Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File: X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier: nEJPgWhzGof4VKptds582PfI3NoG2CTuaYbJ4OXhOdE=
Subject key identifier: 8C:02:5F:C4:38:44:F1:DA:CC:66:F0:B2:71:90:68:12:F6:3B:D4:2B
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 019CA9B3F40EED6261A7501DDB4D512F24B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number: 16FE
Signing time: Sun 01 Mar 2026 14:01:08 +0000
Manifest this update: Sun 01 Mar 2026 14:01:08 +0000
Manifest next update: Mon 02 Mar 2026 14:01:08 +0000
Files and hashes: 1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: tA//BlRfGoD/FB7cQDnx5laIwuZDJGGXwv6PPB76fSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:f4:0e:ed:62:61:a7:50:1d:db:4d:51:2f:24:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Mar 1 14:01:08 2026 GMT
Not After : Mar 2 14:01:08 2026 GMT
Subject: CN=8c025fc43844f1dacc66f0b271906812f63bd42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:91:eb:08:17:d6:d2:fa:b5:01:a0:3a:e2:
dd:c4:5c:88:7d:47:80:d6:05:1c:e9:a6:8b:84:98:
56:35:10:04:d5:7b:f3:91:2e:8c:c7:0c:26:cb:7e:
9a:9a:7a:e3:25:db:ba:4e:26:23:fa:c8:bb:09:8c:
27:cc:d3:91:b3:02:40:d5:cb:fd:8d:49:b7:9b:f6:
98:27:7b:c5:7f:64:9e:16:48:37:30:6e:23:23:43:
87:82:02:d1:fa:98:ab:04:3d:34:95:90:32:19:62:
25:b7:24:b4:f6:3a:55:11:ba:82:81:bb:9a:e7:07:
17:ff:b1:bf:74:25:3b:3d:f2:76:42:14:de:8c:4a:
86:e8:13:2c:55:39:40:b6:98:d4:b4:be:20:f3:3d:
f7:21:a4:44:d9:59:75:ff:bd:10:3e:6b:06:51:cc:
3b:33:e8:28:64:71:0a:2e:42:b8:9a:1f:53:c8:1b:
3e:3a:1c:21:a2:3a:12:4c:44:ac:44:0e:67:00:8c:
0c:c9:ea:85:2a:a1:f6:d5:dd:b2:f1:e7:c9:d9:3f:
b9:66:2c:52:70:e4:90:f4:0d:6d:08:92:53:f7:40:
38:b7:51:ce:9b:99:4b:a6:20:d8:48:88:81:62:dd:
27:f9:25:62:d6:40:55:0b:63:32:fc:da:09:2d:13:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:02:5F:C4:38:44:F1:DA:CC:66:F0:B2:71:90:68:12:F6:3B:D4:2B
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6c:f2:25:fd:62:0c:55:63:39:2f:68:07:34:82:90:59:b7:
f2:32:97:ed:63:a3:3a:38:00:9d:0c:1a:7a:06:8e:30:66:c6:
fd:a9:a0:fc:ce:a0:51:01:39:20:ff:bc:f6:7e:03:93:15:9a:
1b:87:81:64:ff:8c:55:93:64:8d:ee:c1:5b:6a:d8:25:9a:5c:
cf:50:23:de:ab:15:ec:0f:e7:e2:06:e2:20:43:3c:b1:a6:af:
42:40:00:38:80:6d:69:93:9e:22:a5:02:8e:8e:3b:1f:0c:e2:
2a:14:99:d7:73:24:7c:b6:73:59:20:a1:6d:11:56:d6:5b:7b:
47:2b:55:dc:c1:fc:52:43:03:be:0d:db:c4:76:f2:38:bb:6b:
46:f0:96:bd:0d:6b:a5:94:dd:09:17:31:3a:1e:d5:0e:e0:7b:
14:c4:7d:81:74:8a:20:4c:f9:1b:61:83:04:fe:a2:a6:e4:d4:
fe:c0:ce:0f:b4:8f:92:e6:b7:b4:10:d6:d0:98:73:3f:19:66:
2c:f1:09:85:d9:89:a9:1e:b1:88:57:08:5b:77:33:de:6d:2f:
c6:c0:af:b4:0f:49:e3:58:92:0f:33:a7:8e:69:28:cf:96:60:
0c:a3:25:7e:4d:ef:bf:05:1f:79:c9:7d:3b:44:55:be:b5:be:
dc:53:8e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps/QO7WJhp1Ad201RLyS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTJiZmY3YTg5YTg1OTBlNmFiYmFlYzAyODJiMGYyNGUw
YWZlYjIwHhcNMjYwMzAxMTQwMTA4WhcNMjYwMzAyMTQwMTA4WjAzMTEwLwYDVQQD
Eyg4YzAyNWZjNDM4NDRmMWRhY2M2NmYwYjI3MTkwNjgxMmY2M2JkNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkyR6wgX1tL6tQGgOuLdxFyIfUeA
1gUc6aaLhJhWNRAE1XvzkS6Mxwwmy36amnrjJdu6TiYj+si7CYwnzNORswJA1cv9
jUm3m/aYJ3vFf2SeFkg3MG4jI0OHggLR+pirBD00lZAyGWIltyS09jpVEbqCgbua
5wcX/7G/dCU7PfJ2QhTejEqG6BMsVTlAtpjUtL4g8z33IaRE2Vl1/70QPmsGUcw7
M+goZHEKLkK4mh9TyBs+OhwhojoSTESsRA5nAIwMyeqFKqH21d2y8efJ2T+5ZixS
cOSQ9A1tCJJT90A4t1HOm5lLpiDYSIiBYt0n+SVi1kBVC2My/NoJLRNfIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwCX8Q4RPHazGbwsnGQaBL2O9QrMB8GA1UdIwQY
MBaAFF+Sv/eomoWQ5qu67AKCsPJOCv6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMt
MWQ5ZDhkMDA0MTExLzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMtMWQ5ZDhkMDA0MTEx
LzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGzyJf1i
DFVjOS9oBzSCkFm38jKX7WOjOjgAnQwaegaOMGbG/amg/M6gUQE5IP+89n4DkxWa
G4eBZP+MVZNkje7BW2rYJZpcz1Aj3qsV7A/n4gbiIEM8saavQkAAOIBtaZOeIqUC
jo47HwziKhSZ13MkfLZzWSChbRFW1lt7RytV3MH8UkMDvg3bxHbyOLtrRvCWvQ1r
pZTdCRcxOh7VDuB7FMR9gXSKIEz5G2GDBP6ipuTU/sDOD7SPkua3tBDW0JhzPxlm
LPEJhdmJqR6xiFcIW3cz3m0vxsCvtA9J41iSDzOnjmkoz5ZgDKMlfk3vvwUfecl9
O0RVvrW+3FOOBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:50 2026 by rpki-client