Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: EpLOmAJWWWe0h55HO2EXGbnJa3EN5tcxyrQBI+BLqow=
Subject key identifier: FE:2D:F9:CE:DC:26:3E:11:D4:88:F8:EB:93:9F:D1:DA:79:19:E3:00
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 019D333EE37191E62CEB714B654FDD79BE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 0A62
Signing time: Sat 28 Mar 2026 07:00:52 +0000
Manifest this update: Sat 28 Mar 2026 07:00:52 +0000
Manifest next update: Sun 29 Mar 2026 07:00:52 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: T6i7FbaLaF7mgbMcS9M579andPGKnVwI7iLd6E5nWM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:e3:71:91:e6:2c:eb:71:4b:65:4f:dd:79:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: Mar 28 07:00:52 2026 GMT
Not After : Mar 29 07:00:52 2026 GMT
Subject: CN=fe2df9cedc263e11d488f8eb939fd1da7919e300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:12:3d:50:dc:16:01:94:5f:20:56:59:09:
ed:d2:2b:ca:fa:59:20:0d:72:d6:cc:1d:26:e5:31:
3c:11:a4:3c:99:76:38:32:54:39:26:06:08:eb:7a:
6f:68:1a:eb:a9:38:f9:0b:f5:00:6d:4f:87:03:5e:
53:2c:61:a7:a7:7b:b7:9a:55:5e:6b:9f:0f:c0:64:
00:09:f5:21:04:9b:6f:e1:a0:b7:90:04:55:d8:cc:
fa:b6:c3:5b:11:11:9a:97:a7:67:50:a1:ef:be:d3:
41:71:97:9e:22:48:8c:8e:99:c3:dd:7a:00:eb:fb:
b0:f9:08:07:75:08:0d:9d:fc:d0:e6:fa:7c:42:3f:
7b:5e:59:27:ce:67:9b:ee:8b:89:05:20:db:a8:31:
fa:36:1c:55:f6:6f:bf:72:c2:58:ba:d9:4a:0f:20:
b3:18:20:05:bc:d8:fc:e4:46:32:ae:95:44:0b:d6:
9a:51:87:b5:33:75:c7:6b:fd:08:c4:e3:ca:d7:1a:
2f:c0:95:69:ba:aa:ef:16:5c:f0:98:4f:13:b8:0c:
7d:b4:5e:41:db:77:a8:f6:08:06:6a:f8:3b:36:58:
26:68:4d:21:b2:43:08:d2:36:ac:48:0f:fa:32:94:
eb:4d:87:2b:2b:5b:36:10:f7:15:b8:b3:ee:1f:9b:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:F9:CE:DC:26:3E:11:D4:88:F8:EB:93:9F:D1:DA:79:19:E3:00
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d3:f4:0c:2a:c7:fb:c3:78:38:9d:5d:72:d7:f4:ec:10:c5:
48:3c:77:71:cd:d5:6e:f5:9e:85:b5:40:c0:00:1f:25:24:4b:
b5:46:f8:ef:ce:00:e3:71:16:70:1f:3e:99:c8:a1:8b:f1:20:
68:4c:c8:dd:76:e6:91:4f:ea:c7:09:f1:b5:ab:c8:e5:0e:bf:
8b:50:ff:01:22:d3:1a:ed:46:10:6b:b0:0a:35:6e:f3:3e:94:
3e:12:b4:90:d3:78:4d:34:9e:d5:b2:71:0a:92:9d:5f:00:c3:
cc:a9:78:25:40:df:b4:0e:ce:e6:97:24:c3:82:a5:27:d5:42:
e9:95:0c:f4:18:49:01:ec:90:d4:04:65:4b:c3:8b:ca:7c:81:
16:ce:f2:82:5e:d2:95:79:18:07:ef:f2:fa:ca:42:75:47:a4:
77:67:f8:fe:ec:ca:f5:27:87:02:9c:8f:a5:72:b3:db:75:60:
07:7c:af:72:53:27:82:e2:b5:3e:4a:c4:70:ff:99:f1:70:d2:
bd:16:2c:bb:9b:c1:ce:f7:9d:7c:a7:0a:f5:ee:5f:d8:8a:5d:
0b:eb:54:67:22:d6:a9:ef:3e:92:4f:3b:1f:20:9c:e3:85:1b:
a4:20:0d:98:f6:ff:c4:89:74:bb:b5:46:0c:84:95:97:63:fd:
3c:23:47:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPuNxkeYs63FLZU/deb5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YjhkZTU1Mjg1MGFjZTg1ZmM4YzBlMTY4NTJjYzczZGYx
MDE2OWQwHhcNMjYwMzI4MDcwMDUyWhcNMjYwMzI5MDcwMDUyWjAzMTEwLwYDVQQD
EyhmZTJkZjljZWRjMjYzZTExZDQ4OGY4ZWI5MzlmZDFkYTc5MTllMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59wSPVDcFgGUXyBWWQnt0ivK+lkg
DXLWzB0m5TE8EaQ8mXY4MlQ5JgYI63pvaBrrqTj5C/UAbU+HA15TLGGnp3u3mlVe
a58PwGQACfUhBJtv4aC3kARV2Mz6tsNbERGal6dnUKHvvtNBcZeeIkiMjpnD3XoA
6/uw+QgHdQgNnfzQ5vp8Qj97Xlknzmeb7ouJBSDbqDH6NhxV9m+/csJYutlKDyCz
GCAFvNj85EYyrpVEC9aaUYe1M3XHa/0IxOPK1xovwJVpuqrvFlzwmE8TuAx9tF5B
23eo9ggGavg7NlgmaE0hskMI0jasSA/6MpTrTYcrK1s2EPcVuLPuH5vtRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4t+c7cJj4R1Ij465Of0dp5GeMAMB8GA1UdIwQY
MBaAFMa43lUoUKzoX8jA4WhSzHPfEBadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjVkOTEtOTJiYS00MDJlLWJlMWMt
ZDI0MGQzNjExMDU4LzEveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZjVkOTEtOTJiYS00MDJlLWJlMWMtZDI0MGQzNjExMDU4
LzEveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidP0DCrH
+8N4OJ1dctf07BDFSDx3cc3VbvWehbVAwAAfJSRLtUb4784A43EWcB8+mcihi/Eg
aEzI3XbmkU/qxwnxtavI5Q6/i1D/ASLTGu1GEGuwCjVu8z6UPhK0kNN4TTSe1bJx
CpKdXwDDzKl4JUDftA7O5pckw4KlJ9VC6ZUM9BhJAeyQ1ARlS8OLynyBFs7ygl7S
lXkYB+/y+spCdUekd2f4/uzK9SeHApyPpXKz23VgB3yvclMnguK1PkrEcP+Z8XDS
vRYsu5vBzvedfKcK9e5f2IpdC+tUZyLWqe8+kk87HyCc44UbpCANmPb/xIl0u7VG
DISVl2P9PCNHFA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:07 2026 by rpki-client