Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier: FqftHfhmZSPPK6NjzoUGap8TH8Y2BOCqpztXuCmjKTU=
Subject key identifier: D7:EB:36:84:73:D9:EB:E8:0B:52:94:E0:47:00:27:FE:EC:05:D4:31
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial: 019D25F0F74C2E0B4FA7631E943B00422BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number: 096A
Signing time: Wed 25 Mar 2026 17:00:42 +0000
Manifest this update: Wed 25 Mar 2026 17:00:42 +0000
Manifest next update: Thu 26 Mar 2026 17:00:42 +0000
Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: ssKbebJlEbz9D6f44QBlpJ+Rno2IcOdLMREqJ0iIzTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f7:4c:2e:0b:4f:a7:63:1e:94:3b:00:42:2b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
Validity
Not Before: Mar 25 17:00:42 2026 GMT
Not After : Mar 26 17:00:42 2026 GMT
Subject: CN=d7eb368473d9ebe80b5294e0470027feec05d431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:51:d7:b0:03:fa:c5:e3:12:bc:5f:2d:d5:
e9:0f:f8:71:57:ad:e0:6d:c4:67:9f:9e:73:71:b1:
72:63:27:a0:56:da:2d:b0:79:d1:05:7d:e8:a7:55:
4f:e3:24:b5:dd:8d:fc:dd:77:8e:8d:c3:f1:b0:8d:
8e:06:39:57:cc:66:11:95:ab:25:22:30:11:4f:5d:
a1:84:35:34:79:03:28:82:91:a9:0c:ef:27:9d:8c:
be:11:6e:0e:12:4a:fd:9a:4c:1a:03:f6:ef:7e:20:
ea:fe:50:60:6f:e5:95:3f:65:97:0f:91:c9:1a:f8:
25:68:52:58:76:30:38:11:d2:b6:eb:98:c7:c6:9f:
86:3d:d7:35:22:a1:93:f9:f5:c0:7a:eb:e2:a4:91:
21:32:1b:ed:a8:24:4f:1b:68:cc:ea:9e:bf:e4:7c:
a4:0d:6d:be:3d:82:67:7e:c0:08:e5:d5:86:21:53:
ee:8c:6e:c7:1d:b7:c8:21:b0:c2:5b:db:05:1a:8e:
67:61:3b:90:68:80:bd:b3:8e:16:4f:e1:e9:43:f0:
af:a1:0b:ed:9b:23:63:b1:8c:18:12:c6:1d:07:8c:
65:d2:07:aa:30:89:ca:ff:1c:30:4a:cb:28:58:a4:
58:71:41:ce:4b:6c:26:73:87:a6:90:1e:89:d0:f1:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:36:84:73:D9:EB:E8:0B:52:94:E0:47:00:27:FE:EC:05:D4:31
X509v3 Authority Key Identifier:
keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:74:cc:10:b7:0e:40:9a:cb:11:1f:34:9b:88:6b:f8:27:e0:
b2:04:db:5e:cf:23:ef:7f:ae:39:78:6e:19:34:8a:4e:01:a7:
17:78:31:19:62:41:81:ae:72:3c:8e:7b:8c:51:9b:12:ff:c9:
1b:26:10:a4:21:13:4e:ce:c3:6e:34:90:4d:04:27:ff:cd:20:
78:ba:93:f2:2d:5e:69:d5:22:9b:8f:cf:ec:af:b0:0f:3e:93:
56:1c:83:f1:a4:0d:d5:5e:67:86:99:04:c1:92:8e:0a:40:d4:
d9:8e:9b:0f:b2:a1:63:67:a2:7c:71:70:ba:5e:14:ae:cc:ae:
91:b9:fd:51:c6:58:bf:80:62:2c:14:a3:1d:df:05:d7:9a:1b:
16:5a:09:83:32:29:80:4f:32:ee:74:33:2a:25:71:fc:a8:40:
8d:60:69:d0:7f:c1:9c:75:32:30:75:90:dd:55:60:16:4e:8e:
9b:39:b8:44:58:dc:26:63:f9:c7:6a:08:50:12:f9:72:4e:1e:
a2:f6:76:3a:bb:6d:a9:d5:3e:2f:b4:1a:e6:90:b0:af:09:8d:
16:48:4a:7e:b1:6e:ed:3f:17:89:4b:24:15:76:c4:bf:ed:8c:
1f:47:13:ff:d0:cf:73:ff:10:9c:53:44:44:5e:d8:8c:2f:a0:
56:f6:61:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8PdMLgtPp2MelDsAQiv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MThmMDNmOTg3NDM3MDY1M2FhM2EwMjZmNjcwN2MyZTBl
NzQ3NjQwHhcNMjYwMzI1MTcwMDQyWhcNMjYwMzI2MTcwMDQyWjAzMTEwLwYDVQQD
EyhkN2ViMzY4NDczZDllYmU4MGI1Mjk0ZTA0NzAwMjdmZWVjMDVkNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn29R17AD+sXjErxfLdXpD/hxV63g
bcRnn55zcbFyYyegVtotsHnRBX3op1VP4yS13Y383XeOjcPxsI2OBjlXzGYRlasl
IjART12hhDU0eQMogpGpDO8nnYy+EW4OEkr9mkwaA/bvfiDq/lBgb+WVP2WXD5HJ
GvglaFJYdjA4EdK265jHxp+GPdc1IqGT+fXAeuvipJEhMhvtqCRPG2jM6p6/5Hyk
DW2+PYJnfsAI5dWGIVPujG7HHbfIIbDCW9sFGo5nYTuQaIC9s44WT+HpQ/CvoQvt
myNjsYwYEsYdB4xl0geqMInK/xwwSssoWKRYcUHOS2wmc4emkB6J0PEYpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfrNoRz2evoC1KU4EcAJ/7sBdQxMB8GA1UdIwQY
MBaAFMYY8D+YdDcGU6o6Am9nB8Lg50dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYt
NTFkZTQ5NjRhOTEzLzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYtNTFkZTQ5NjRhOTEz
LzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnTMELcO
QJrLER80m4hr+CfgsgTbXs8j73+uOXhuGTSKTgGnF3gxGWJBga5yPI57jFGbEv/J
GyYQpCETTs7DbjSQTQQn/80geLqT8i1eadUim4/P7K+wDz6TVhyD8aQN1V5nhpkE
wZKOCkDU2Y6bD7KhY2eifHFwul4Ursyukbn9UcZYv4BiLBSjHd8F15obFloJgzIp
gE8y7nQzKiVx/KhAjWBp0H/BnHUyMHWQ3VVgFk6Omzm4RFjcJmP5x2oIUBL5ck4e
ovZ2OrttqdU+L7Qa5pCwrwmNFkhKfrFu7T8XiUskFXbEv+2MH0cT/9DPc/8QnFNE
RF7YjC+gVvZhHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:42 2026 by rpki-client