Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: T9MZp055QRVhvFEfGL+0eK9xrt9/hFony90juXTfqSo=
Subject key identifier: 3E:E5:05:6A:A4:1E:2F:DD:05:D1:D2:61:50:72:42:B8:8D:00:AE:B1
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 019D9AABB2C01E17DEAC4FA3FF031B5906D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: xcw+tfMC2zFgTA8wKU2Xl1/o7SH38/n/z/fgc1lG120=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b2:c0:1e:17:de:ac:4f:a3:ff:03:1b:59:06:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=3ee5056aa41e2fdd05d1d261507242b88d00aeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:92:14:48:15:55:fe:cb:dd:1e:a3:b7:45:
07:05:af:90:18:f0:ab:06:d7:75:e0:b6:31:83:b6:
8b:b6:e4:e2:75:72:ed:f1:d0:86:23:09:59:71:f0:
e0:e4:c7:2a:97:a2:5e:0f:b0:e6:8b:3b:2e:d6:03:
4e:e9:9d:e7:e9:1f:59:71:99:87:9b:ff:ef:84:84:
61:1a:58:3e:42:1b:85:0e:2d:48:8f:0b:7c:40:9d:
83:13:e2:fe:ba:f4:65:05:a4:d1:14:73:9f:da:2b:
f1:e9:0d:66:3c:83:c8:37:25:30:f1:86:07:10:80:
62:ea:14:11:af:ac:a6:c9:55:00:c2:9a:fa:04:b3:
65:ed:8e:53:b0:1b:af:f7:4c:b6:fc:0b:df:a2:5e:
16:71:7d:92:25:13:a2:67:41:d5:09:ba:25:4d:a7:
06:f0:ec:ef:8f:f6:bd:bf:99:6f:cf:30:5a:d5:13:
07:9e:bb:51:56:40:79:27:9e:a9:37:61:c5:8c:13:
1b:b3:d8:0f:f4:58:8e:4d:7f:48:f4:b0:76:e4:af:
38:82:12:17:23:b9:a4:87:8d:e5:29:13:0d:72:cb:
28:41:82:37:16:96:08:d4:98:c3:1b:ce:c1:b6:33:
37:d6:58:b8:1a:0a:2b:0f:4c:e5:e5:02:75:6e:4f:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E5:05:6A:A4:1E:2F:DD:05:D1:D2:61:50:72:42:B8:8D:00:AE:B1
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:25:e7:cd:4f:0d:94:50:03:da:56:e0:43:b2:3c:b2:1e:
d8:3d:82:1f:4e:66:63:a9:1d:f8:c6:46:91:2b:26:09:3d:c6:
7c:c6:85:2f:16:f1:e5:12:60:76:1c:09:9d:72:43:3a:91:fa:
01:1c:77:20:89:14:8d:41:c6:93:d1:84:62:08:41:10:d9:4a:
66:6f:5b:35:64:88:4b:7a:b2:41:a8:72:9d:94:27:91:60:ae:
ce:c5:17:18:02:3e:fb:a3:53:15:4e:e0:92:0a:f7:c7:e5:c4:
23:3f:9b:23:f9:50:56:dc:93:d6:e9:ca:e4:57:04:1c:61:dd:
1f:98:b1:a4:10:97:a8:d1:1a:ea:2c:4c:f9:a5:e6:be:ee:95:
48:b7:81:8d:96:fe:6e:ef:4a:bc:68:3a:11:f5:d4:32:6a:11:
f7:21:aa:47:b0:b1:d5:1c:cd:bb:12:15:05:ba:09:69:db:99:
c7:14:69:05:0d:eb:9c:59:31:bb:96:e3:99:a0:10:e9:c4:7a:
43:f1:b9:20:61:b3:da:5d:2f:ea:51:f6:b8:13:c1:23:7a:25:
8a:72:9e:e2:bc:69:87:1a:0a:dd:f5:f4:65:c0:ea:5f:f4:88:
6f:68:b0:05:a0:8a:9d:b7:b1:bd:57:fd:cf:91:68:2b:59:84:
8c:7e:18:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7LAHhferE+j/wMbWQbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzM3ZmE2OWExYTBkZTk3OTZiNWFjZDllNjE2MGQ0MjI4
YjA4YTIwHhcNMjYwNDE3MDkwMDM2WhcNMjYwNDE4MDkwMDM2WjAzMTEwLwYDVQQD
EygzZWU1MDU2YWE0MWUyZmRkMDVkMWQyNjE1MDcyNDJiODhkMDBhZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy6SFEgVVf7L3R6jt0UHBa+QGPCr
Btd14LYxg7aLtuTidXLt8dCGIwlZcfDg5Mcql6JeD7Dmizsu1gNO6Z3n6R9ZcZmH
m//vhIRhGlg+QhuFDi1Ijwt8QJ2DE+L+uvRlBaTRFHOf2ivx6Q1mPIPINyUw8YYH
EIBi6hQRr6ymyVUAwpr6BLNl7Y5TsBuv90y2/Avfol4WcX2SJROiZ0HVCbolTacG
8Ozvj/a9v5lvzzBa1RMHnrtRVkB5J56pN2HFjBMbs9gP9FiOTX9I9LB25K84ghIX
I7mkh43lKRMNcssoQYI3FpYI1JjDG87BtjM31li4GgorD0zl5QJ1bk/+NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7lBWqkHi/dBdHSYVByQriNAK6xMB8GA1UdIwQY
MBaAFF3Df6aaGg3peWtazZ5hYNQiiwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUt
NTk5MTNhZjBhZTRmLzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUtNTk5MTNhZjBhZTRm
LzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoUl581P
DZRQA9pW4EOyPLIe2D2CH05mY6kd+MZGkSsmCT3GfMaFLxbx5RJgdhwJnXJDOpH6
ARx3IIkUjUHGk9GEYghBENlKZm9bNWSIS3qyQahynZQnkWCuzsUXGAI++6NTFU7g
kgr3x+XEIz+bI/lQVtyT1unK5FcEHGHdH5ixpBCXqNEa6ixM+aXmvu6VSLeBjZb+
bu9KvGg6EfXUMmoR9yGqR7Cx1RzNuxIVBboJaduZxxRpBQ3rnFkxu5bjmaAQ6cR6
Q/G5IGGz2l0v6lH2uBPBI3olinKe4rxphxoK3fX0ZcDqX/SIb2iwBaCKnbexvVf9
z5FoK1mEjH4YrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:42 2026 by rpki-client