Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
File: XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft (raw, json)
Hash identifier: ZmIARws8UzOZbcvjHzJloXoHSE2tTS0HNXLD2+arn4A=
Subject key identifier: 9A:3F:DD:C5:3A:F3:23:7E:51:7D:8F:D5:D6:6B:6C:36:8D:F3:E0:F8
Authority key identifier: 5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E
Certificate issuer: /CN=5ccf12899f358d1c341a207fde21d43c70a6945e
Certificate serial: 019CAA8F804C6F25506EBBC4EE4579ACF386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
Manifest number: 048D
Signing time: Sun 01 Mar 2026 18:00:56 +0000
Manifest this update: Sun 01 Mar 2026 18:00:56 +0000
Manifest next update: Mon 02 Mar 2026 18:00:56 +0000
Files and hashes: 1: XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl (hash: oSDKob4q0zz7ViQpJ7jMkMXmcPickLAx76pXLBTFrE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:80:4c:6f:25:50:6e:bb:c4:ee:45:79:ac:f3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf12899f358d1c341a207fde21d43c70a6945e
Validity
Not Before: Mar 1 18:00:56 2026 GMT
Not After : Mar 2 18:00:56 2026 GMT
Subject: CN=9a3fddc53af3237e517d8fd5d66b6c368df3e0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:4c:17:8f:b6:da:c9:87:c2:00:a8:8e:f3:
15:2c:32:57:8a:8a:75:ae:c7:02:19:b7:b6:2b:c3:
e9:42:4a:6e:84:e7:72:83:09:f2:33:48:78:a3:29:
f9:bc:b4:c6:0f:38:09:96:86:f8:c3:34:35:61:8d:
ca:10:d1:95:94:9b:59:71:a8:35:72:ce:ef:13:e0:
b5:32:8b:95:7e:36:44:0f:0d:f9:ca:6e:3f:d1:a9:
60:e1:4d:32:ee:28:1a:94:41:78:15:04:33:fc:57:
eb:f9:22:1f:23:dd:79:e2:1d:41:d7:3b:48:f8:df:
04:a7:8e:9f:79:08:ae:e4:b6:24:8b:38:87:7f:6c:
3e:03:d2:68:a5:f3:9e:5f:d4:e7:a0:dc:b1:61:6e:
31:11:96:94:a8:4d:e5:53:b4:c3:f1:17:cc:92:8f:
ca:be:0a:cd:48:b4:47:f3:d4:11:57:dc:0e:8e:a3:
f7:8d:92:30:73:44:19:ac:fb:e9:89:81:44:6d:2b:
ad:b8:cb:e4:58:6a:5e:0f:22:be:17:30:31:d8:c3:
02:8a:79:69:dd:85:e9:68:19:ff:d4:42:13:84:f6:
34:ce:17:35:88:3a:86:f4:81:41:08:30:f2:e3:a5:
f5:29:db:d2:d8:e3:06:3b:57:a9:d3:7f:c5:73:65:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:DD:C5:3A:F3:23:7E:51:7D:8F:D5:D6:6B:6C:36:8D:F3:E0:F8
X509v3 Authority Key Identifier:
keyid:5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:aa:66:f3:03:d3:da:0f:b9:07:87:2e:96:70:53:bd:4c:25:
52:7a:e3:0b:c9:cd:51:e5:a8:32:26:4c:44:af:59:e2:b6:0a:
3b:8c:19:69:6f:49:60:51:1c:ff:85:60:93:dd:96:7e:90:88:
69:14:b9:29:2f:87:18:e2:a5:78:90:db:1f:97:65:80:c3:9c:
cb:f6:9b:72:47:e7:e1:1b:d6:96:a7:4b:1d:ad:ba:8a:d7:95:
c6:a3:bf:25:f6:a0:3b:40:7d:2f:5c:58:72:50:41:a4:94:6b:
e5:f4:a5:16:25:10:2b:88:8d:93:4f:95:ef:93:d6:5a:55:ba:
c7:51:73:70:92:a6:fe:f2:ea:32:f1:07:72:a6:88:ee:93:18:
f9:25:9b:a1:36:8f:ca:cd:dd:39:6e:49:56:46:f6:c9:78:69:
71:84:5a:06:34:69:a3:26:b3:18:2f:1d:e0:8a:2e:b6:17:6e:
10:ba:50:67:2e:a8:3a:6a:42:a0:11:2e:35:bb:3c:62:d3:8a:
1a:26:48:49:ac:fb:62:84:8f:11:ce:82:86:fd:55:33:43:84:
fc:3d:b2:8e:d5:6b:5b:e7:98:a9:5d:22:42:69:c3:35:e6:38:
c5:6c:f2:fa:11:fc:df:0e:a1:8c:6a:1c:4e:b2:a1:a8:96:b8:
a3:fe:ae:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj4BMbyVQbrvE7kV5rPOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjY2YxMjg5OWYzNThkMWMzNDFhMjA3ZmRlMjFkNDNjNzBh
Njk0NWUwHhcNMjYwMzAxMTgwMDU2WhcNMjYwMzAyMTgwMDU2WjAzMTEwLwYDVQQD
Eyg5YTNmZGRjNTNhZjMyMzdlNTE3ZDhmZDVkNjZiNmMzNjhkZjNlMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5pMF4+22smHwgCojvMVLDJXiop1
rscCGbe2K8PpQkpuhOdygwnyM0h4oyn5vLTGDzgJlob4wzQ1YY3KENGVlJtZcag1
cs7vE+C1MouVfjZEDw35ym4/0alg4U0y7igalEF4FQQz/Ffr+SIfI9154h1B1ztI
+N8Ep46feQiu5LYkiziHf2w+A9JopfOeX9TnoNyxYW4xEZaUqE3lU7TD8RfMko/K
vgrNSLRH89QRV9wOjqP3jZIwc0QZrPvpiYFEbSutuMvkWGpeDyK+FzAx2MMCinlp
3YXpaBn/1EIThPY0zhc1iDqG9IFBCDDy46X1KdvS2OMGO1ep03/Fc2VBUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo/3cU68yN+UX2P1dZrbDaN8+D4MB8GA1UdIwQY
MBaAFFzPEomfNY0cNBogf94h1DxwppReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jODEyOTctNjJiNy00OWZiLWJhM2Yt
MjU2MGY4NjkwY2QyLzEvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jODEyOTctNjJiNy00OWZiLWJhM2YtMjU2MGY4NjkwY2Qy
LzEvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqpm8wPT
2g+5B4culnBTvUwlUnrjC8nNUeWoMiZMRK9Z4rYKO4wZaW9JYFEc/4Vgk92WfpCI
aRS5KS+HGOKleJDbH5dlgMOcy/abckfn4RvWlqdLHa26iteVxqO/JfagO0B9L1xY
clBBpJRr5fSlFiUQK4iNk0+V75PWWlW6x1FzcJKm/vLqMvEHcqaI7pMY+SWboTaP
ys3dOW5JVkb2yXhpcYRaBjRpoyazGC8d4IouthduELpQZy6oOmpCoBEuNbs8YtOK
GiZISaz7YoSPEc6Chv1VM0OE/D2yjtVrW+eYqV0iQmnDNeY4xWzy+hH83w6hjGoc
TrKhqJa4o/6uaQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:17 2026 by rpki-client