Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
File: xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft (raw, json)
Hash identifier: ovxUsYJZNYq9iYjoGiw7/TiffrYkBENm4xYVawW6Rwg=
Subject key identifier: 42:09:2C:C1:C5:0E:F0:D1:50:89:3B:65:5F:1B:CA:46:0D:67:7D:78
Authority key identifier: C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
Certificate issuer: /CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Certificate serial: 019CAAC7070606A97A406B6ECD0A28FD9A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
Manifest number: 0917
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl (hash: RY6eTJQZSFBs69dSu2OgXbpiAuwvv7lMUzhRxBwQIwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:07:06:06:a9:7a:40:6b:6e:cd:0a:28:fd:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=42092cc1c50ef0d150893b655f1bca460d677d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:81:27:c8:2f:6f:cd:6a:67:71:81:39:80:
42:7b:ba:f2:fd:f1:4b:b2:1b:20:d3:04:08:24:b4:
f5:2b:bc:d5:e8:48:86:ee:57:9e:a8:b7:14:68:b3:
b4:68:bc:b8:9b:2d:87:e0:29:ba:a8:55:13:aa:93:
ae:d4:5a:1d:db:db:be:c5:77:21:64:7c:4f:cf:43:
f1:52:bb:60:ab:d0:df:9b:16:3a:b0:c3:25:40:cd:
da:fd:94:01:28:4e:53:e7:92:f9:93:3e:e9:33:75:
99:f2:7b:b6:f3:76:f9:9f:91:0a:cb:f4:67:8c:87:
c7:29:a7:84:cf:2b:be:25:0a:eb:f5:59:21:64:2c:
1c:50:38:9c:85:e8:cd:56:f2:ec:a0:82:0b:ff:fb:
e2:de:b8:c3:30:a5:a9:5e:0b:ae:92:b3:35:86:14:
e9:43:87:d4:54:a6:59:72:79:27:2e:3b:49:c9:ef:
cd:79:e7:4e:b4:9f:dd:3a:5a:8f:e7:3a:c7:a6:50:
1b:60:39:c2:31:b2:e3:5c:af:6a:70:83:26:b0:b4:
42:6c:46:6b:4e:ce:d1:1a:5b:bb:f5:78:2e:4e:6e:
99:82:72:f7:31:0e:98:90:e5:8d:8a:31:53:12:fa:
d5:9d:f2:7e:fb:e3:c3:0e:62:6c:ed:66:b4:b4:dd:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:2C:C1:C5:0E:F0:D1:50:89:3B:65:5F:1B:CA:46:0D:67:7D:78
X509v3 Authority Key Identifier:
keyid:C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:2f:1b:be:2e:67:b0:f4:a9:0e:3c:a8:44:92:ee:78:e8:
ab:e3:4f:da:01:34:99:97:2c:f8:ef:8a:dc:8d:71:b7:81:ef:
63:ac:cc:3b:8d:b8:30:c7:1b:83:1a:e8:c9:45:f9:7c:16:d0:
0b:27:55:ee:67:5f:55:55:8c:8d:c4:83:81:11:17:54:02:14:
11:a7:0c:26:39:c1:a6:6f:e7:92:8f:51:42:6b:f9:d0:eb:42:
ba:96:73:b5:e7:6f:07:92:ef:ea:2a:0a:a1:d0:d8:56:3b:24:
16:bb:17:dd:07:fb:a2:40:c6:07:24:f2:e5:70:c5:2b:96:78:
10:5c:bf:03:3b:8f:82:e5:32:aa:6a:a2:9a:f4:36:c5:71:bf:
fe:fe:74:c5:fd:c8:c0:ae:30:d7:d5:da:7f:fa:85:af:9d:db:
f3:55:8a:8e:f4:b8:c3:68:33:f1:60:40:aa:15:52:ce:b2:1d:
b3:3b:c4:ed:81:a5:5e:7c:03:d5:13:82:19:d5:6d:00:b7:90:
76:84:9c:e7:cf:5b:60:95:80:e7:b3:ae:96:a7:00:e0:67:4c:
81:4a:1b:73:32:e8:22:55:fc:35:59:f3:23:79:5e:62:e4:21:
7d:4b:75:12:52:11:55:22:dc:cc:45:57:d8:d9:93:1e:87:13:
50:af:88:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxwcGBql6QGtuzQoo/ZpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzAwYzU1M2E1NGRhMDViOTM2MzVhNjU0Y2FkYTAzYzZk
OWRmMmIwHhcNMjYwMzAxMTkwMTM1WhcNMjYwMzAyMTkwMTM1WjAzMTEwLwYDVQQD
Eyg0MjA5MmNjMWM1MGVmMGQxNTA4OTNiNjU1ZjFiY2E0NjBkNjc3ZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfWBJ8gvb81qZ3GBOYBCe7ry/fFL
shsg0wQIJLT1K7zV6EiG7leeqLcUaLO0aLy4my2H4Cm6qFUTqpOu1Fod29u+xXch
ZHxPz0PxUrtgq9DfmxY6sMMlQM3a/ZQBKE5T55L5kz7pM3WZ8nu283b5n5EKy/Rn
jIfHKaeEzyu+JQrr9VkhZCwcUDichejNVvLsoIIL//vi3rjDMKWpXguukrM1hhTp
Q4fUVKZZcnknLjtJye/NeedOtJ/dOlqP5zrHplAbYDnCMbLjXK9qcIMmsLRCbEZr
Ts7RGlu79XguTm6ZgnL3MQ6YkOWNijFTEvrVnfJ+++PDDmJs7Wa0tN2o2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIJLMHFDvDRUIk7ZV8bykYNZ314MB8GA1UdIwQY
MBaAFMbADFU6VNoFuTY1plTK2gPG2d8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNBTVZUcFUyZ1c1TmpXbVZNcmFBOGJaM3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgt
M2ZiZGQ5ZGJiZDkyLzEveHNBTVZUcFUyZ1c1TmpXbVZNcmFBOGJaM3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82ZmRhMWQtYjk2Yi00Y2Y5LWJiNjgtM2ZiZGQ5ZGJiZDky
LzEveHNBTVZUcFUyZ1c1TmpXbVZNcmFBOGJaM3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxsvG74u
Z7D0qQ48qESS7njoq+NP2gE0mZcs+O+K3I1xt4HvY6zMO424MMcbgxroyUX5fBbQ
CydV7mdfVVWMjcSDgREXVAIUEacMJjnBpm/nko9RQmv50OtCupZztedvB5Lv6ioK
odDYVjskFrsX3Qf7okDGByTy5XDFK5Z4EFy/AzuPguUyqmqimvQ2xXG//v50xf3I
wK4w19Xaf/qFr53b81WKjvS4w2gz8WBAqhVSzrIdszvE7YGlXnwD1ROCGdVtALeQ
doSc589bYJWA57OulqcA4GdMgUobczLoIlX8NVnzI3leYuQhfUt1ElIRVSLczEVX
2NmTHocTUK+IZg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:15 2026 by rpki-client