Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: KZo32/eMJ12UVMDtxH/Q8X9Jl8kzft1GaVzxX7b/GxI=
Subject key identifier: 87:71:55:F8:E9:89:2E:5A:54:F5:26:AD:BA:B7:79:CD:E5:4C:75:E4
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 019DA3E6357289213B0C2AD907549134718E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 17B6
Signing time: Sun 19 Apr 2026 04:01:06 +0000
Manifest this update: Sun 19 Apr 2026 04:01:06 +0000
Manifest next update: Mon 20 Apr 2026 04:01:06 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: WUQNUaxlgTKESMF5IYZnb1DAa1PRpuutI1uefs968sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:35:72:89:21:3b:0c:2a:d9:07:54:91:34:71:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Apr 19 04:01:06 2026 GMT
Not After : Apr 20 04:01:06 2026 GMT
Subject: CN=877155f8e9892e5a54f526adbab779cde54c75e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:21:ce:c4:9c:f7:84:75:88:36:1a:87:0b:
26:18:df:a4:52:f7:89:2f:0b:a8:36:f7:d2:34:9d:
87:99:14:59:bf:95:30:3a:17:ea:9b:16:90:18:69:
8e:93:68:23:ad:37:3e:c0:db:64:9e:e5:fa:33:52:
9d:48:81:68:04:2c:e2:bb:48:89:6c:d8:94:fe:d9:
58:f1:c7:e3:fd:78:38:19:8e:06:5b:70:44:fd:75:
db:c3:eb:a5:71:e4:d8:90:86:8b:c5:90:27:9a:7d:
70:88:9f:7f:9c:cd:5a:83:88:4c:25:94:5a:8d:fe:
6f:86:38:5f:01:94:a9:b3:15:57:3a:c4:23:6e:da:
00:0c:97:29:ec:65:7f:8d:df:6f:85:38:76:7c:53:
28:6a:e4:cd:c8:2e:48:41:44:28:ff:d1:fd:7f:94:
e6:7f:bc:9a:16:26:52:23:a8:59:2c:31:41:f6:d0:
e4:77:a0:ce:d4:2d:da:cd:9e:ca:0b:d3:e0:e7:28:
f6:47:fe:09:ba:b4:06:b1:2c:6a:06:72:50:b3:2b:
c0:96:0a:28:2a:78:dc:4b:74:f7:2a:12:65:7a:21:
fd:f9:e8:18:7c:e8:6a:fd:43:7f:2f:dd:b7:3d:d7:
38:1a:56:b4:ed:53:cc:22:0f:99:08:b1:81:92:4b:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:55:F8:E9:89:2E:5A:54:F5:26:AD:BA:B7:79:CD:E5:4C:75:E4
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:8d:3c:7a:7d:62:1c:0e:b9:4f:5e:e2:40:a6:b0:f2:dd:
9b:38:3e:e5:46:8a:69:b6:85:2d:09:a1:cd:5a:8f:09:44:74:
0d:59:0b:d7:ca:6a:85:8a:2c:3b:69:4f:63:d7:c6:b8:ba:a9:
88:d9:62:5d:3d:2c:ec:70:82:5c:f2:9f:02:48:f4:39:09:95:
27:87:d2:3c:bc:84:b7:ac:93:c0:99:a6:a5:92:d6:a1:19:97:
3c:1e:11:68:60:fc:f0:70:a9:fc:62:bf:91:cf:f5:17:4d:e3:
44:88:ba:d4:79:07:ab:d1:09:b2:5e:c6:12:b7:dc:65:a3:3b:
b6:67:6d:e4:67:f7:0b:3a:f6:f9:aa:d6:f5:26:6a:53:dd:e4:
d7:47:9e:09:1d:dd:6d:e8:66:84:0f:2b:21:c9:b6:83:15:3f:
74:0c:38:96:8f:8e:bd:4e:df:4e:1e:d8:95:95:f8:4c:ec:c8:
b3:7a:95:a6:5a:e4:28:41:96:e4:2e:2a:b0:c2:ad:85:1d:f9:
f2:88:43:71:a9:b8:f7:47:75:29:24:82:d1:29:af:f2:ed:0e:
dc:fe:02:e3:0d:54:f7:ae:29:d0:29:8b:9b:c6:9e:2a:07:cc:
88:94:62:e6:17:c4:b6:5a:dc:06:52:dc:44:8e:84:45:e7:17:
be:65:d8:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5jVyiSE7DCrZB1SRNHGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTZmMjVhNDU1MWNmOGIyYzJlZjM5NTk0Njg4ZGFmMGE5
YjI1NmIwHhcNMjYwNDE5MDQwMTA2WhcNMjYwNDIwMDQwMTA2WjAzMTEwLwYDVQQD
Eyg4NzcxNTVmOGU5ODkyZTVhNTRmNTI2YWRiYWI3NzljZGU1NGM3NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE8hzsSc94R1iDYahwsmGN+kUveJ
LwuoNvfSNJ2HmRRZv5UwOhfqmxaQGGmOk2gjrTc+wNtknuX6M1KdSIFoBCziu0iJ
bNiU/tlY8cfj/Xg4GY4GW3BE/XXbw+ulceTYkIaLxZAnmn1wiJ9/nM1ag4hMJZRa
jf5vhjhfAZSpsxVXOsQjbtoADJcp7GV/jd9vhTh2fFMoauTNyC5IQUQo/9H9f5Tm
f7yaFiZSI6hZLDFB9tDkd6DO1C3azZ7KC9Pg5yj2R/4JurQGsSxqBnJQsyvAlgoo
KnjcS3T3KhJleiH9+egYfOhq/UN/L923Pdc4Gla07VPMIg+ZCLGBkkuFxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdxVfjpiS5aVPUmrbq3ec3lTHXkMB8GA1UdIwQY
MBaAFF3m8lpFUc+LLC7zlZRoja8KmyVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNzE5NjYtMzA3ZC00NDBiLWIxMzYt
NjQ4ZGNjY2VlMDE1LzEvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iNzE5NjYtMzA3ZC00NDBiLWIxMzYtNjQ4ZGNjY2VlMDE1
LzEvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc2NPHp9
YhwOuU9e4kCmsPLdmzg+5UaKabaFLQmhzVqPCUR0DVkL18pqhYosO2lPY9fGuLqp
iNliXT0s7HCCXPKfAkj0OQmVJ4fSPLyEt6yTwJmmpZLWoRmXPB4RaGD88HCp/GK/
kc/1F03jRIi61HkHq9EJsl7GErfcZaM7tmdt5Gf3Czr2+arW9SZqU93k10eeCR3d
behmhA8rIcm2gxU/dAw4lo+OvU7fTh7YlZX4TOzIs3qVplrkKEGW5C4qsMKthR35
8ohDcam490d1KSSC0Smv8u0O3P4C4w1U964p0CmLm8aeKgfMiJRi5hfEtlrcBlLc
RI6ERecXvmXYSA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:14 2026 by rpki-client