d:a3:51:c2:2c:
0b:70:2e:f8:6b:d6:ef:ca:86:6a:94:2a:eb:44:63:
8a:14:04:49:c9:ab:39:8b:c0:a5:e4:41:f2:f0:40:
4f:22:63:49:76:e7:b7:eb:98:7a:52:c8:b1:07:48:
a7:99:3f:0d:94:c0:3c:a5:3a:34:9a:21:b8:cc:c1:
3a:ab:08:d2:b0:75:5e:87:9d:47:8a:53:9e:ad:46:
f0:45:14:4b:38:e8:96:95:6b:f4:b6:f3:90:cb:c1:
49:97:cb:85:2f:d3:0f:6b:70:2d:1f:cf:be:f0:11:
d1:ee:61:b0:1d:36:92:8e:26:75:7d:e4:3b:b5:39:
e6:52:48:21:9e:c8:64:5b:0a:ec:38:5c:62:14:ae:
4e:94:61:fa:84:d7:06:e8:6b:2d:45:0a:f5:4e:9b:
48:2d:eb:13:2d:46:f9:cf:a7:88:f5:ac:9b:10:ae:
9a:66:9f:0a:d8:cb:bd:de:13:af:ff:48:b8:36:8d:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:53:15:B9:3A:A9:73:96:8D:45:5D:FB:BE:59:E5:63:7D:A6:FB
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:b7:30:1d:6d:be:6c:87:dc:9d:c9:f8:c0:f9:66:24:93:
05:a2:90:15:fa:85:90:c9:98:24:ab:06:8e:13:4e:c8:bf:b2:
25:3f:5e:08:70:83:17:d4:46:db:77:85:e8:b7:87:82:a6:d4:
8d:16:33:2f:66:1c:4b:90:6d:c3:20:0b:cf:b4:2e:45:32:f2:
bb:c6:8b:b3:c6:27:80:38:13:10:57:9d:9a:f5:b3:59:5a:26:
52:15:71:c1:4c:d6:21:68:4f:14:9c:b7:59:4b:57:b8:02:79:
85:0f:42:2c:ff:a1:1f:b2:56:46:96:3c:d7:48:fc:37:17:45:
cb:f0:1e:06:a9:ae:23:93:57:82:4e:69:95:22:ab:ee:8f:0d:
c2:32:a6:4f:62:6a:b6:1b:bc:7c:45:f9:b6:34:d2:dc:07:ec:
ae:29:2d:e5:1a:de:b3:8c:79:70:87:13:60:1a:c7:f9:cd:9c:
c7:0c:09:e7:75:f9:8b:08:77:0e:2b:b0:b6:20:b2:81:98:8e:
7a:d9:99:e5:3d:8d:46:ee:91:54:ff:8e:ae:e9:a5:e4:e5:f5:
54:a7:78:0d:66:73:e8:c5:b4:49:c9:5f:9d:79:1c:55:53:6d:
bc:0a:dd:0a:90:6c:56:1b:06:52:d9:42:e8:53:ca:ff:e2:6e:
2b:51:98:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlcIQYdAYaGey4b7hAlAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNDVjZWIxOGIxNGE3MzcyODJiNzVhZjBiYTE2Y2ZmZDdh
NmFiYWUwHhcNMjYwMzI1MjAwMDQxWhcNMjYwMzI2MjAwMDQxWjAzMTEwLwYDVQQD
EyhkMmE4NTMxNWI5M2FhOTczOTY4ZDQ1NWRmYmJlNTllNTYzN2RhNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HemAMk3R8Gvj9BMMVa7L+jA2jPm
261ENmnhgVE8qB4yorQi5u7mXK7uLuAWrK9bVdw/OM7ZdUd+818Oruip4WBlSBt5
XaNRwiwLcC74a9bvyoZqlCrrRGOKFARJyas5i8Cl5EHy8EBPImNJdue365h6Usix
B0inmT8NlMA8pTo0miG4zME6qwjSsHVeh51HilOerUbwRRRLOOiWlWv0tvOQy8FJ
l8uFL9MPa3AtH8++8BHR7mGwHTaSjiZ1feQ7tTnmUkghnshkWwrsOFxiFK5OlGH6
hNcG6GstRQr1TptILesTLUb5z6eI9aybEK6aZp8K2Mu93hOv/0i4No1opQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKoUxW5Oqlzlo1FXfu+WeVjfab7MB8GA1UdIwQY
MBaAFFxFzrGLFKc3KCt1rwuhbP/XpquuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kNzFlZjgtNGI5OC00MDBhLTg5ZWUt
YzYxYmY3NzQ5ZGY1LzEvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kNzFlZjgtNGI5OC00MDBhLTg5ZWUtYzYxYmY3NzQ5ZGY1
LzEvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrK3MB1t
vmyH3J3J+MD5ZiSTBaKQFfqFkMmYJKsGjhNOyL+yJT9eCHCDF9RG23eF6LeHgqbU
jRYzL2YcS5BtwyALz7QuRTLyu8aLs8YngDgTEFedmvWzWVomUhVxwUzWIWhPFJy3
WUtXuAJ5hQ9CLP+hH7JWRpY810j8NxdFy/AeBqmuI5NXgk5plSKr7o8NwjKmT2Jq
thu8fEX5tjTS3Afsrikt5Rres4x5cIcTYBrH+c2cxwwJ53X5iwh3DiuwtiCygZiO
etmZ5T2NRu6RVP+Oruml5OX1VKd4DWZz6MW0SclfnXkcVVNtvArdCpBsVhsGUtlC
6FPK/+JuK1GYsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:33 2026 by rpki-client