Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: yBSdnLIC83hiXq0mhf3YqiS7x4Hxde4TJFI49zt1K70=
Subject key identifier: C8:9F:7C:42:77:9A:44:54:31:FF:C6:FB:3D:7D:14:D7:5D:7D:F3:57
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 019CABD97A377F560574290BCCED9E36F9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 05D0
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: kkdxW+Mg7zGtEI6Asx1tjE0ububfAu2i9EXs8gJUlh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7a:37:7f:56:05:74:29:0b:cc:ed:9e:36:f9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=c89f7c42779a445431ffc6fb3d7d14d75d7df357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:c7:da:34:f7:04:b4:08:2d:18:46:17:8d:
95:84:3d:21:cd:c0:1a:6a:bc:f0:48:55:58:49:5e:
bc:bf:ce:3d:5e:78:ed:a2:99:29:59:5b:0d:5d:85:
01:eb:93:67:9b:b5:e5:5e:5f:10:17:9e:dd:7d:a3:
37:bd:ec:b5:01:49:b1:47:f8:48:d6:0b:aa:69:67:
e3:53:90:69:39:d2:87:db:b4:d4:ce:61:ae:65:b7:
5d:23:a5:f4:83:e0:25:a9:0b:81:cc:a0:a7:8a:81:
8b:f4:d7:b9:d4:5a:d5:0b:7c:90:5f:ba:5b:d7:4a:
3c:79:fb:05:1f:ef:e2:b1:ba:e9:7f:64:fa:6d:4b:
7c:d7:00:59:c5:74:07:2a:a0:05:35:11:7e:ab:15:
d7:13:02:65:a3:91:1c:64:1b:9f:a1:75:74:20:3d:
69:14:98:1d:a4:d9:3e:4c:70:fe:9a:31:ce:4c:ab:
9a:89:1a:c9:0e:47:4d:65:b3:7c:00:0b:55:73:be:
12:ec:95:e2:98:0f:68:dc:da:79:0c:a8:d7:2f:72:
1e:83:bd:8d:9e:e6:a5:5a:46:d1:7a:de:42:4f:a9:
93:1e:2d:f6:60:1a:ed:2b:48:c3:15:b1:32:06:f1:
19:57:0d:e8:5a:c9:f0:ac:0d:ff:52:8b:93:52:34:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:7C:42:77:9A:44:54:31:FF:C6:FB:3D:7D:14:D7:5D:7D:F3:57
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:96:f2:58:f3:0f:32:10:0a:1f:e2:16:13:b8:2d:55:e7:
93:19:b5:86:7e:59:61:27:87:8a:46:f3:71:4f:e9:11:e5:5b:
0b:eb:5e:46:b7:82:77:bb:26:39:c9:c0:ed:8d:a5:94:28:9e:
ec:33:0a:8b:17:08:d9:b0:f4:96:da:e6:ca:bd:37:5e:bf:7b:
75:d4:ab:93:ab:b8:46:5d:8d:c7:7b:6a:d5:b7:a9:9b:55:50:
ff:c4:a3:ef:10:93:91:78:86:05:9d:ff:45:3c:a7:73:ee:2b:
85:8e:7b:72:54:3c:3f:64:35:ef:68:6d:ce:db:ac:c3:a6:ee:
81:6b:1b:30:78:99:24:96:c4:d6:d0:33:a7:6d:00:59:4a:74:
e0:24:6c:30:60:f7:bb:ff:99:1c:03:34:b3:6a:02:a5:97:dc:
6a:78:cb:d3:b1:90:69:49:29:1b:5c:73:57:4e:9f:91:53:39:
07:7a:6f:72:b1:0d:b3:dc:a6:45:d4:cd:36:fd:7d:c3:0d:48:
69:58:ae:ab:12:49:a9:22:9b:e8:cd:37:eb:30:0d:65:85:e4:
8a:ec:07:72:d0:4d:89:43:bc:28:dc:7d:d3:24:b1:1d:0f:44:
98:49:91:44:6c:8f:51:d3:d7:68:76:00:fc:35:54:f1:7a:b1:
9e:c0:ad:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Xo3f1YFdCkLzO2eNvnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3
NTExNmUwHhcNMjYwMzAyMDAwMTIyWhcNMjYwMzAzMDAwMTIyWjAzMTEwLwYDVQQD
EyhjODlmN2M0Mjc3OWE0NDU0MzFmZmM2ZmIzZDdkMTRkNzVkN2RmMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzabH2jT3BLQILRhGF42VhD0hzcAa
arzwSFVYSV68v849XnjtopkpWVsNXYUB65Nnm7XlXl8QF57dfaM3vey1AUmxR/hI
1guqaWfjU5BpOdKH27TUzmGuZbddI6X0g+AlqQuBzKCnioGL9Ne51FrVC3yQX7pb
10o8efsFH+/isbrpf2T6bUt81wBZxXQHKqAFNRF+qxXXEwJlo5EcZBufoXV0ID1p
FJgdpNk+THD+mjHOTKuaiRrJDkdNZbN8AAtVc74S7JXimA9o3Np5DKjXL3Ieg72N
nualWkbRet5CT6mTHi32YBrtK0jDFbEyBvEZVw3oWsnwrA3/UouTUjR7RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiffEJ3mkRUMf/G+z19FNddffNXMB8GA1UdIwQY
MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt
YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz
LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkeW8ljz
DzIQCh/iFhO4LVXnkxm1hn5ZYSeHikbzcU/pEeVbC+teRreCd7smOcnA7Y2llCie
7DMKixcI2bD0ltrmyr03Xr97ddSrk6u4Rl2Nx3tq1bepm1VQ/8Sj7xCTkXiGBZ3/
RTync+4rhY57clQ8P2Q172htztusw6bugWsbMHiZJJbE1tAzp20AWUp04CRsMGD3
u/+ZHAM0s2oCpZfcanjL07GQaUkpG1xzV06fkVM5B3pvcrENs9ymRdTNNv19ww1I
aViuqxJJqSKb6M036zANZYXkiuwHctBNiUO8KNx90ySxHQ9EmEmRRGyPUdPXaHYA
/DVU8XqxnsCtHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:00 2026 by rpki-client