Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: 8PE7ksXQm1jdQl8FdXXKJqaoJmKpjxz9UwX2AR0jQqk=
Subject key identifier: 16:E2:B8:4B:4E:7A:4D:00:38:8D:7F:1D:2A:06:2B:87:4C:35:09:09
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 019D9999347A495005B2172316FB68ADAE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 0C32
Signing time: Fri 17 Apr 2026 04:00:47 +0000
Manifest this update: Fri 17 Apr 2026 04:00:47 +0000
Manifest next update: Sat 18 Apr 2026 04:00:47 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: g9yKBsZn+tnluvKxwSCVw4PNi9aD/OWQ7PFGU5dEZF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:34:7a:49:50:05:b2:17:23:16:fb:68:ad:ae:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Apr 17 04:00:47 2026 GMT
Not After : Apr 18 04:00:47 2026 GMT
Subject: CN=16e2b84b4e7a4d00388d7f1d2a062b874c350909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:9b:0b:13:a8:ee:f4:03:6c:82:66:18:34:
43:09:07:d8:0a:60:a0:68:47:c5:e2:61:50:a6:ee:
09:4e:50:5f:2f:d0:15:9a:ab:2e:01:fd:8e:be:94:
0e:d6:15:37:e6:92:1f:f0:24:54:52:47:bf:f6:e8:
d8:d4:e2:55:a4:42:0a:7a:5c:6c:4c:0a:42:d6:84:
31:e5:6a:6c:7f:17:77:5c:06:4e:ed:1e:8f:a5:13:
af:1d:d7:8f:8b:11:c1:72:52:74:af:d9:9c:15:40:
41:a1:20:b4:23:09:b6:8a:36:7a:d7:b3:88:5c:ff:
0a:be:72:69:2b:13:9f:63:7c:33:e6:92:7b:7e:d8:
04:dd:c9:6f:e1:a9:39:74:a6:a5:b7:fe:1f:bf:12:
60:a9:42:d4:3d:7a:96:0c:35:16:8c:3f:6d:8e:31:
24:dc:9d:46:fe:86:c4:f9:17:5a:7a:de:22:3c:c6:
ee:fa:a1:20:d6:17:a4:87:b7:e3:b6:a7:e6:2f:11:
be:3a:2e:bd:ee:27:63:32:95:64:34:30:f3:07:ce:
51:f1:ab:7c:59:b1:5a:43:b3:34:f5:5c:3a:32:7f:
35:50:8f:a6:ef:1c:dd:bd:17:cd:c4:3a:d9:24:48:
7e:33:95:c4:91:4a:b9:10:0f:25:ff:7d:fe:c1:20:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:B8:4B:4E:7A:4D:00:38:8D:7F:1D:2A:06:2B:87:4C:35:09:09
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f3:0d:3f:2b:b8:86:a5:50:19:86:b6:21:d7:d9:e6:2d:c4:
bc:e9:3d:59:23:11:bd:2a:27:ea:0c:cb:25:29:d3:fd:ec:80:
e4:d8:61:81:2b:43:4d:29:6a:9c:ba:73:6e:ab:7e:a9:bb:71:
92:7c:75:84:1a:d9:14:8e:c3:bd:ac:3a:02:5c:0c:c0:81:2a:
3e:9b:0a:79:b2:19:20:7e:df:55:fe:de:6f:5e:59:1c:06:c5:
6c:58:76:8d:84:90:90:ae:85:a2:e6:64:13:e5:f9:c5:cc:cf:
9d:9b:c4:5c:ca:02:79:7f:53:ad:09:e6:79:88:2d:24:36:73:
e7:63:64:30:51:be:10:28:49:81:9b:24:b6:ec:04:ad:1a:cb:
7d:4c:b1:20:8d:19:cb:de:c3:d0:b5:6c:37:5c:46:71:fd:46:
58:b9:42:9e:c1:db:e0:36:38:3f:fc:a5:69:ae:17:81:63:86:
39:22:41:7b:a1:72:75:c8:c0:78:8f:19:23:a3:5a:1f:4d:00:
ef:2c:0a:a7:e4:0f:10:72:95:05:3f:2c:30:48:df:88:87:3e:
ce:eb:52:c8:0a:86:0a:7d:11:eb:9d:ce:83:86:fa:7d:c3:77:
42:c7:61:a6:c8:be:a9:32:ca:f7:ca:cc:0a:e0:ee:3f:39:05:
0e:53:a7:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmTR6SVAFshcjFvtora5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Y2VkN2EyNWIxMDkwZjBkM2YzZWI5N2M4MTRhYjJmZjdk
YmZjMzYwHhcNMjYwNDE3MDQwMDQ3WhcNMjYwNDE4MDQwMDQ3WjAzMTEwLwYDVQQD
EygxNmUyYjg0YjRlN2E0ZDAwMzg4ZDdmMWQyYTA2MmI4NzRjMzUwOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreWbCxOo7vQDbIJmGDRDCQfYCmCg
aEfF4mFQpu4JTlBfL9AVmqsuAf2OvpQO1hU35pIf8CRUUke/9ujY1OJVpEIKelxs
TApC1oQx5Wpsfxd3XAZO7R6PpROvHdePixHBclJ0r9mcFUBBoSC0Iwm2ijZ617OI
XP8KvnJpKxOfY3wz5pJ7ftgE3clv4ak5dKalt/4fvxJgqULUPXqWDDUWjD9tjjEk
3J1G/obE+Rdaet4iPMbu+qEg1hekh7fjtqfmLxG+Oi697idjMpVkNDDzB85R8at8
WbFaQ7M09Vw6Mn81UI+m7xzdvRfNxDrZJEh+M5XEkUq5EA8l/33+wSB4uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbiuEtOek0AOI1/HSoGK4dMNQkJMB8GA1UdIwQY
MBaAFMfO16JbEJDw0/Prl8gUqy/32/w2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYTkzYTEtMTIyOS00MDVjLWJhNDkt
OGEyYjc4MDIwZmVlLzEveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wYTkzYTEtMTIyOS00MDVjLWJhNDktOGEyYjc4MDIwZmVl
LzEveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvMNPyu4
hqVQGYa2IdfZ5i3EvOk9WSMRvSon6gzLJSnT/eyA5NhhgStDTSlqnLpzbqt+qbtx
knx1hBrZFI7Dvaw6AlwMwIEqPpsKebIZIH7fVf7eb15ZHAbFbFh2jYSQkK6FouZk
E+X5xczPnZvEXMoCeX9TrQnmeYgtJDZz52NkMFG+EChJgZsktuwErRrLfUyxII0Z
y97D0LVsN1xGcf1GWLlCnsHb4DY4P/ylaa4XgWOGOSJBe6FydcjAeI8ZI6NaH00A
7ywKp+QPEHKVBT8sMEjfiIc+zutSyAqGCn0R653Og4b6fcN3Qsdhpsi+qTLK98rM
CuDuPzkFDlOn2A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:51 2026 by rpki-client