Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: 7S26J7Ym5g9bvBemsfX5Xg5D8+UHj0QQvG+RbgX9rSk=
Subject key identifier: 1A:D3:51:03:35:7B:DC:8B:B7:68:98:C1:64:75:71:31:14:EF:F4:E3
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 019D98F444D143CA92BB092ABA89798697EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 0C34
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: GSIS16HVvFgYjo/5Q1kEB/EB6RYzGZMiZVvQ6UEfSzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:44:d1:43:ca:92:bb:09:2a:ba:89:79:86:97:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=1ad35103357bdc8bb76898c16475713114eff4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:a8:48:89:49:74:b6:92:ff:95:e4:cb:5a:
a4:05:39:56:5d:b2:bf:df:3d:4a:87:f1:cf:88:63:
8e:cf:70:b1:23:9d:d2:be:16:17:56:d9:db:e1:7e:
a7:39:58:fe:49:bc:a7:c6:82:59:d9:61:38:8c:c3:
d1:6c:bf:ed:0a:eb:d6:f6:03:bd:e6:28:d4:05:33:
12:a3:f3:d9:ca:37:ca:ec:69:53:03:7e:b5:e2:30:
b1:21:bc:5e:0c:5d:b7:fc:4e:10:3d:be:04:7d:93:
27:19:26:d4:53:54:4e:c2:a9:89:86:95:3c:8b:09:
90:92:d9:9c:19:bc:54:83:de:89:41:aa:d9:81:70:
0d:ae:33:3c:c6:c5:74:3c:db:39:32:9c:d5:e8:00:
0e:70:a0:bd:99:62:6a:31:70:4e:c3:27:4d:f9:90:
ae:79:7d:be:36:c8:09:dc:6a:31:fe:e2:5d:f1:72:
13:aa:62:16:66:de:4a:a6:9b:17:f0:de:46:13:ad:
10:7d:83:e8:e3:ed:04:70:84:c3:2a:67:79:c0:a1:
93:94:68:a5:81:82:62:b0:cf:c8:60:81:a9:95:77:
b8:da:14:28:f5:99:90:0f:f5:a5:16:c5:fe:7a:b8:
11:5c:e5:08:5d:28:86:c6:49:17:89:35:3f:e5:ba:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D3:51:03:35:7B:DC:8B:B7:68:98:C1:64:75:71:31:14:EF:F4:E3
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:65:3e:19:cf:b8:6f:eb:b3:fb:92:15:b3:e4:ce:89:01:b3:
32:b0:66:6f:cc:51:67:3e:20:fe:4d:ce:a1:91:a0:74:25:3c:
7c:c9:d5:02:a8:1e:64:69:0f:e7:bd:ed:d0:b4:0f:b4:df:37:
df:03:a0:ec:13:72:df:13:bd:2b:43:94:6c:16:81:88:8d:56:
c1:95:5b:14:3f:6a:23:fe:c4:92:53:bf:63:11:e8:44:d7:df:
7e:48:7a:d0:5c:e7:50:16:0f:cf:47:f6:aa:61:76:2a:11:d1:
20:83:9f:91:74:80:40:e3:0d:4f:f7:a3:50:54:1b:6b:4f:29:
db:27:78:70:20:0b:7c:55:1a:5c:bc:d2:9a:e0:84:72:ef:99:
51:27:85:a9:9a:ec:22:ff:53:89:e0:09:61:39:c5:c1:0c:d0:
9a:95:e0:68:92:0a:db:24:5b:e5:a1:18:22:1b:1d:2e:dc:2a:
b8:86:a5:4c:9b:04:a0:3c:06:9e:70:02:c6:a7:1d:5f:d2:fc:
25:1f:4d:9c:59:69:e6:9a:43:58:d6:6f:a4:c3:a8:6a:1e:42:
0c:aa:41:53:ac:fa:e7:0c:8b:02:d5:1e:72:9e:ce:83:75:45:
8a:06:d1:b2:32:8a:48:21:89:e7:8f:9f:57:e2:d4:37:a8:b5:
20:ea:a0:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9ETRQ8qSuwkquol5hpfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OThhZDU3OTdjYWQ5MTUwYWVkMmJjMGI1ZDM5Yjg4YjFi
ZjJiZjQwHhcNMjYwNDE3MDEwMDM4WhcNMjYwNDE4MDEwMDM4WjAzMTEwLwYDVQQD
EygxYWQzNTEwMzM1N2JkYzhiYjc2ODk4YzE2NDc1NzEzMTE0ZWZmNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkOoSIlJdLaS/5Xky1qkBTlWXbK/
3z1Kh/HPiGOOz3CxI53SvhYXVtnb4X6nOVj+SbynxoJZ2WE4jMPRbL/tCuvW9gO9
5ijUBTMSo/PZyjfK7GlTA3614jCxIbxeDF23/E4QPb4EfZMnGSbUU1ROwqmJhpU8
iwmQktmcGbxUg96JQarZgXANrjM8xsV0PNs5MpzV6AAOcKC9mWJqMXBOwydN+ZCu
eX2+NsgJ3Gox/uJd8XITqmIWZt5KppsX8N5GE60QfYPo4+0EcITDKmd5wKGTlGil
gYJisM/IYIGplXe42hQo9ZmQD/WlFsX+ergRXOUIXSiGxkkXiTU/5brU3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrTUQM1e9yLt2iYwWR1cTEU7/TjMB8GA1UdIwQY
MBaAFMSYrVeXytkVCu0rwLXTm4ixvyv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzIt
YTZjNGNjOWY3ODQwLzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzItYTZjNGNjOWY3ODQw
LzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxWU+Gc+4
b+uz+5IVs+TOiQGzMrBmb8xRZz4g/k3OoZGgdCU8fMnVAqgeZGkP573t0LQPtN83
3wOg7BNy3xO9K0OUbBaBiI1WwZVbFD9qI/7EklO/YxHoRNfffkh60FznUBYPz0f2
qmF2KhHRIIOfkXSAQOMNT/ejUFQba08p2yd4cCALfFUaXLzSmuCEcu+ZUSeFqZrs
Iv9TieAJYTnFwQzQmpXgaJIK2yRb5aEYIhsdLtwquIalTJsEoDwGnnACxqcdX9L8
JR9NnFlp5ppDWNZvpMOoah5CDKpBU6z65wyLAtUecp7Og3VFigbRsjKKSCGJ54+f
V+LUN6i1IOqgRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:16 2026 by rpki-client