Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: n4Fi+pcnrtcRP6ix8SnYSPPy1faiOTCFqY/dnxNuqmM=
Subject key identifier: 8E:59:C6:F1:E2:EE:2F:AD:16:49:41:7F:0D:76:BB:FB:13:AD:2C:BA
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 019CAB6B97731AA1CDBD6D5C4064301C5313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 131F
Signing time: Sun 01 Mar 2026 22:01:20 +0000
Manifest this update: Sun 01 Mar 2026 22:01:20 +0000
Manifest next update: Mon 02 Mar 2026 22:01:20 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: fwMjMpOhvbYooe66ETiMSXkvVq/2CZ28aOtCjcEYBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:97:73:1a:a1:cd:bd:6d:5c:40:64:30:1c:53:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Mar 1 22:01:20 2026 GMT
Not After : Mar 2 22:01:20 2026 GMT
Subject: CN=8e59c6f1e2ee2fad1649417f0d76bbfb13ad2cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:70:bb:b8:b8:86:dc:9b:bb:50:f1:a3:99:
7f:38:88:cd:a3:17:e8:ba:b4:cb:b4:41:de:dc:9b:
91:a5:23:6c:b5:2c:b9:79:37:66:93:05:40:65:5e:
81:53:26:7c:12:5e:01:34:2e:48:0c:31:78:93:ff:
aa:2e:f8:7e:58:9c:56:80:f3:dd:3d:f6:46:db:48:
d8:fd:a8:8e:1f:6c:0b:ac:1e:bd:3d:17:50:fb:7f:
73:3a:d5:ae:73:ca:19:14:51:69:43:97:6b:d1:97:
00:40:95:02:c8:d6:b4:fe:d8:3a:c0:7d:5c:03:00:
23:d6:59:5e:78:a5:66:5e:9e:8a:bc:b1:af:37:08:
5d:af:d8:ca:5f:06:a8:a6:97:b7:48:52:10:35:8f:
52:4c:13:f3:ab:f4:ed:41:10:a5:2d:33:9e:c8:c3:
6f:e5:90:e4:df:91:d2:a5:ee:d2:3d:26:b2:6a:c4:
f3:d4:b7:6b:8a:aa:91:eb:1f:b1:00:92:8c:a5:c0:
69:1b:b0:2a:d3:8d:ca:a8:5a:9d:97:21:5f:3f:8d:
40:86:8c:c1:77:ce:a1:8a:6f:a3:bb:b5:4a:77:c5:
43:bf:4f:40:68:27:3f:df:81:5a:e9:d3:8d:5b:06:
7c:62:d4:99:b8:1f:6c:f0:08:f7:14:63:2d:a4:45:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:C6:F1:E2:EE:2F:AD:16:49:41:7F:0D:76:BB:FB:13:AD:2C:BA
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d7:33:12:7c:79:f9:6c:7e:e5:4d:82:a5:51:e9:0c:05:1d:
54:b6:4d:13:d4:5f:af:8d:34:26:0e:be:5a:8d:7d:75:5b:0c:
e7:0f:6d:4e:4c:f1:28:eb:ae:40:ac:24:98:62:cb:fc:fc:df:
de:d0:e9:b3:6f:c4:dd:0a:3b:28:ce:9b:1a:31:a3:ee:20:91:
05:e6:ad:e2:4f:34:aa:7e:18:90:a3:f1:44:2b:6c:63:72:92:
54:7d:e8:ae:ba:dc:78:33:e5:f3:64:64:4a:09:f5:27:1a:11:
a8:f6:16:b8:28:93:e9:5e:43:06:85:09:4f:80:ef:b0:65:6c:
9b:11:a9:59:01:04:ce:fd:0f:b1:c3:47:e8:df:30:dc:39:24:
2e:4e:72:54:e5:3d:d5:db:9a:8f:41:a5:3a:fa:3f:1a:7b:22:
1a:de:29:0c:4e:2a:02:ae:bd:fc:52:1e:73:24:2d:47:70:ec:
43:2b:5b:06:38:a2:e1:5f:bd:33:f2:63:20:1f:7d:c5:b3:c8:
6a:18:2c:32:10:91:a2:be:68:8f:ac:a1:71:16:1c:b3:51:e6:
db:2e:49:c5:ed:03:36:c6:3b:d2:87:10:21:54:c2:46:e9:74:
45:c3:e2:b5:f4:9a:d3:df:d2:74:7b:da:0d:f2:78:ab:02:93:
4f:fa:f6:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra5dzGqHNvW1cQGQwHFMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTYyNWRjMzk4Y2I3MDBmNzJmYThlYTZmNDMxM2JmMzMz
NWE1M2IwHhcNMjYwMzAxMjIwMTIwWhcNMjYwMzAyMjIwMTIwWjAzMTEwLwYDVQQD
Eyg4ZTU5YzZmMWUyZWUyZmFkMTY0OTQxN2YwZDc2YmJmYjEzYWQyY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Nwu7i4htybu1Dxo5l/OIjNoxfo
urTLtEHe3JuRpSNstSy5eTdmkwVAZV6BUyZ8El4BNC5IDDF4k/+qLvh+WJxWgPPd
PfZG20jY/aiOH2wLrB69PRdQ+39zOtWuc8oZFFFpQ5dr0ZcAQJUCyNa0/tg6wH1c
AwAj1lleeKVmXp6KvLGvNwhdr9jKXwaoppe3SFIQNY9STBPzq/TtQRClLTOeyMNv
5ZDk35HSpe7SPSayasTz1LdriqqR6x+xAJKMpcBpG7Aq043KqFqdlyFfP41AhozB
d86him+ju7VKd8VDv09AaCc/34Fa6dONWwZ8YtSZuB9s8Aj3FGMtpEVi7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5ZxvHi7i+tFklBfw12u/sTrSy6MB8GA1UdIwQY
MBaAFF+mJdw5jLcA9y+o6m9DE78zNaU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAt
ZWFjMTA2MzAwYjBhLzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAtZWFjMTA2MzAwYjBh
LzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNczEnx5
+Wx+5U2CpVHpDAUdVLZNE9Rfr400Jg6+Wo19dVsM5w9tTkzxKOuuQKwkmGLL/Pzf
3tDps2/E3Qo7KM6bGjGj7iCRBeat4k80qn4YkKPxRCtsY3KSVH3orrrceDPl82Rk
Sgn1JxoRqPYWuCiT6V5DBoUJT4DvsGVsmxGpWQEEzv0PscNH6N8w3DkkLk5yVOU9
1duaj0GlOvo/GnsiGt4pDE4qAq69/FIecyQtR3DsQytbBjii4V+9M/JjIB99xbPI
ahgsMhCRor5oj6yhcRYcs1Hm2y5Jxe0DNsY70ocQIVTCRul0RcPitfSa09/SdHva
DfJ4qwKTT/r27g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:37 2026 by rpki-client