Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: uDSiTX9YpsLlqAqFmFtLqtA4nTIoWKEHctxwIrZzPXk=
Subject key identifier: F2:C4:18:FE:4D:37:B2:B4:D8:EE:15:23:C7:3D:59:09:8C:7A:14:B1
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019CA97D1ACDA40217F25650EEF0341D25E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 16
Signing time: Sun 01 Mar 2026 13:01:14 +0000
Manifest this update: Sun 01 Mar 2026 13:01:14 +0000
Manifest next update: Mon 02 Mar 2026 13:01:14 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: nhhrAe/XxERJZeZBy/VwITyMUZZioKaTEvO9UiMsZtM=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:1a:cd:a4:02:17:f2:56:50:ee:f0:34:1d:25:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Mar 1 13:01:14 2026 GMT
Not After : Mar 2 13:01:14 2026 GMT
Subject: CN=f2c418fe4d37b2b4d8ee1523c73d59098c7a14b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:ad:e8:5f:72:b1:39:a6:80:9b:23:5f:57:
50:1a:75:ea:ce:52:6f:cb:9d:6e:06:c6:bd:48:df:
4f:12:21:28:2f:6f:07:d6:14:60:d7:2a:1a:18:c1:
6b:29:1f:2c:a9:6b:59:16:97:92:b2:0f:17:ee:f3:
3d:f5:bc:57:2b:88:50:c2:de:2e:90:67:16:0a:68:
ca:f7:07:04:10:75:bc:a0:0f:05:0c:d6:9b:71:30:
b5:b6:2c:d9:74:12:53:3a:57:77:08:35:7a:29:51:
9b:0e:c3:85:fa:d3:f9:d5:95:4c:99:84:f1:30:a7:
a0:56:3b:0a:0d:8d:c8:be:83:89:2c:3f:c6:ad:dd:
97:4c:14:bd:f6:2d:b9:5b:db:4a:f8:b3:e0:83:99:
0a:c7:ad:f0:f5:f1:29:10:a8:87:d0:62:4a:04:66:
82:09:b1:e4:6b:e4:ca:37:71:0d:07:92:98:03:e0:
8e:e7:68:8a:bf:3a:0c:e7:1a:51:fb:bc:65:17:53:
e0:88:de:4a:b3:df:fa:85:d6:f9:7a:86:7e:9d:dd:
03:90:d7:55:14:89:55:51:13:ec:11:94:b7:4c:e0:
56:81:0e:80:86:12:88:33:17:10:3a:32:33:87:c7:
83:74:bb:a5:f0:8c:cd:4f:30:96:53:25:e1:6b:c7:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C4:18:FE:4D:37:B2:B4:D8:EE:15:23:C7:3D:59:09:8C:7A:14:B1
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9f:e5:7d:8d:75:8c:0e:c5:8d:d6:19:1b:3a:da:ba:be:7a:
10:d2:b5:74:f1:d5:46:2e:cd:d1:1d:ff:7f:3c:dc:3f:2a:af:
0d:7b:ad:f5:a3:a7:47:b2:a1:c6:f4:60:58:18:b0:0c:04:e4:
0a:d5:c7:eb:c2:05:61:5b:fc:cd:4e:1d:7a:ea:53:ee:bb:c1:
9c:f8:b4:ee:e9:73:d8:93:d7:c9:de:ee:f5:76:49:80:41:b0:
0a:d1:54:1b:01:8c:26:35:f4:2c:69:77:76:a7:24:b6:7e:a7:
87:5f:1c:ca:2e:0d:72:27:8e:67:50:c9:46:b7:da:2b:ce:d3:
ab:c5:a3:a0:07:a7:a0:55:b2:57:99:e4:03:2d:c0:1f:46:12:
de:2c:2d:3a:58:1f:ac:de:5a:b3:da:e0:00:d3:75:4f:65:b5:
91:53:6b:f4:21:5a:c2:44:29:77:6c:f7:36:7e:a8:13:58:9e:
d3:11:c9:d0:58:16:6f:9d:83:1f:39:0b:77:75:a3:1f:ea:14:
84:39:97:0f:ae:87:ee:a3:8a:b4:07:d5:50:67:41:a5:9b:be:
b7:4e:02:69:c3:ef:b0:99:52:ff:6c:07:b5:48:20:47:5b:58:
a2:69:4c:ea:79:68:91:bc:a4:f5:c2:11:0f:12:88:d5:59:bc:
31:c0:d9:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfRrNpAIX8lZQ7vA0HSXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTE1NGMxYTEwYmUxZTI1YWE2ZDRmOGFlZmE0NmFkMzFm
OWI5NmUwHhcNMjYwMzAxMTMwMTE0WhcNMjYwMzAyMTMwMTE0WjAzMTEwLwYDVQQD
EyhmMmM0MThmZTRkMzdiMmI0ZDhlZTE1MjNjNzNkNTkwOThjN2ExNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ+t6F9ysTmmgJsjX1dQGnXqzlJv
y51uBsa9SN9PEiEoL28H1hRg1yoaGMFrKR8sqWtZFpeSsg8X7vM99bxXK4hQwt4u
kGcWCmjK9wcEEHW8oA8FDNabcTC1tizZdBJTOld3CDV6KVGbDsOF+tP51ZVMmYTx
MKegVjsKDY3IvoOJLD/Grd2XTBS99i25W9tK+LPgg5kKx63w9fEpEKiH0GJKBGaC
CbHka+TKN3ENB5KYA+CO52iKvzoM5xpR+7xlF1PgiN5Ks9/6hdb5eoZ+nd0DkNdV
FIlVURPsEZS3TOBWgQ6AhhKIMxcQOjIzh8eDdLul8IzNTzCWUyXha8fQzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLEGP5NN7K02O4VI8c9WQmMehSxMB8GA1UdIwQY
MBaAFF5RVMGhC+HiWqbU+K76Rq0x+bluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zYTdlZjgtNTc3MC00NDhhLWExMmMt
ZGM4ZTkwZjYyOTJjLzEvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zYTdlZjgtNTc3MC00NDhhLWExMmMtZGM4ZTkwZjYyOTJj
LzEvWGxGVXdhRUw0ZUphcHRUNHJ2cEdyVEg1dVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmp/lfY11
jA7FjdYZGzraur56ENK1dPHVRi7N0R3/fzzcPyqvDXut9aOnR7KhxvRgWBiwDATk
CtXH68IFYVv8zU4deupT7rvBnPi07ulz2JPXyd7u9XZJgEGwCtFUGwGMJjX0LGl3
dqcktn6nh18cyi4NcieOZ1DJRrfaK87Tq8WjoAenoFWyV5nkAy3AH0YS3iwtOlgf
rN5as9rgANN1T2W1kVNr9CFawkQpd2z3Nn6oE1ie0xHJ0FgWb52DHzkLd3WjH+oU
hDmXD66H7qOKtAfVUGdBpZu+t04CacPvsJlS/2wHtUggR1tYomlM6nlokbyk9cIR
DxKI1Vm8McDZYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:48 2026 by rpki-client