Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: Z/UcLTEk4UY+9hJelBRQU6RX3d3bpEtUx8hXkBBHxPY=
Subject key identifier: FB:EF:24:32:4D:0D:56:8D:89:6B:AB:89:CA:BF:A2:2F:AA:70:85:B6
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 019D2816877AF7072A6ECE5BE885DB4379C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 0873
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: pOaV/+EThc3eJRsOOM/5HqPyV+Xe/GsNSjKVg2gXiZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:87:7a:f7:07:2a:6e:ce:5b:e8:85:db:43:79:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=fbef24324d0d568d896bab89cabfa22faa7085b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:fd:66:bd:2f:dc:7d:31:dd:35:03:65:a2:
c0:be:3a:d6:8c:9f:76:4b:3f:25:45:f4:31:72:6b:
c6:f7:e1:82:d6:09:1d:10:5b:ad:73:66:73:4e:f7:
94:30:2d:b1:65:5b:56:a7:ca:10:7f:dc:fd:f6:c0:
55:af:e8:46:ea:24:0c:f8:f9:ee:3a:3e:cf:97:ad:
89:43:9e:c3:00:b6:e9:a9:ce:55:98:a0:b1:36:d0:
c6:24:b5:00:8c:c6:b8:03:42:d4:8c:23:54:9c:b3:
57:10:80:45:56:43:d0:f5:01:bc:1b:29:61:94:22:
bd:3a:f6:11:c9:16:3e:2e:a5:7a:b6:7d:9e:3a:ce:
7c:5e:7c:d0:f5:4a:ca:22:1a:d3:62:16:38:a4:6e:
c9:46:b9:94:ec:4d:ba:e4:11:ab:43:55:38:db:c7:
b2:90:4b:fd:63:f9:93:78:b9:ee:71:b2:86:81:6e:
87:d2:72:37:08:3d:39:ca:c7:3b:ee:e2:2a:64:e8:
24:13:ef:f0:81:93:21:e7:ad:37:bd:a8:eb:8f:8b:
5b:17:f8:d5:03:ca:45:42:5e:64:27:73:0f:9d:96:
b9:21:52:d3:d0:9b:a2:60:f5:6c:c1:05:b7:c7:2d:
38:ba:4e:1c:2f:1c:6f:29:16:1d:b6:a3:8f:c3:7b:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:24:32:4D:0D:56:8D:89:6B:AB:89:CA:BF:A2:2F:AA:70:85:B6
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c5:87:52:7b:bc:91:0b:5b:32:17:90:2b:66:ed:bd:bc:57:
54:75:b8:d6:9e:05:27:c1:63:3e:66:b5:cb:42:0f:38:2c:f2:
7c:70:1c:79:46:d1:fc:34:2e:60:6a:24:65:06:7c:53:77:85:
53:04:b9:ae:45:4c:5f:78:60:43:23:89:04:1a:76:21:3c:e2:
2a:f3:73:36:50:b9:09:3d:59:e5:55:95:ac:2a:53:29:76:71:
96:ca:e7:ff:55:1b:71:5e:e3:3f:e3:ec:7f:96:0b:f9:56:d0:
25:63:58:85:92:42:25:d3:4e:38:46:b6:20:e6:f8:56:01:1d:
e4:4b:a2:a9:20:62:e7:2a:a3:b5:7a:4f:16:18:d5:20:c3:18:
77:23:56:92:12:fb:2c:55:3c:44:63:84:8c:f6:b9:e2:56:69:
9f:f7:c0:c8:1a:63:90:32:c6:bf:48:78:55:fb:9c:ed:f9:1d:
e5:79:a0:b1:d9:da:f6:48:e2:45:9c:8e:2e:17:74:59:4b:ce:
78:a2:f0:68:b3:a8:c2:46:55:80:92:91:91:bc:8a:9b:8f:d9:
03:80:61:53:1e:64:30:31:60:ba:2c:12:9c:ba:73:6d:74:21:
da:19:0c:6d:86:ab:44:ce:8c:09:cf:f4:47:a2:f4:9f:f3:95:
e8:2d:0e:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFod69wcqbs5b6IXbQ3nDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTdmYWM1MTBhM2UxZTg3MzllMzgxMmZjMGE1Y2FlMDI1
N2RmMjYwHhcNMjYwMzI2MDMwMDU4WhcNMjYwMzI3MDMwMDU4WjAzMTEwLwYDVQQD
EyhmYmVmMjQzMjRkMGQ1NjhkODk2YmFiODljYWJmYTIyZmFhNzA4NWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjL9Zr0v3H0x3TUDZaLAvjrWjJ92
Sz8lRfQxcmvG9+GC1gkdEFutc2ZzTveUMC2xZVtWp8oQf9z99sBVr+hG6iQM+Pnu
Oj7Pl62JQ57DALbpqc5VmKCxNtDGJLUAjMa4A0LUjCNUnLNXEIBFVkPQ9QG8Gylh
lCK9OvYRyRY+LqV6tn2eOs58XnzQ9UrKIhrTYhY4pG7JRrmU7E265BGrQ1U428ey
kEv9Y/mTeLnucbKGgW6H0nI3CD05ysc77uIqZOgkE+/wgZMh5603vajrj4tbF/jV
A8pFQl5kJ3MPnZa5IVLT0JuiYPVswQW3xy04uk4cLxxvKRYdtqOPw3slcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvvJDJNDVaNiWuricq/oi+qcIW2MB8GA1UdIwQY
MBaAFF+X+sUQo+Hoc544EvwKXK4CV98mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85Y2U1OTctYzdmNy00MjRhLTk3YjQt
NzFhNzg1MDU4NWU1LzEvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85Y2U1OTctYzdmNy00MjRhLTk3YjQtNzFhNzg1MDU4NWU1
LzEvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMWHUnu8
kQtbMheQK2btvbxXVHW41p4FJ8FjPma1y0IPOCzyfHAceUbR/DQuYGokZQZ8U3eF
UwS5rkVMX3hgQyOJBBp2ITziKvNzNlC5CT1Z5VWVrCpTKXZxlsrn/1UbcV7jP+Ps
f5YL+VbQJWNYhZJCJdNOOEa2IOb4VgEd5EuiqSBi5yqjtXpPFhjVIMMYdyNWkhL7
LFU8RGOEjPa54lZpn/fAyBpjkDLGv0h4Vfuc7fkd5Xmgsdna9kjiRZyOLhd0WUvO
eKLwaLOowkZVgJKRkbyKm4/ZA4BhUx5kMDFguiwSnLpzbXQh2hkMbYarRM6MCc/0
R6L0n/OV6C0OqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:26 2026 by rpki-client