Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: /f5fP9rlQmAagRBi12TYmywllNxiFS49eixz4wXNX8Y=
Subject key identifier: 85:64:60:E9:3D:C9:2E:56:3C:D2:76:41:B3:BC:0E:23:F2:A6:61:51
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 019CAC7E59DB5C0E838F5E1A254B28EBF766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 03:01:27 +0000
Manifest this update: Mon 02 Mar 2026 03:01:27 +0000
Manifest next update: Tue 03 Mar 2026 03:01:27 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: xa+cuEVx30yvvvdapT/xrmHi5YsHuOAISabr0pnkuRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:59:db:5c:0e:83:8f:5e:1a:25:4b:28:eb:f7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Mar 2 03:01:27 2026 GMT
Not After : Mar 3 03:01:27 2026 GMT
Subject: CN=856460e93dc92e563cd27641b3bc0e23f2a66151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:a2:2a:6f:0c:5b:69:cb:3f:56:61:7a:35:
55:fa:ca:16:af:14:3d:50:84:a9:41:3e:4f:b3:bd:
9a:7c:64:e9:8f:3c:df:92:11:c5:de:1d:db:9c:a3:
2b:b6:e0:ca:d7:c7:88:d0:08:d7:83:36:4c:9b:b9:
3d:86:27:eb:37:a1:60:77:db:51:9d:9f:c4:d7:c8:
cb:bc:6a:a9:c3:13:a7:ab:a0:c7:16:6f:10:d9:f7:
3e:32:cb:c3:71:df:1e:57:e3:c0:7a:4e:b3:df:ac:
4a:79:60:85:de:6c:76:be:99:3f:ed:5e:bf:1d:6c:
17:ac:7a:68:64:fb:23:49:53:9b:c8:69:d6:20:c5:
5c:66:a4:99:b6:67:8e:1b:da:cc:6d:8d:41:29:29:
7e:08:33:97:a2:fc:e0:2b:95:6d:86:67:7e:44:1f:
0e:5c:bd:95:4d:fa:51:7e:cd:7c:b4:97:62:b8:72:
65:af:cd:e7:58:1c:9f:d4:12:c8:c1:b8:64:cb:a5:
56:76:87:99:f4:32:07:07:26:c7:fe:16:53:67:97:
9b:5c:75:b6:da:df:ea:49:50:71:c5:38:5d:00:f0:
4e:f8:a8:4a:79:8f:86:2b:7d:77:da:83:a9:20:31:
6d:7d:53:6a:47:18:22:7a:f3:6d:06:02:80:0c:d8:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:60:E9:3D:C9:2E:56:3C:D2:76:41:B3:BC:0E:23:F2:A6:61:51
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d4:92:bf:92:b6:37:78:9b:29:49:53:49:45:8b:f3:f9:0a:
85:19:d7:72:b4:ee:ea:01:0d:24:94:dd:41:af:1a:e8:fb:8c:
b7:7e:22:e1:bc:fd:51:5c:73:a0:54:8c:cb:f1:f0:96:7e:65:
70:bd:d9:b2:ae:52:21:24:c2:b1:91:d7:49:44:83:47:0d:b3:
82:5e:27:ef:95:ea:0b:2b:48:31:57:24:e0:b0:d9:05:1e:fd:
43:97:98:6b:e3:72:b8:3e:c1:1c:47:d6:33:51:76:bd:e1:6a:
f7:4c:42:18:ba:b5:34:25:9a:b3:68:4a:83:62:61:60:61:0c:
6f:0d:a9:11:22:d9:48:90:b4:ed:37:89:07:c7:09:1f:a2:3f:
35:a4:4b:91:98:a0:39:d5:49:78:63:08:94:6a:00:12:03:87:
f3:1e:17:4b:1b:4d:0e:6c:59:95:cb:e6:40:f9:db:2b:7f:07:
41:89:c3:53:6a:eb:6a:d9:08:1a:fe:e5:f7:57:5b:f3:4b:89:
35:86:4f:df:32:2d:8e:6c:91:64:be:10:b2:f2:c2:e5:68:21:
3d:3c:11:bf:25:a5:2d:50:0a:9c:32:b4:e7:51:fa:fb:20:bb:
5c:2b:8c:dc:45:2a:74:91:9f:ae:75:15:56:c3:bd:35:2b:eb:
44:b7:49:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysflnbXA6Dj14aJUso6/dmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MWIzZDYyOGE2Mjk2OTFlYmE5MmE3Mzg0M2VkNDUzZjcy
ODdhMzcwHhcNMjYwMzAyMDMwMTI3WhcNMjYwMzAzMDMwMTI3WjAzMTEwLwYDVQQD
Eyg4NTY0NjBlOTNkYzkyZTU2M2NkMjc2NDFiM2JjMGUyM2YyYTY2MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d2iKm8MW2nLP1ZhejVV+soWrxQ9
UISpQT5Ps72afGTpjzzfkhHF3h3bnKMrtuDK18eI0AjXgzZMm7k9hifrN6Fgd9tR
nZ/E18jLvGqpwxOnq6DHFm8Q2fc+MsvDcd8eV+PAek6z36xKeWCF3mx2vpk/7V6/
HWwXrHpoZPsjSVObyGnWIMVcZqSZtmeOG9rMbY1BKSl+CDOXovzgK5Vthmd+RB8O
XL2VTfpRfs18tJdiuHJlr83nWByf1BLIwbhky6VWdoeZ9DIHBybH/hZTZ5ebXHW2
2t/qSVBxxThdAPBO+KhKeY+GK3132oOpIDFtfVNqRxgievNtBgKADNjYkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVkYOk9yS5WPNJ2QbO8DiPypmFRMB8GA1UdIwQY
MBaAFMYbPWKKYpaR66kqc4Q+1FP3KHo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNTE3ZWItNWQyNi00NDY4LTkxZjIt
N2RjYzRlZDFjZGJjLzEveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hNTE3ZWItNWQyNi00NDY4LTkxZjItN2RjYzRlZDFjZGJj
LzEveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9SSv5K2
N3ibKUlTSUWL8/kKhRnXcrTu6gENJJTdQa8a6PuMt34i4bz9UVxzoFSMy/Hwln5l
cL3Zsq5SISTCsZHXSUSDRw2zgl4n75XqCytIMVck4LDZBR79Q5eYa+NyuD7BHEfW
M1F2veFq90xCGLq1NCWas2hKg2JhYGEMbw2pESLZSJC07TeJB8cJH6I/NaRLkZig
OdVJeGMIlGoAEgOH8x4XSxtNDmxZlcvmQPnbK38HQYnDU2rratkIGv7l91db80uJ
NYZP3zItjmyRZL4QsvLC5WghPTwRvyWlLVAKnDK051H6+yC7XCuM3EUqdJGfrnUV
VsO9NSvrRLdJeA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:33 2026 by rpki-client