Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
File: dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft (raw, json)
Hash identifier: SxtYtZ5Jbusf+QgmTx98LuKsw6lsCQfAI1z6bopkZ4A=
Subject key identifier: 82:F2:28:70:0B:96:E8:52:BB:0B:A2:CA:4F:21:75:F4:3C:A0:D1:52
Authority key identifier: 75:72:C9:A1:08:CE:3D:E5:2D:16:E2:11:E8:0C:95:E5:C5:B5:4C:84
Certificate issuer: /CN=7572c9a108ce3de52d16e211e80c95e5c5b54c84
Certificate serial: 019DA29CEAEEAF0D53AA6D489D71B4650A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
Manifest number: 137B
Signing time: Sat 18 Apr 2026 22:01:25 +0000
Manifest this update: Sat 18 Apr 2026 22:01:25 +0000
Manifest next update: Sun 19 Apr 2026 22:01:25 +0000
Files and hashes: 1: dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl (hash: RqNjdIyPn/UkhHa+oXumDRKmD/hp8R/gZLau+MPu97s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:ea:ee:af:0d:53:aa:6d:48:9d:71:b4:65:0a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7572c9a108ce3de52d16e211e80c95e5c5b54c84
Validity
Not Before: Apr 18 22:01:25 2026 GMT
Not After : Apr 19 22:01:25 2026 GMT
Subject: CN=82f228700b96e852bb0ba2ca4f2175f43ca0d152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:ed:ab:17:3a:1e:a5:b9:24:54:06:0b:e0:
72:84:a9:2b:b1:eb:19:52:3f:f0:dc:27:32:13:6d:
d0:54:ca:cb:b9:e0:91:4d:cb:4c:ae:dc:0b:85:f4:
1a:4a:d8:2f:96:bc:54:45:8c:8f:85:09:56:fd:b1:
f8:76:ab:0d:c3:7a:c3:cd:05:47:6e:c8:14:7c:10:
c8:41:6a:5e:9c:89:6c:04:ce:ad:75:58:08:21:0a:
e3:b0:2d:db:16:55:2c:d1:99:a7:a1:fd:4d:7c:0b:
f8:3e:8f:08:4b:a1:49:34:76:1f:e7:3a:4e:ab:4b:
79:78:93:81:b0:79:0a:91:7a:dc:4d:20:e2:b4:81:
29:b3:0f:6c:1b:83:54:e6:ea:71:2a:5d:10:12:f2:
e2:cb:d3:c4:73:9d:04:d7:d4:7d:d8:42:08:55:f4:
e4:f7:68:10:30:ba:f3:ec:7f:b4:df:85:90:81:e4:
41:20:18:ea:35:d1:3a:42:be:29:48:7d:80:3e:ca:
9a:66:17:f7:8e:8b:bc:c1:a2:b9:23:f7:7c:bf:68:
3c:cc:30:eb:70:5a:4d:f7:9f:cb:f4:9e:65:a9:ee:
c2:a6:53:6a:cf:cc:a3:a5:08:65:a5:25:b0:a7:cf:
44:87:5d:a3:86:86:83:62:95:e8:62:67:c1:23:f3:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F2:28:70:0B:96:E8:52:BB:0B:A2:CA:4F:21:75:F4:3C:A0:D1:52
X509v3 Authority Key Identifier:
keyid:75:72:C9:A1:08:CE:3D:E5:2D:16:E2:11:E8:0C:95:E5:C5:B5:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:8f:7b:eb:bc:4b:ca:91:3c:5e:69:51:d1:b7:fd:dc:ff:
d9:14:33:8a:52:c7:06:4b:66:92:36:98:c2:e8:6f:7a:30:7c:
