Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
File: xxovfXzIw2N0bpa8P8yLBflgb-o.mft (raw, json)
Hash identifier: pZKv2BHh/cIXpDwcpk93gfq2LMCtD82xXTl1uDZxG/A=
Subject key identifier: BF:03:93:84:39:2F:AC:3C:12:01:BF:8F:85:C3:BA:5C:0E:3F:D3:49
Authority key identifier: C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
Certificate issuer: /CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Certificate serial: 019CACB519D5F1757DFB1E3531CB0C7CE700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 04:01:15 +0000
Manifest this update: Mon 02 Mar 2026 04:01:15 +0000
Manifest next update: Tue 03 Mar 2026 04:01:15 +0000
Files and hashes: 1: xxovfXzIw2N0bpa8P8yLBflgb-o.crl (hash: KxFTN60C7KytZYFoJIz0Jh948WQ/8viyCgFu8zcSYhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:19:d5:f1:75:7d:fb:1e:35:31:cb:0c:7c:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Validity
Not Before: Mar 2 04:01:15 2026 GMT
Not After : Mar 3 04:01:15 2026 GMT
Subject: CN=bf039384392fac3c1201bf8f85c3ba5c0e3fd349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:f9:42:f9:9e:5e:18:a0:a6:27:15:d1:c4:
cf:12:c6:52:eb:0c:4a:8a:0e:7e:78:c5:a5:c4:ca:
45:9c:3b:af:f5:a1:0e:22:33:d1:af:51:50:4a:af:
d4:bf:da:26:27:a1:00:72:b5:a7:62:9a:9f:db:dd:
45:67:56:98:cb:ed:d8:8d:ee:a8:6e:a5:97:bf:04:
ee:01:54:ae:4e:f7:e1:a3:79:b2:35:59:ea:cc:31:
74:58:c0:aa:26:77:cd:73:5f:cc:24:17:67:0a:b3:
eb:bc:e6:ea:df:7f:b3:fb:5d:4f:c8:5a:d6:46:ba:
ac:34:16:7a:5b:c6:d8:d4:29:d7:6c:f3:0e:1d:8a:
89:f7:de:ee:70:7c:e9:33:28:b7:0e:43:db:a8:6c:
e0:2e:96:5f:b4:17:c0:a1:03:c4:88:da:ed:f8:22:
f0:c5:fc:62:7f:45:4f:36:4b:01:93:67:15:84:e6:
b1:00:98:47:a1:38:16:ff:29:6b:84:05:8c:41:03:
d2:4d:17:43:29:ac:21:cd:86:fd:5b:dc:d5:d0:af:
d6:22:af:fc:c6:40:29:ad:05:27:28:8e:e2:11:af:
ed:dd:c5:ba:fc:fd:25:63:0d:a9:f6:25:b9:ab:e9:
77:e7:84:b4:09:81:32:cf:00:e9:0d:59:85:fa:73:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:93:84:39:2F:AC:3C:12:01:BF:8F:85:C3:BA:5C:0E:3F:D3:49
X509v3 Authority Key Identifier:
keyid:C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f4:5d:cb:49:21:cb:f9:fb:8f:e6:e0:84:78:56:1e:fa:9a:
b2:51:20:98:96:87:03:ac:8a:d3:38:ed:fa:d9:61:8b:8a:24:
d1:2b:3f:6c:04:bb:c4:72:ee:cb:dc:47:b6:45:a1:50:6d:75:
13:9a:e8:5e:c8:9f:a7:3c:83:f8:a2:0d:af:63:b1:33:75:37:
11:89:02:69:3f:ce:c9:84:9a:c2:a5:16:c9:dd:80:06:44:0f:
ea:59:eb:ba:40:4c:85:ac:07:f6:15:f0:2d:a6:28:46:e3:d1:
15:27:f0:44:d7:de:73:74:35:38:59:00:94:42:70:bc:0a:28:
46:38:93:d3:9e:d2:c8:87:40:23:c5:66:57:e6:b4:55:c2:b3:
34:65:a9:ba:25:1e:27:0e:00:c1:0f:88:26:a5:27:5f:db:7b:
16:af:40:3e:2b:c3:ea:d8:c5:d7:fb:5b:3d:fa:2f:8d:a7:50:
bc:c9:2f:67:26:a7:de:87:bf:2d:95:5e:d0:6f:67:d4:d2:01:
96:81:3e:d7:97:85:54:5e:38:78:f7:28:3c:dc:c7:a5:bd:92:
ed:e3:1a:0f:05:9f:a0:67:26:4b:cd:21:e4:7b:98:bd:29:81:
18:10:d3:b9:9b:79:52:18:df:78:84:7d:02:33:bb:bc:ca:06:
85:f1:55:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystRnV8XV9+x41McsMfOcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MWEyZjdkN2NjOGMzNjM3NDZlOTZiYzNmY2M4YjA1Zjk2
MDZmZWEwHhcNMjYwMzAyMDQwMTE1WhcNMjYwMzAzMDQwMTE1WjAzMTEwLwYDVQQD
EyhiZjAzOTM4NDM5MmZhYzNjMTIwMWJmOGY4NWMzYmE1YzBlM2ZkMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cj5QvmeXhigpicV0cTPEsZS6wxK
ig5+eMWlxMpFnDuv9aEOIjPRr1FQSq/Uv9omJ6EAcrWnYpqf291FZ1aYy+3Yje6o
bqWXvwTuAVSuTvfho3myNVnqzDF0WMCqJnfNc1/MJBdnCrPrvObq33+z+11PyFrW
RrqsNBZ6W8bY1CnXbPMOHYqJ997ucHzpMyi3DkPbqGzgLpZftBfAoQPEiNrt+CLw
xfxif0VPNksBk2cVhOaxAJhHoTgW/ylrhAWMQQPSTRdDKawhzYb9W9zV0K/WIq/8
xkAprQUnKI7iEa/t3cW6/P0lYw2p9iW5q+l354S0CYEyzwDpDVmF+nNpMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8Dk4Q5L6w8EgG/j4XDulwOP9NJMB8GA1UdIwQY
MBaAFMcaL318yMNjdG6WvD/MiwX5YG/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wZGM5MjUtYTMzYi00ZDNhLWFkZDMt
ZDZkMTQwZTRjZTZkLzEveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wZGM5MjUtYTMzYi00ZDNhLWFkZDMtZDZkMTQwZTRjZTZk
LzEveHhvdmZYekl3Mk4wYnBhOFA4eUxCZmxnYi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/Rdy0kh
y/n7j+bghHhWHvqaslEgmJaHA6yK0zjt+tlhi4ok0Ss/bAS7xHLuy9xHtkWhUG11
E5roXsifpzyD+KINr2OxM3U3EYkCaT/OyYSawqUWyd2ABkQP6lnrukBMhawH9hXw
LaYoRuPRFSfwRNfec3Q1OFkAlEJwvAooRjiT057SyIdAI8VmV+a0VcKzNGWpuiUe
Jw4AwQ+IJqUnX9t7Fq9APivD6tjF1/tbPfovjadQvMkvZyan3oe/LZVe0G9n1NIB
loE+15eFVF44ePcoPNzHpb2S7eMaDwWfoGcmS80h5HuYvSmBGBDTuZt5UhjfeIR9
AjO7vMoGhfFVTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:19 2026 by rpki-client