Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: UV9Mv+amFQVdX8Va8RYSZv2wgdND5oQ4oywrX/gtJRQ=
Subject key identifier: 66:81:F0:EB:5E:DF:96:8F:80:C1:AD:73:82:3C:85:EE:09:99:83:44
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019D2A0475D805E209F56412F79E7F5A5A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0C70
Signing time: Thu 26 Mar 2026 12:00:28 +0000
Manifest this update: Thu 26 Mar 2026 12:00:28 +0000
Manifest next update: Fri 27 Mar 2026 12:00:28 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: Rh2xA/BCVroc1GcnKQ6k8HbKPgOpC8Z7w8+PlSnfWbY=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:75:d8:05:e2:09:f5:64:12:f7:9e:7f:5a:5a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Mar 26 12:00:28 2026 GMT
Not After : Mar 27 12:00:28 2026 GMT
Subject: CN=6681f0eb5edf968f80c1ad73823c85ee09998344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ed:8c:af:97:2a:72:dd:11:b2:ae:e9:68:fa:
1a:14:92:84:22:55:e2:98:1e:89:10:40:de:48:26:
f5:e6:ba:47:01:1b:87:d5:71:d8:ba:cd:93:e7:2a:
6f:25:db:84:0b:7c:21:d6:0e:a7:6a:63:d5:82:74:
ea:b2:8a:f6:8d:07:32:d0:88:c7:a2:4e:56:4b:f0:
11:8a:7d:5a:d0:30:f4:4a:20:b2:5f:30:74:56:54:
ec:ab:c0:5c:d5:6a:fd:3e:4d:75:a5:45:9a:bf:e1:
a3:95:fd:e0:81:f4:a6:c1:8d:68:73:b1:3d:8c:7b:
5d:81:ae:27:83:00:fc:ae:c4:f7:51:13:0f:51:9e:
4b:c8:58:f8:4f:2a:2e:16:aa:7c:94:dd:6b:45:0b:
43:ea:84:fd:16:b0:3a:21:7e:68:c5:34:0f:d3:06:
25:e2:08:26:e6:d3:47:5a:2a:08:df:d5:14:f9:eb:
f2:33:a6:fb:d6:e7:6d:ab:e1:3a:0c:f0:db:28:e3:
98:e2:e7:75:8b:0e:e9:93:8b:93:fa:3f:84:d3:99:
c4:63:16:1f:8f:e7:66:9e:40:70:7d:d8:2c:59:e0:
4f:78:42:4c:9e:75:1a:ff:99:58:d8:f0:4d:be:46:
46:6d:f0:ce:7c:c9:f9:37:7c:29:c8:7c:91:e6:75:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:F0:EB:5E:DF:96:8F:80:C1:AD:73:82:3C:85:EE:09:99:83:44
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4c:45:55:db:68:e0:aa:ce:7d:d2:61:a8:5d:a2:c7:bf:b3:
7f:62:3d:b2:15:86:21:b7:08:35:2a:ef:34:02:6a:63:b3:3c:
d6:40:e4:69:81:a1:fe:16:95:8b:d0:ce:55:c4:4a:c5:09:80:
ec:e2:0e:76:c5:1d:74:e2:52:a6:cb:3d:f0:58:72:e8:a5:ac:
f8:a4:a5:19:ec:13:f2:db:8c:36:6e:f7:87:9d:e4:6c:89:4d:
71:fa:b6:4e:03:6e:5d:f1:c3:06:39:a1:2f:a9:40:75:8c:b9:
20:1f:89:95:c0:99:9b:c9:7e:bc:8b:d0:02:a6:04:e9:0b:e9:
e4:40:47:a8:23:3f:5b:2f:a1:07:85:43:e9:33:f5:bc:dc:86:
af:00:1a:46:26:90:c5:46:14:51:38:68:7e:b1:1d:5a:3a:2d:
90:23:bd:2c:52:3d:14:35:34:6b:ed:63:f4:76:e6:15:13:f9:
2e:7e:f7:b0:4f:ab:05:43:fd:c5:c0:af:39:99:a8:01:42:71:
8f:e7:ca:f0:04:9a:d5:dd:54:c7:c7:f5:a9:50:40:f2:1f:08:
1b:12:b7:2f:3d:8d:9f:bb:d2:00:23:b0:f1:eb:bb:4d:d8:d6:
1d:3b:0a:4d:8f:cd:f3:84:01:e2:33:db:44:a6:cf:d0:ce:98:
ab:98:47:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBHXYBeIJ9WQS955/WlopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2MxM2Y1ZmYxNjlhZmVkODI1Yjc1ZDhmYzA3N2FmY2E1
MGQ2YTEwHhcNMjYwMzI2MTIwMDI4WhcNMjYwMzI3MTIwMDI4WjAzMTEwLwYDVQQD
Eyg2NjgxZjBlYjVlZGY5NjhmODBjMWFkNzM4MjNjODVlZTA5OTk4MzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+2Mr5cqct0Rsq7paPoaFJKEIlXi
mB6JEEDeSCb15rpHARuH1XHYus2T5ypvJduEC3wh1g6namPVgnTqsor2jQcy0IjH
ok5WS/ARin1a0DD0SiCyXzB0VlTsq8Bc1Wr9Pk11pUWav+Gjlf3ggfSmwY1oc7E9
jHtdga4ngwD8rsT3URMPUZ5LyFj4TyouFqp8lN1rRQtD6oT9FrA6IX5oxTQP0wYl
4ggm5tNHWioI39UU+evyM6b71udtq+E6DPDbKOOY4ud1iw7pk4uT+j+E05nEYxYf
j+dmnkBwfdgsWeBPeEJMnnUa/5lY2PBNvkZGbfDOfMn5N3wpyHyR5nXW5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaB8Ote35aPgMGtc4I8he4JmYNEMB8GA1UdIwQY
MBaAFF58E/X/Fpr+2CW3XY/Ad6/KUNahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQt
OWU1OWMxMTFhYTM4LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQtOWU1OWMxMTFhYTM4
LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikxFVdto
4KrOfdJhqF2ix7+zf2I9shWGIbcINSrvNAJqY7M81kDkaYGh/haVi9DOVcRKxQmA
7OIOdsUddOJSpss98Fhy6KWs+KSlGewT8tuMNm73h53kbIlNcfq2TgNuXfHDBjmh
L6lAdYy5IB+JlcCZm8l+vIvQAqYE6Qvp5EBHqCM/Wy+hB4VD6TP1vNyGrwAaRiaQ
xUYUUThofrEdWjotkCO9LFI9FDU0a+1j9HbmFRP5Ln73sE+rBUP9xcCvOZmoAUJx
j+fK8ASa1d1Ux8f1qVBA8h8IGxK3Lz2Nn7vSACOw8eu7TdjWHTsKTY/N84QB4jPb
RKbP0M6Yq5hHig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:14 2026 by rpki-client