Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: eFuvAE1/Di8vVlY63/MvLKB3K4fqxFtJrcrT3a5EN2M=
Subject key identifier: 21:8E:42:78:E3:87:F0:D4:F4:F9:D5:39:B7:A8:3A:7F:34:22:F6:F9
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 019D2704109F241584E87C79DBE495E20AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0F66
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: nxC8uRK0QR2EtxGNYeXCSki89qn3kszYpoxRlzEs25o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:10:9f:24:15:84:e8:7c:79:db:e4:95:e2:0a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=218e4278e387f0d4f4f9d539b7a83a7f3422f6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:ef:8c:b2:a5:58:e1:62:e4:0e:50:29:94:
4f:9e:5d:6b:3e:da:85:8a:ac:6b:aa:5d:51:fa:14:
10:ac:50:79:f6:fb:da:ab:62:65:49:11:64:60:5d:
a5:7f:c5:27:12:ba:14:c4:40:f7:a9:65:22:07:e7:
96:cb:42:ba:05:da:2d:7c:7d:da:1a:62:1a:71:62:
61:5c:08:05:2d:5f:42:03:06:01:52:18:21:16:41:
5f:18:38:bf:b1:cd:9d:a3:da:69:46:96:d1:4b:da:
62:81:33:46:0b:61:c4:37:64:4a:ff:c8:aa:7f:bb:
95:1e:eb:0e:21:95:1d:f9:a3:dd:cb:d7:0e:e4:4d:
b8:e7:47:c5:fe:35:2a:0b:76:19:f4:ae:f5:9b:64:
61:46:fb:2b:5f:e1:33:89:95:16:8d:13:5c:f9:c5:
91:45:5c:3b:97:14:48:60:f7:dc:6c:e0:72:a1:bc:
ca:c7:dc:c2:3e:81:02:0d:21:05:89:f1:1c:61:c9:
9e:b4:1a:04:92:ab:1e:b0:3d:fb:72:83:95:f3:71:
dd:3c:36:2a:23:22:24:36:01:f5:52:08:c6:d8:a8:
d1:41:07:fb:77:c6:e0:b9:86:f8:35:2e:d9:45:8f:
41:79:9e:1e:04:02:62:94:d1:9b:2c:55:d5:bb:c9:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:42:78:E3:87:F0:D4:F4:F9:D5:39:B7:A8:3A:7F:34:22:F6:F9
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f6:6c:3f:42:55:36:6c:b0:dc:3d:ec:80:b8:28:7f:5f:58:
18:c8:62:d2:dd:ba:0c:be:a0:47:8c:a3:28:ce:e4:67:0b:64:
a0:49:29:f9:2d:32:85:40:04:35:46:61:bb:b4:d4:18:eb:e6:
89:49:cd:ea:31:cd:e1:d4:86:fe:cc:56:6b:e6:e3:ca:36:8e:
06:0c:51:c7:ad:21:08:f2:4a:45:66:70:b9:34:10:1e:f3:ee:
0f:2d:fd:8a:02:74:02:f5:ae:7a:c5:12:a8:7c:d2:92:c2:d0:
16:6e:dd:5f:49:9d:2a:b0:e1:c7:00:58:95:ca:e8:63:8c:19:
a7:9d:d1:96:86:04:68:e5:12:e5:e1:91:23:f0:1a:56:5d:29:
41:32:4e:54:4c:9a:45:6e:c5:6d:13:31:df:75:82:1b:19:cd:
1f:66:1f:78:94:6e:4d:ac:0a:1f:94:b9:41:7c:ca:d2:63:f5:
23:ea:36:64:2b:b1:38:5f:77:89:1a:89:67:d5:11:39:fc:27:
5d:f1:88:8b:be:04:06:39:9e:6b:77:bc:b5:ca:ff:92:25:4c:
51:b1:02:62:70:3d:09:1f:25:de:1e:09:d5:32:3d:3e:4e:a7:
bc:35:8d:0a:8b:87:02:eb:bb:af:dc:52:77:c1:c5:29:f0:f1:
99:10:01:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBBCfJBWE6Hx52+SV4gquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTU3MGNlM2Q4MmUyOTU1NjhiNzQxN2Q1NTZhYTNiMDYx
Mjk2MTAwHhcNMjYwMzI1MjIwMTEwWhcNMjYwMzI2MjIwMTEwWjAzMTEwLwYDVQQD
EygyMThlNDI3OGUzODdmMGQ0ZjRmOWQ1MzliN2E4M2E3ZjM0MjJmNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA/vjLKlWOFi5A5QKZRPnl1rPtqF
iqxrql1R+hQQrFB59vvaq2JlSRFkYF2lf8UnEroUxED3qWUiB+eWy0K6BdotfH3a
GmIacWJhXAgFLV9CAwYBUhghFkFfGDi/sc2do9ppRpbRS9pigTNGC2HEN2RK/8iq
f7uVHusOIZUd+aPdy9cO5E2450fF/jUqC3YZ9K71m2RhRvsrX+EziZUWjRNc+cWR
RVw7lxRIYPfcbOByobzKx9zCPoECDSEFifEcYcmetBoEkqsesD37coOV83HdPDYq
IyIkNgH1UgjG2KjRQQf7d8bguYb4NS7ZRY9BeZ4eBAJilNGbLFXVu8kdyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGOQnjjh/DU9PnVObeoOn80Ivb5MB8GA1UdIwQY
MBaAFF9VcM49guKVVot0F9VWqjsGEpYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYt
MjMyZWI0NTFkMjc3LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYtMjMyZWI0NTFkMjc3
LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPZsP0JV
Nmyw3D3sgLgof19YGMhi0t26DL6gR4yjKM7kZwtkoEkp+S0yhUAENUZhu7TUGOvm
iUnN6jHN4dSG/sxWa+bjyjaOBgxRx60hCPJKRWZwuTQQHvPuDy39igJ0AvWuesUS
qHzSksLQFm7dX0mdKrDhxwBYlcroY4wZp53RloYEaOUS5eGRI/AaVl0pQTJOVEya
RW7FbRMx33WCGxnNH2YfeJRuTawKH5S5QXzK0mP1I+o2ZCuxOF93iRqJZ9UROfwn
XfGIi74EBjmea3e8tcr/kiVMUbECYnA9CR8l3h4J1TI9Pk6nvDWNCouHAuu7r9xS
d8HFKfDxmRABqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:54 2026 by rpki-client