Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: dA2sqyFQUnLBFKLNLlaDBf0KEQZhr8A/NS70wo5CBIk=
Subject key identifier: EE:86:D8:42:10:B3:E0:18:55:56:41:EA:05:D0:CC:15:91:0B:55:47
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 019CA9EB03A5D408A71941B3A627B3DAF1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 0BA4
Signing time: Sun 01 Mar 2026 15:01:17 +0000
Manifest this update: Sun 01 Mar 2026 15:01:17 +0000
Manifest next update: Mon 02 Mar 2026 15:01:17 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: qnTEshOHD64z1aijF+VT5Qo8yoFVTA7WB0vhH6bTEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:03:a5:d4:08:a7:19:41:b3:a6:27:b3:da:f1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Mar 1 15:01:17 2026 GMT
Not After : Mar 2 15:01:17 2026 GMT
Subject: CN=ee86d84210b3e018555641ea05d0cc15910b5547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:93:41:20:47:68:51:37:0f:8a:0b:2e:c2:
56:0b:c6:5c:96:1e:8b:62:70:47:d9:53:19:86:b1:
40:8a:2a:79:63:db:44:c8:31:d1:4e:91:c1:52:17:
6f:e2:2d:57:32:41:94:2d:58:ce:66:bc:0a:c4:01:
b2:59:bd:ce:ae:6c:ee:ea:b2:45:65:da:b6:9e:1e:
c6:3c:7c:e3:b6:b3:07:50:95:13:e7:66:ea:0e:c1:
02:1a:d9:b0:a4:24:b3:c7:10:8e:5d:de:7b:7c:41:
26:14:0a:70:ef:8f:da:f7:53:2f:4e:d6:e4:e9:21:
4a:64:25:6a:fa:68:e1:d4:c2:11:71:71:11:5e:9d:
68:b7:ab:ee:0f:d6:94:8a:62:03:4a:b4:8b:7d:27:
e2:f4:2b:52:63:29:ef:fe:90:6a:cf:32:a6:ec:a4:
a3:23:3f:40:5e:51:b8:9d:ff:cc:9a:1a:2d:cb:e6:
58:33:38:e8:b1:d6:e6:bc:cf:37:5f:ce:f9:22:e1:
f3:e3:61:ef:a3:6e:96:6b:63:c3:73:53:75:41:6c:
35:51:6e:83:e5:13:7b:a1:dd:0e:63:56:b5:ed:02:
e3:e7:4f:5b:4f:a2:f3:35:21:e5:89:46:53:23:de:
94:43:f1:f9:80:b1:87:8f:ef:18:d9:bd:58:a9:2a:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:D8:42:10:B3:E0:18:55:56:41:EA:05:D0:CC:15:91:0B:55:47
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6d:36:16:f3:5d:12:31:21:3a:48:7a:2e:27:8e:30:04:2d:
92:21:d0:4d:86:91:b4:e2:34:07:dc:b5:53:a2:41:ad:c0:b1:
82:59:af:17:07:73:9b:90:71:2d:cf:3c:72:5c:d0:bd:30:0b:
e6:65:37:b0:9d:ac:10:2c:82:be:a7:64:13:1e:56:3f:03:a0:
2e:e8:69:13:46:44:a7:f9:e6:e5:3c:d0:d3:c8:43:79:13:f9:
26:bb:ec:f0:3c:07:fc:58:71:0c:cb:35:f8:59:63:34:bf:f4:
77:0d:e5:dc:b6:74:aa:25:ef:68:be:a1:a3:06:a4:a5:a4:69:
98:84:4b:0c:e0:d4:7a:cf:7f:a7:60:2a:a4:ae:21:c0:b7:b3:
2a:f7:fe:d4:82:d9:6b:ae:61:fe:9b:70:66:1c:bb:1c:82:c7:
6c:a6:25:08:a3:53:1d:21:fa:1a:44:29:fd:43:37:6a:6a:ac:
f2:69:84:da:d7:f9:37:48:e1:a9:53:4d:a7:e3:7a:82:e2:ad:
87:1d:e7:93:db:02:bf:da:1e:b1:cc:e2:28:d0:b8:58:13:c0:
3b:0d:57:1a:87:24:bc:a0:61:d2:c5:6f:aa:cf:5e:c1:ed:ed:
3d:4f:15:97:59:e3:e0:cc:2e:f8:52:e0:00:4c:b5:82:96:dc:
d0:5b:15:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6wOl1AinGUGzpiez2vGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZGZiZWRlYWMwNmIwMWM1YTNmNzg0Y2VhMDQ2ZTVhMmM5
NWNhNWUwHhcNMjYwMzAxMTUwMTE3WhcNMjYwMzAyMTUwMTE3WjAzMTEwLwYDVQQD
EyhlZTg2ZDg0MjEwYjNlMDE4NTU1NjQxZWEwNWQwY2MxNTkxMGI1NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxOTQSBHaFE3D4oLLsJWC8Zclh6L
YnBH2VMZhrFAiip5Y9tEyDHRTpHBUhdv4i1XMkGULVjOZrwKxAGyWb3Ormzu6rJF
Zdq2nh7GPHzjtrMHUJUT52bqDsECGtmwpCSzxxCOXd57fEEmFApw74/a91MvTtbk
6SFKZCVq+mjh1MIRcXERXp1ot6vuD9aUimIDSrSLfSfi9CtSYynv/pBqzzKm7KSj
Iz9AXlG4nf/Mmhoty+ZYMzjosdbmvM83X875IuHz42Hvo26Wa2PDc1N1QWw1UW6D
5RN7od0OY1a17QLj509bT6LzNSHliUZTI96UQ/H5gLGHj+8Y2b1YqSoILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6G2EIQs+AYVVZB6gXQzBWRC1VHMB8GA1UdIwQY
MBaAFF7fvt6sBrAcWj94TOoEbloslcpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yODM0M2MtYTRlNC00ZGIwLTkyYmUt
YjU4NjE3ZTE4ODhiLzEvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yODM0M2MtYTRlNC00ZGIwLTkyYmUtYjU4NjE3ZTE4ODhi
LzEvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXG02FvNd
EjEhOkh6LieOMAQtkiHQTYaRtOI0B9y1U6JBrcCxglmvFwdzm5BxLc88clzQvTAL
5mU3sJ2sECyCvqdkEx5WPwOgLuhpE0ZEp/nm5TzQ08hDeRP5Jrvs8DwH/FhxDMs1
+FljNL/0dw3l3LZ0qiXvaL6howakpaRpmIRLDODUes9/p2AqpK4hwLezKvf+1ILZ
a65h/ptwZhy7HILHbKYlCKNTHSH6GkQp/UM3amqs8mmE2tf5N0jhqVNNp+N6guKt
hx3nk9sCv9oescziKNC4WBPAOw1XGockvKBh0sVvqs9ewe3tPU8Vl1nj4Mwu+FLg
AEy1gpbc0FsVkw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:31 2026 by rpki-client