Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: JfRrzteAqE+C1IRH/Mbi2PsGIbcHZsSM8fMn1KqAox4=
Subject key identifier: 45:83:C4:63:38:E2:E3:5A:C0:F4:8A:3B:90:E1:2B:7E:37:5E:AE:73
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 019D2772772606499DA8D97624083BE39EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 146D
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: 3Cmgqiau2i3L0Qy/z15RXq+iuVO8uIpo9Wt5YnSh1do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:77:26:06:49:9d:a8:d9:76:24:08:3b:e3:9e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=4583c46338e2e35ac0f48a3b90e12b7e375eae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:61:bf:74:fc:54:b4:6c:b2:13:2b:93:9d:
c4:5e:34:77:01:c1:40:fe:45:88:40:cf:9a:88:3e:
95:c7:7a:26:64:fb:a7:2f:bd:c0:1f:e0:05:bc:e9:
31:98:61:25:5d:a4:c0:3d:e0:0d:06:b9:d6:ab:83:
cf:3b:59:c8:bd:eb:c2:6b:0f:f0:ea:a1:66:59:fb:
66:75:6a:08:38:72:52:96:bd:a0:bd:e3:b3:16:68:
60:35:96:80:30:68:83:40:d8:29:0c:7e:ac:8d:87:
8e:fd:51:59:15:de:5b:f3:f8:f2:28:1e:0b:89:29:
fb:1e:af:a0:bc:35:18:b8:a2:51:43:d8:42:5d:79:
f6:43:f8:29:bc:8b:7e:ce:00:ab:ab:0d:4f:75:04:
a4:29:d9:37:da:39:80:79:4b:fa:71:50:69:0e:db:
2a:57:2e:08:78:b2:bf:2e:69:21:a1:a3:15:33:2e:
3f:12:d2:85:1b:b3:d4:f3:86:53:ad:14:93:06:31:
72:35:c4:dd:b8:60:40:e2:4c:41:99:0e:15:68:9b:
37:34:51:3b:e5:54:18:07:12:c5:d1:da:4c:2c:28:
a2:cb:8d:de:5b:20:e3:df:ed:65:3d:14:7f:67:8c:
14:c4:63:58:de:b5:51:d3:99:b4:a7:bb:fd:e5:7f:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:C4:63:38:E2:E3:5A:C0:F4:8A:3B:90:E1:2B:7E:37:5E:AE:73
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:3c:d7:ed:06:f9:03:72:00:1f:ef:a8:22:27:a9:3a:f3:
a1:d9:57:d7:e4:33:52:95:38:c3:76:12:3b:17:76:d0:33:98:
89:17:6c:5a:98:03:07:27:aa:87:30:c7:a1:94:f9:56:7f:e4:
9d:1a:b5:bc:92:62:2f:df:4e:fe:3d:5d:39:8a:eb:ec:d1:1b:
d0:f2:e4:d4:a9:37:6b:45:0f:16:1d:72:b3:e8:d1:b6:9e:a0:
0b:68:17:8d:e8:77:55:8c:62:23:42:37:dc:85:83:be:84:00:
d1:4b:4a:c7:b6:ea:78:f9:46:db:53:05:01:1e:c1:57:dc:3e:
ac:5c:3d:58:69:7c:27:f2:fb:9b:39:07:57:db:4a:e3:c9:1d:
61:98:54:16:82:49:d9:61:d6:ec:58:56:20:98:59:c6:2c:64:
6c:06:a9:3f:8d:c3:0c:f8:cf:2a:37:5c:a9:60:69:1c:1c:54:
57:88:83:68:17:b3:ab:a6:09:d9:b8:a1:31:7a:39:6d:09:24:
17:e0:12:31:2c:62:71:a6:b9:73:eb:63:a7:94:dc:db:e6:69:
ed:0b:6c:a8:f7:e5:e0:be:02:7b:18:0c:56:7d:3e:3e:90:7f:
53:54:1b:86:15:34:89:ca:4b:87:7b:7c:bd:90:41:c6:9d:fe:
c3:5e:e4:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncncmBkmdqNl2JAg74579MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZWE4MTRhOTkyYTcxZjVhMmE5YmVmY2VmNjZmYzYyMjBm
MTc4ZjcwHhcNMjYwMzI2MDAwMTQ2WhcNMjYwMzI3MDAwMTQ2WjAzMTEwLwYDVQQD
Eyg0NTgzYzQ2MzM4ZTJlMzVhYzBmNDhhM2I5MGUxMmI3ZTM3NWVhZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4lhv3T8VLRsshMrk53EXjR3AcFA
/kWIQM+aiD6Vx3omZPunL73AH+AFvOkxmGElXaTAPeANBrnWq4PPO1nIvevCaw/w
6qFmWftmdWoIOHJSlr2gveOzFmhgNZaAMGiDQNgpDH6sjYeO/VFZFd5b8/jyKB4L
iSn7Hq+gvDUYuKJRQ9hCXXn2Q/gpvIt+zgCrqw1PdQSkKdk32jmAeUv6cVBpDtsq
Vy4IeLK/LmkhoaMVMy4/EtKFG7PU84ZTrRSTBjFyNcTduGBA4kxBmQ4VaJs3NFE7
5VQYBxLF0dpMLCiiy43eWyDj3+1lPRR/Z4wUxGNY3rVR05m0p7v95X9hKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWDxGM44uNawPSKO5DhK343Xq5zMB8GA1UdIwQY
MBaAFMbqgUqZKnH1oqm+/O9m/GIg8Xj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjY2NGEtM2JiZS00OTM5LWE1ZTAt
YWZhNjNkOGZhNjM4LzEveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kZjY2NGEtM2JiZS00OTM5LWE1ZTAtYWZhNjNkOGZhNjM4
LzEveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAId081+0G
+QNyAB/vqCInqTrzodlX1+QzUpU4w3YSOxd20DOYiRdsWpgDByeqhzDHoZT5Vn/k
nRq1vJJiL99O/j1dOYrr7NEb0PLk1Kk3a0UPFh1ys+jRtp6gC2gXjeh3VYxiI0I3
3IWDvoQA0UtKx7bqePlG21MFAR7BV9w+rFw9WGl8J/L7mzkHV9tK48kdYZhUFoJJ
2WHW7FhWIJhZxixkbAapP43DDPjPKjdcqWBpHBxUV4iDaBezq6YJ2bihMXo5bQkk
F+ASMSxicaa5c+tjp5Tc2+Zp7QtsqPfl4L4CexgMVn0+PpB/U1QbhhU0icpLh3t8
vZBBxp3+w17k1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:31 2026 by rpki-client