Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: Cn+VcyvEDm+TUizfePGuuOTRUe1YJb6lyujQXqs6aGs=
Subject key identifier: E0:6A:07:9D:97:58:64:81:1D:D1:5A:C1:77:64:CA:68:61:38:9E:DC
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 019D329A9E4C6B1FD903F3D4F2A02CC76EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0C48
Signing time: Sat 28 Mar 2026 04:01:26 +0000
Manifest this update: Sat 28 Mar 2026 04:01:26 +0000
Manifest next update: Sun 29 Mar 2026 04:01:26 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: NGmL8mR/+zTG3yimiPE1jfUwUphCzHOx1/6Y0v8aOSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:9e:4c:6b:1f:d9:03:f3:d4:f2:a0:2c:c7:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Mar 28 04:01:26 2026 GMT
Not After : Mar 29 04:01:26 2026 GMT
Subject: CN=e06a079d975864811dd15ac17764ca6861389edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:f3:f3:8c:8b:d9:09:7b:a8:4c:41:46:4f:
0b:f4:67:63:f9:1b:64:34:34:70:82:01:af:d7:ed:
90:fa:16:bf:f6:88:28:07:d4:f5:cd:19:96:aa:08:
83:9f:70:38:86:c8:34:98:96:8d:a6:05:de:40:5c:
17:85:3f:7f:7d:3d:12:4f:f4:1a:1c:37:c8:c5:6f:
26:e1:c1:d3:76:14:6a:7e:be:59:41:7a:01:8c:a2:
20:a7:a5:d0:20:9a:9c:24:4b:eb:b6:e7:35:09:e7:
b8:02:f7:0b:d1:fa:8a:ab:cb:44:b0:ab:02:46:5d:
1e:57:e4:80:25:34:14:41:5b:36:72:b1:74:f1:34:
bc:71:11:bd:68:96:42:fe:11:dc:70:af:44:95:a0:
4d:ec:aa:82:c4:59:61:73:a7:32:88:e1:36:c2:bb:
c2:eb:d9:f0:56:4f:61:91:24:e6:dd:74:01:a0:98:
98:1a:e1:65:d1:82:68:e4:52:67:e1:04:67:c2:c6:
5e:df:ad:1f:3f:54:29:ce:16:fc:19:21:a5:e8:d1:
4a:2e:95:6e:4e:df:4d:20:d9:5f:7e:d2:21:89:f7:
c1:ff:4a:52:3f:a5:81:16:ed:9e:58:bd:00:e5:9b:
5a:ab:14:4f:6b:e4:47:82:ef:06:db:21:57:d2:70:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:07:9D:97:58:64:81:1D:D1:5A:C1:77:64:CA:68:61:38:9E:DC
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:93:5c:98:f4:31:26:6a:0d:45:23:99:82:13:3c:45:b2:c5:
b6:7b:f9:c6:d4:a7:41:d7:2a:04:82:5b:26:db:43:16:6f:4a:
0f:61:ea:54:e7:5b:15:9b:24:0c:34:ab:04:6a:c4:8b:b1:24:
58:c4:eb:a9:5e:0e:6e:ea:0e:ec:6d:86:bc:72:20:e3:d0:b5:
33:3e:08:7a:8b:65:fa:59:8e:6f:65:1a:ca:4c:4d:6c:9f:55:
32:e2:17:48:6a:fc:70:a1:c0:cb:ef:e0:89:91:ff:a2:43:3e:
6f:cb:8d:48:1a:92:02:d0:cb:78:f3:9a:bd:01:6a:99:6e:ba:
36:fc:6f:dc:8a:03:da:d7:91:a1:48:c0:c0:42:f1:1c:e6:f1:
f0:fa:07:db:e7:1a:6f:99:58:64:40:35:03:fa:88:70:43:b5:
56:61:7e:c5:10:8a:6f:2b:8d:8b:85:7a:c5:a5:0f:02:a3:1c:
c8:5d:57:f8:74:20:be:55:0f:34:e9:3b:10:9d:a0:52:84:3d:
e3:43:16:4d:7f:95:90:46:e0:20:2e:25:72:ad:f5:cb:8a:37:
c2:60:0f:40:1c:67:9f:78:b0:1b:23:c7:cc:41:bc:9c:df:68:
e7:47:f5:bb:01:fa:66:17:4f:5a:17:e4:f9:23:23:af:bd:ef:
a6:05:d7:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymp5Max/ZA/PU8qAsx27sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzQyM2I2MDNhNjIwM2NiOTI4YzhkZWYzZTU4Y2Q4ZGFh
ZmQ2ODgwHhcNMjYwMzI4MDQwMTI2WhcNMjYwMzI5MDQwMTI2WjAzMTEwLwYDVQQD
EyhlMDZhMDc5ZDk3NTg2NDgxMWRkMTVhYzE3NzY0Y2E2ODYxMzg5ZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK3z84yL2Ql7qExBRk8L9Gdj+Rtk
NDRwggGv1+2Q+ha/9ogoB9T1zRmWqgiDn3A4hsg0mJaNpgXeQFwXhT9/fT0ST/Qa
HDfIxW8m4cHTdhRqfr5ZQXoBjKIgp6XQIJqcJEvrtuc1Cee4AvcL0fqKq8tEsKsC
Rl0eV+SAJTQUQVs2crF08TS8cRG9aJZC/hHccK9ElaBN7KqCxFlhc6cyiOE2wrvC
69nwVk9hkSTm3XQBoJiYGuFl0YJo5FJn4QRnwsZe360fP1Qpzhb8GSGl6NFKLpVu
Tt9NINlfftIhiffB/0pSP6WBFu2eWL0A5ZtaqxRPa+RHgu8G2yFX0nAMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBqB52XWGSBHdFawXdkymhhOJ7cMB8GA1UdIwQY
MBaAFF40I7YDpiA8uSjI3vPljNjar9aIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMt
Y2RjZTY2N2QzY2E3LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMtY2RjZTY2N2QzY2E3
LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJNcmPQx
JmoNRSOZghM8RbLFtnv5xtSnQdcqBIJbJttDFm9KD2HqVOdbFZskDDSrBGrEi7Ek
WMTrqV4ObuoO7G2GvHIg49C1Mz4Ieotl+lmOb2UaykxNbJ9VMuIXSGr8cKHAy+/g
iZH/okM+b8uNSBqSAtDLePOavQFqmW66Nvxv3IoD2teRoUjAwELxHObx8PoH2+ca
b5lYZEA1A/qIcEO1VmF+xRCKbyuNi4V6xaUPAqMcyF1X+HQgvlUPNOk7EJ2gUoQ9
40MWTX+VkEbgIC4lcq31y4o3wmAPQBxnn3iwGyPHzEG8nN9o50f1uwH6ZhdPWhfk
+SMjr73vpgXXug==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:56 2026 by rpki-client