Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
File: XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft (raw, json)
Hash identifier: qVT8aXtd40iqq6UZ+QPZVrvVtEzHOvL8BGcwnFg3A8w=
Subject key identifier: E3:A9:AF:BC:38:66:8D:59:21:46:65:68:B5:D2:A6:C1:CA:CE:CF:5C
Authority key identifier: 5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
Certificate issuer: /CN=5e55afde34211bcee6a7fd992488a24927b46947
Certificate serial: 019CAC7E552EA61FACB63D844E4B1606974E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
Manifest number: 0490
Signing time: Mon 02 Mar 2026 03:01:26 +0000
Manifest this update: Mon 02 Mar 2026 03:01:26 +0000
Manifest next update: Tue 03 Mar 2026 03:01:26 +0000
Files and hashes: 1: XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl (hash: ysHxUJT0jMpOLLs+y+DkGf2OeGd1zFPM3ufCayfViRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:55:2e:a6:1f:ac:b6:3d:84:4e:4b:16:06:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e55afde34211bcee6a7fd992488a24927b46947
Validity
Not Before: Mar 2 03:01:26 2026 GMT
Not After : Mar 3 03:01:26 2026 GMT
Subject: CN=e3a9afbc38668d5921466568b5d2a6c1cacecf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:aa:29:53:87:dd:be:7f:4e:fc:e9:fa:30:
85:fc:da:0f:14:a3:91:e2:1e:ee:cc:9b:1d:82:93:
e3:bd:dd:65:42:4e:0a:ec:f4:53:63:51:cb:8e:a2:
1a:b9:3d:3f:5f:ae:1d:6d:e4:cc:76:75:15:a4:fd:
37:96:2a:e2:c7:20:3d:bd:fa:be:06:80:11:db:3c:
da:f6:bf:d3:fc:01:de:ea:dc:ec:0e:7e:d2:05:8f:
c5:f1:4f:14:74:14:93:3f:02:e5:6e:51:c2:5b:5f:
fc:63:00:62:ac:b6:3e:cd:da:ee:11:ad:3d:f0:5d:
a5:5d:0b:11:d7:1b:f9:f7:e3:6d:96:82:25:ee:92:
35:55:58:34:84:ca:01:f3:ee:39:e8:50:84:52:67:
ee:be:73:f7:99:96:be:5e:d1:b5:52:8d:e0:96:1e:
84:6a:41:2d:28:61:3a:a4:ef:e5:8f:4f:71:5d:97:
b4:aa:d0:d8:0c:76:55:0f:3f:58:b7:61:b4:ad:37:
04:e7:8d:5c:b0:aa:78:0e:f2:50:1d:ff:ae:f6:91:
4a:7e:36:8c:f3:dc:58:a8:80:61:6d:0b:a1:28:b2:
85:47:2d:d9:0b:c4:16:ac:74:2e:53:4c:f3:e2:00:
07:1a:39:a5:2f:89:f8:f6:8f:f0:c1:75:b7:90:39:
cd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:AF:BC:38:66:8D:59:21:46:65:68:B5:D2:A6:C1:CA:CE:CF:5C
X509v3 Authority Key Identifier:
keyid:5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e4:b8:b2:74:75:f6:66:12:9d:b1:05:a9:90:51:3e:fc:1f:
85:7d:7f:85:53:e3:09:59:c1:f8:9f:7f:8b:b1:ba:4d:72:9f:
61:54:0d:3d:58:dc:c3:f7:51:17:af:b5:25:96:8c:e2:3b:38:
94:fb:f2:13:86:bb:5b:32:97:bc:33:b7:5a:04:5c:06:3c:21:
13:79:5d:de:60:e1:81:c2:29:12:6b:15:ed:02:92:f1:d6:f7:
33:4d:5a:c0:eb:f6:e6:7d:32:50:71:cf:c3:c3:22:ba:a2:53:
05:4a:2a:59:e3:1e:4a:77:78:bf:80:63:74:12:2a:b0:8b:b9:
b4:dc:3b:dd:48:cc:e0:08:be:d8:68:67:e6:81:78:21:00:d6:
83:69:45:a4:44:d6:e1:15:a5:b8:2a:04:d6:29:1f:47:87:34:
31:e6:19:8d:35:4f:cf:fb:7c:ad:4b:c7:01:30:26:a0:df:f3:
45:87:09:e7:37:f3:8a:c9:5a:86:79:64:a1:0e:11:5a:81:4d:
1a:0b:d1:9a:3d:9b:94:c8:c4:a4:36:06:21:1c:39:33:25:de:
65:78:63:c0:33:7e:5b:8a:a5:86:6f:09:44:40:fa:3d:2a:8a:
e9:fb:5c:af:ca:19:04:bb:c7:02:bc:df:6b:5e:90:33:42:67:
49:8e:a8:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysflUuph+stj2ETksWBpdOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTVhZmRlMzQyMTFiY2VlNmE3ZmQ5OTI0ODhhMjQ5Mjdi
NDY5NDcwHhcNMjYwMzAyMDMwMTI2WhcNMjYwMzAzMDMwMTI2WjAzMTEwLwYDVQQD
EyhlM2E5YWZiYzM4NjY4ZDU5MjE0NjY1NjhiNWQyYTZjMWNhY2VjZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsyqKVOH3b5/Tvzp+jCF/NoPFKOR
4h7uzJsdgpPjvd1lQk4K7PRTY1HLjqIauT0/X64dbeTMdnUVpP03lirixyA9vfq+
BoAR2zza9r/T/AHe6tzsDn7SBY/F8U8UdBSTPwLlblHCW1/8YwBirLY+zdruEa09
8F2lXQsR1xv59+NtloIl7pI1VVg0hMoB8+456FCEUmfuvnP3mZa+XtG1Uo3glh6E
akEtKGE6pO/lj09xXZe0qtDYDHZVDz9Yt2G0rTcE541csKp4DvJQHf+u9pFKfjaM
89xYqIBhbQuhKLKFRy3ZC8QWrHQuU0zz4gAHGjmlL4n49o/wwXW3kDnNdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOpr7w4Zo1ZIUZlaLXSpsHKzs9cMB8GA1UdIwQY
MBaAFF5Vr940IRvO5qf9mSSIokkntGlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxXdjNqUWhHODdtcF8yWkpJaWlTU2UwYVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kMjhhYzgtZjZiOC00YjQ3LWJhOTMt
ZGU3YjQxNjc4YjZmLzEvWGxXdjNqUWhHODdtcF8yWkpJaWlTU2UwYVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kMjhhYzgtZjZiOC00YjQ3LWJhOTMtZGU3YjQxNjc4YjZm
LzEvWGxXdjNqUWhHODdtcF8yWkpJaWlTU2UwYVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeS4snR1
9mYSnbEFqZBRPvwfhX1/hVPjCVnB+J9/i7G6TXKfYVQNPVjcw/dRF6+1JZaM4js4
lPvyE4a7WzKXvDO3WgRcBjwhE3ld3mDhgcIpEmsV7QKS8db3M01awOv25n0yUHHP
w8MiuqJTBUoqWeMeSnd4v4BjdBIqsIu5tNw73UjM4Ai+2Ghn5oF4IQDWg2lFpETW
4RWluCoE1ikfR4c0MeYZjTVPz/t8rUvHATAmoN/zRYcJ5zfzislahnlkoQ4RWoFN
GgvRmj2blMjEpDYGIRw5MyXeZXhjwDN+W4qlhm8JRED6PSqK6ftcr8oZBLvHArzf
a16QM0JnSY6ooA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:55 2026 by rpki-client