16:35:7c:62:fe:c5:a4:24:7f:96:d4:6e:8d:27:46:76:66:e9:
a6:d7:93:81:fb:60:4f:d2:31:9b:32:4d:6a:f2:a7:b1:f9:de:
76:01:1e:e0:35:9e:8a:f6:81:f4:06:24:23:ef:3f:9f:41:fe:
75:4f:52:c1:86:bf:a0:9f:e4:62:8c:7f:b0:72:04:0a:63:10:
09:62:e2:17:9b:76:4a:8a:6d:79:8f:9e:48:90:88:98:eb:21:
6b:dd:98:9b:ea:bd:19:98:c9:82:5b:d3:61:71:80:1c:00:cb:
5b:00:9f:fe:2d:30:2b:29:35:9c:8f:3a:72:c9:5d:df:da:7f:
fd:de:05:c1:02:3a:d1:1a:17:27:26:e0:c3:dd:cb:6f:e7:07:
8c:8a:09:23:58:df:0f:be:60:9b:c1:a8:6b:d5:48:ad:92:5a:
59:5c:75:64:4e:fa:5b:08:7d:75:9c:b6:1f:a6:69:08:71:e7:
28:b9:58:46:10:6e:5c:4f:2f:62:35:03:41:cd:99:4d:03:a9:
e7:da:e0:fd:aa:f7:f0:a9:a0:2a:7d:34:82:66:cf:90:f5:97:
58:83:e8:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inOrurw1Tqm1InXG0ZQowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzJjOWExMDhjZTNkZTUyZDE2ZTIxMWU4MGM5NWU1YzVi
NTRjODQwHhcNMjYwNDE4MjIwMTI1WhcNMjYwNDE5MjIwMTI1WjAzMTEwLwYDVQQD
Eyg4MmYyMjg3MDBiOTZlODUyYmIwYmEyY2E0ZjIxNzVmNDNjYTBkMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEftqxc6HqW5JFQGC+ByhKkrsesZ
Uj/w3CcyE23QVMrLueCRTctMrtwLhfQaStgvlrxURYyPhQlW/bH4dqsNw3rDzQVH
bsgUfBDIQWpenIlsBM6tdVgIIQrjsC3bFlUs0Zmnof1NfAv4Po8IS6FJNHYf5zpO
q0t5eJOBsHkKkXrcTSDitIEpsw9sG4NU5upxKl0QEvLiy9PEc50E19R92EIIVfTk
92gQMLrz7H+034WQgeRBIBjqNdE6Qr4pSH2APsqaZhf3jou8waK5I/d8v2g8zDDr
cFpN95/L9J5lqe7CplNqz8yjpQhlpSWwp89Eh12jhoaDYpXoYmfBI/M+uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILyKHALluhSuwuiyk8hdfQ8oNFSMB8GA1UdIwQY
MBaAFHVyyaEIzj3lLRbiEegMleXFtUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhMSm9Rak9QZVV0RnVJUjZBeVY1Y1cxVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZmQ3ZTUtYzJjOS00OTBiLTk1ZTkt
NWZhZWM1YWJhZjFiLzEvZFhMSm9Rak9QZVV0RnVJUjZBeVY1Y1cxVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82ZmQ3ZTUtYzJjOS00OTBiLTk1ZTktNWZhZWM1YWJhZjFi
LzEvZFhMSm9Rak9QZVV0RnVJUjZBeVY1Y1cxVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaOPe+u8
S8qRPF5pUdG3/dz/2RQzilLHBktmkjaYwuhvejB8FjV8Yv7FpCR/ltRujSdGdmbp
pteTgftgT9IxmzJNavKnsfnedgEe4DWeivaB9AYkI+8/n0H+dU9SwYa/oJ/kYox/
sHIECmMQCWLiF5t2SopteY+eSJCImOsha92Ym+q9GZjJglvTYXGAHADLWwCf/i0w
Kyk1nI86csld39p//d4FwQI60RoXJybgw93Lb+cHjIoJI1jfD75gm8Goa9VIrZJa
WVx1ZE76Wwh9dZy2H6ZpCHHnKLlYRhBuXE8vYjUDQc2ZTQOp59rg/ar38KmgKn00
gmbPkPWXWIPoQQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:45:49 2026 by rpki-client