Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: igYwgz1dMXSDtytwjxWgOFexGL2zFuxS6Es57qW6Z1g=
Subject key identifier: 7B:06:01:3B:0C:48:92:43:3E:55:F4:98:F5:A6:79:3C:BC:A6:7F:3E
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 019D98BD32BD52961AEC302DDE74B29E4450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0D11
Signing time: Fri 17 Apr 2026 00:00:29 +0000
Manifest this update: Fri 17 Apr 2026 00:00:29 +0000
Manifest next update: Sat 18 Apr 2026 00:00:29 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: EOhu7+9iUn6IaN1a5kcZN0lRGB1kBqHh3MR1cMP83s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:32:bd:52:96:1a:ec:30:2d:de:74:b2:9e:44:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Apr 17 00:00:29 2026 GMT
Not After : Apr 18 00:00:29 2026 GMT
Subject: CN=7b06013b0c4892433e55f498f5a6793cbca67f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:59:8d:b7:32:fe:ca:69:9d:76:81:fe:c0:
a1:00:0e:de:59:d4:d9:54:f0:0b:e2:af:5c:b5:11:
54:f5:c2:cc:19:0a:4c:b8:99:45:b6:71:0b:ed:4d:
71:16:f7:6d:a4:1a:d4:42:56:ea:28:e3:11:d2:e4:
3b:aa:6d:6f:f7:bf:22:ad:d0:bc:5c:1e:51:b3:df:
b5:78:2e:36:e0:e3:6d:c7:2b:53:c7:95:f5:ed:87:
2e:0e:e5:ad:6e:a9:ff:2d:6d:f2:90:96:ed:5f:dd:
bd:b2:78:d2:ab:fa:dc:25:12:c7:fd:ae:78:76:b3:
13:69:e0:c7:09:a0:c4:82:fc:c0:83:4d:40:d4:cc:
c6:64:78:fd:2e:be:35:26:6a:43:de:b5:b8:e7:2b:
3a:70:9d:79:8f:46:97:06:da:24:eb:fc:25:0d:2e:
c3:ca:1c:60:8e:9f:aa:56:31:8c:56:7f:89:8f:f9:
84:b7:3d:89:e8:9f:5f:03:f5:5c:2f:50:b6:22:6a:
20:01:ea:50:5b:4b:e3:86:c3:ec:35:8d:00:47:c5:
84:51:ad:88:04:83:40:75:58:95:2e:b6:c7:8e:cf:
b8:d8:7e:ed:37:84:c2:11:ed:0c:40:19:e2:78:12:
93:4f:d3:79:04:d7:b0:9a:af:a4:bf:1e:97:7a:fe:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:01:3B:0C:48:92:43:3E:55:F4:98:F5:A6:79:3C:BC:A6:7F:3E
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f1:f9:e2:5a:4a:c6:cf:a6:6f:b3:b1:37:c0:21:a3:e8:6f:
a9:36:56:4c:02:26:ce:5a:e9:17:54:68:a2:f9:b8:73:a3:ae:
bc:e7:e9:f7:f3:7c:25:3e:88:90:e2:ce:ce:1c:45:05:83:e5:
72:31:b6:79:b6:8d:5e:84:f4:b0:47:92:22:bd:60:39:68:5f:
fc:30:b7:fe:3c:68:72:c7:cf:40:c1:9d:db:c9:25:38:29:8d:
d5:13:a6:cf:32:15:19:d7:d3:a1:b0:15:4b:01:ca:5a:a3:ed:
cc:c3:9f:d3:e9:c8:d9:20:94:7d:37:44:8c:ed:83:44:1e:01:
db:9f:79:12:f9:17:b5:43:32:34:82:22:7d:a4:7c:c7:b3:d7:
4d:f8:dd:5b:03:a5:a0:bf:af:45:ca:2b:45:e8:64:12:3a:22:
76:3a:ac:b1:86:75:05:de:57:68:98:44:44:0d:c0:d2:6d:d0:
af:2e:01:07:23:56:22:30:56:51:9c:09:19:24:58:a1:cb:2c:
4c:a4:6c:2b:1d:28:2c:f9:3c:86:7b:46:02:7d:99:25:00:d1:
95:c6:4b:7e:64:c1:1a:4d:b0:4a:44:5c:aa:44:c1:66:1f:39:
91:91:8f:2b:58:76:1a:cb:5f:5b:72:a3:35:df:79:ee:74:20:
d4:52:dc:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvTK9UpYa7DAt3nSynkRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NjMxOTVkNWNmYzdiOTUyNzM1MDY0MDZmYTkwOTFjMjJm
NmM0MjQwHhcNMjYwNDE3MDAwMDI5WhcNMjYwNDE4MDAwMDI5WjAzMTEwLwYDVQQD
Eyg3YjA2MDEzYjBjNDg5MjQzM2U1NWY0OThmNWE2NzkzY2JjYTY3ZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3dZjbcy/sppnXaB/sChAA7eWdTZ
VPAL4q9ctRFU9cLMGQpMuJlFtnEL7U1xFvdtpBrUQlbqKOMR0uQ7qm1v978irdC8
XB5Rs9+1eC424ONtxytTx5X17YcuDuWtbqn/LW3ykJbtX929snjSq/rcJRLH/a54
drMTaeDHCaDEgvzAg01A1MzGZHj9Lr41JmpD3rW45ys6cJ15j0aXBtok6/wlDS7D
yhxgjp+qVjGMVn+Jj/mEtz2J6J9fA/VcL1C2ImogAepQW0vjhsPsNY0AR8WEUa2I
BINAdViVLrbHjs+42H7tN4TCEe0MQBnieBKTT9N5BNewmq+kvx6Xev4yOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsGATsMSJJDPlX0mPWmeTy8pn8+MB8GA1UdIwQY
MBaAFMdjGV1c/HuVJzUGQG+pCRwi9sQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUt
MzQ5YmRjZmY0NDIwLzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUtMzQ5YmRjZmY0NDIw
LzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevH54lpK
xs+mb7OxN8Aho+hvqTZWTAImzlrpF1Roovm4c6OuvOfp9/N8JT6IkOLOzhxFBYPl
cjG2ebaNXoT0sEeSIr1gOWhf/DC3/jxocsfPQMGd28klOCmN1ROmzzIVGdfTobAV
SwHKWqPtzMOf0+nI2SCUfTdEjO2DRB4B2595EvkXtUMyNIIifaR8x7PXTfjdWwOl
oL+vRcorRehkEjoidjqssYZ1Bd5XaJhERA3A0m3Qry4BByNWIjBWUZwJGSRYocss
TKRsKx0oLPk8hntGAn2ZJQDRlcZLfmTBGk2wSkRcqkTBZh85kZGPK1h2GstfW3Kj
Nd957nQg1FLcgA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:23 2026 by rpki-client