Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: zWup8IRa3jQok8Rv/O9nhBtCN1kzPicWyKbRR4muHSA=
Subject key identifier: 8A:57:7E:F0:37:A7:F3:34:D5:38:55:A3:1F:F7:1E:05:E7:11:D4:C1
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 019CABD970878D1692AA8AA952C0102BAED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 1214
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: 8FQJMEn3qMNiOHYYl3tHurzCkVOeqX0Pfd2fSCFBZ3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:70:87:8d:16:92:aa:8a:a9:52:c0:10:2b:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=8a577ef037a7f334d53855a31ff71e05e711d4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ec:93:f0:66:d6:7c:ee:2e:99:4a:b1:c3:1c:
be:d7:f1:6d:c2:e4:ed:a0:96:f9:5a:a7:33:84:f2:
18:36:63:c4:86:2d:e2:b9:54:1a:d7:6b:3d:f1:01:
2f:c7:8c:76:07:e0:44:64:6a:b8:a4:76:2b:cb:18:
ed:df:a4:65:9d:0d:9c:f0:a3:46:a8:5a:11:77:90:
bf:76:83:4d:ad:a9:a9:0a:4c:1a:cb:5d:b9:ce:57:
fa:4e:7d:44:8e:1a:e3:fe:5d:d8:12:fb:97:3f:9e:
cc:e2:a4:48:63:64:65:26:16:2e:e7:ad:f6:3f:ea:
60:9c:6f:45:3e:da:e5:0e:3e:d8:de:ba:08:23:4b:
79:dc:4a:d2:a4:f2:5a:28:ae:86:e3:1c:66:94:31:
2d:c0:38:2e:90:78:65:de:63:b1:0a:6d:66:4d:4f:
a0:15:87:da:c8:94:ef:45:81:64:4e:14:48:97:2d:
50:3f:ea:56:52:04:59:2c:63:db:63:10:31:53:c6:
eb:2f:45:7a:57:84:a6:65:0c:dc:21:71:12:65:a9:
11:35:0c:54:29:34:b1:e5:2f:30:19:a5:62:84:16:
dd:c9:26:61:0e:a1:79:9a:07:19:6d:7e:de:a5:98:
fb:0a:d6:69:7b:5f:17:38:03:dc:12:47:ce:e5:b5:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:7E:F0:37:A7:F3:34:D5:38:55:A3:1F:F7:1E:05:E7:11:D4:C1
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2f:2d:98:73:71:10:83:8b:39:89:23:57:6f:2c:56:f4:b2:
95:84:14:9b:02:69:2e:b4:bc:65:27:59:22:c7:94:5f:37:a7:
41:3f:39:ba:bd:e7:60:d7:2d:f7:f8:35:9b:9e:69:71:b4:1e:
d5:fc:1b:60:d4:75:f7:24:a5:42:9c:61:2a:1a:fd:2f:36:2c:
37:50:d5:d9:58:74:90:8c:a3:25:fd:45:a3:cd:8e:33:b1:2f:
06:9e:86:cc:38:eb:c8:60:d9:68:17:f8:b9:66:2d:52:16:9d:
22:d1:2d:5d:8e:22:25:5e:87:ca:83:cc:34:84:8f:3e:98:ad:
bd:4b:dc:8e:cc:30:e2:26:36:90:12:1a:7c:fb:fd:44:a7:19:
38:bc:4c:39:8c:e1:11:05:13:6e:76:83:cf:41:eb:3a:97:5d:
87:e9:a2:54:27:0a:19:95:bc:3c:91:89:12:7d:0a:16:6d:4d:
59:4a:87:b4:5f:ac:e1:0c:14:2a:72:7e:e3:bf:c5:fd:97:54:
dd:7e:7c:b3:6f:cd:92:b2:6d:dd:f4:85:e2:4a:bb:e0:83:bd:
14:18:7c:89:7c:1d:fc:d4:c2:bb:32:85:cb:68:f6:7d:42:e2:
80:53:8f:ca:7e:93:94:68:02:ca:a7:be:f4:a7:ff:83:21:1b:
e0:55:4a:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XCHjRaSqoqpUsAQK67RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmJmNmU2NjAxMjZmZjQ5MDRlMDk5Y2EwYWRlZGU5ZjZj
ZWE1NzAwHhcNMjYwMzAyMDAwMTE5WhcNMjYwMzAzMDAwMTE5WjAzMTEwLwYDVQQD
Eyg4YTU3N2VmMDM3YTdmMzM0ZDUzODU1YTMxZmY3MWUwNWU3MTFkNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eyT8GbWfO4umUqxwxy+1/FtwuTt
oJb5WqczhPIYNmPEhi3iuVQa12s98QEvx4x2B+BEZGq4pHYryxjt36RlnQ2c8KNG
qFoRd5C/doNNrampCkway125zlf6Tn1Ejhrj/l3YEvuXP57M4qRIY2RlJhYu5632
P+pgnG9FPtrlDj7Y3roII0t53ErSpPJaKK6G4xxmlDEtwDgukHhl3mOxCm1mTU+g
FYfayJTvRYFkThRIly1QP+pWUgRZLGPbYxAxU8brL0V6V4SmZQzcIXESZakRNQxU
KTSx5S8wGaVihBbdySZhDqF5mgcZbX7epZj7CtZpe18XOAPcEkfO5bWFlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpXfvA3p/M01ThVox/3HgXnEdTBMB8GA1UdIwQY
MBaAFF779uZgEm/0kE4JnKCt7en2zqVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81Mjc4MmEtM2RlMy00ODI5LTgxOTkt
NDRmZGNlYzVkMjg4LzEvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81Mjc4MmEtM2RlMy00ODI5LTgxOTktNDRmZGNlYzVkMjg4
LzEvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwC8tmHNx
EIOLOYkjV28sVvSylYQUmwJpLrS8ZSdZIseUXzenQT85ur3nYNct9/g1m55pcbQe
1fwbYNR19ySlQpxhKhr9LzYsN1DV2Vh0kIyjJf1Fo82OM7EvBp6GzDjryGDZaBf4
uWYtUhadItEtXY4iJV6HyoPMNISPPpitvUvcjsww4iY2kBIafPv9RKcZOLxMOYzh
EQUTbnaDz0HrOpddh+miVCcKGZW8PJGJEn0KFm1NWUqHtF+s4QwUKnJ+47/F/ZdU
3X58s2/NkrJt3fSF4kq74IO9FBh8iXwd/NTCuzKFy2j2fULigFOPyn6TlGgCyqe+
9Kf/gyEb4FVKtA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:17 2026 by rpki-client