Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: ZK8KZAJig/+GU96ujz+14Nd+tkcmXaBsxyzYu/JxMw8=
Subject key identifier: 8A:3D:A1:75:98:7C:BC:56:4D:B5:FD:32:06:C6:B2:12:C9:5B:44:72
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 019D992BA54B999C6687481F2112157D8E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 0890
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: fwqmCS/xPKoRDsZM7Yjg/8vdEzXUiRk5TM0esksA3GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a5:4b:99:9c:66:87:48:1f:21:12:15:7d:8e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=8a3da175987cbc564db5fd3206c6b212c95b4472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:69:ee:5b:37:92:85:1b:39:f6:69:7d:83:
70:f8:7d:14:71:b6:5a:8d:83:bb:76:c8:d4:80:0d:
22:08:f3:08:27:af:31:2b:d0:cf:dd:13:8c:22:85:
b2:d2:59:de:50:d1:2d:41:8e:9c:6f:24:be:d6:95:
df:db:16:ff:6b:cc:bc:a3:ba:7d:35:17:12:2b:1f:
83:6e:7a:36:5f:31:48:6c:16:80:ab:89:56:ca:51:
84:a7:66:2e:28:68:d1:34:69:e1:59:b4:08:28:73:
fb:9f:6c:4b:f1:3c:d2:e9:d5:ce:03:8d:bd:ea:47:
5e:c4:1b:5f:42:d7:45:39:9e:d0:08:ed:67:c3:cd:
b6:bc:ad:6d:0e:db:0d:3b:f3:a2:0a:ab:85:0f:1a:
1f:f5:2d:90:f1:4e:0c:88:7f:e0:5a:02:ce:df:ab:
fc:e8:53:0a:f2:a2:00:76:1c:ec:36:0b:fa:88:52:
d7:3f:7c:8d:57:bd:ea:bd:a8:49:d7:a4:7f:77:e6:
49:cf:f6:ef:ce:ec:e5:5a:01:08:30:e0:5a:d4:05:
e8:dc:11:89:06:ba:d5:80:57:fd:b1:d2:29:ea:e0:
59:b3:1b:b4:4a:cd:82:73:ae:fb:c2:0f:1d:3e:20:
c4:d9:90:18:7a:a1:cc:19:bb:c6:5c:97:05:1a:18:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3D:A1:75:98:7C:BC:56:4D:B5:FD:32:06:C6:B2:12:C9:5B:44:72
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e7:3c:31:38:07:85:a6:11:66:19:2b:ee:da:bc:6d:71:f8:
bc:f9:32:03:93:86:41:17:ce:5f:4d:4f:0b:04:c4:7f:e3:81:
88:f1:f8:5d:d8:9b:f8:0d:64:65:87:36:f7:b8:32:08:52:27:
33:0f:e9:bd:9a:35:7c:39:90:9c:34:a1:0d:d2:3d:66:67:59:
37:56:d7:71:09:ac:88:a6:61:07:b5:02:48:dd:4e:29:b5:e9:
fa:b9:dc:15:03:bd:ea:a2:96:99:06:4b:17:62:9c:93:d0:9d:
f8:5f:05:f9:44:4e:9b:31:11:d2:91:e3:49:b1:1f:b2:d4:17:
6d:c8:a5:62:92:1e:07:36:d3:87:a8:90:1d:19:b0:71:f8:61:
27:84:0f:c7:68:c1:72:69:ec:4d:d9:75:a3:7e:e7:54:74:0b:
94:99:82:c2:2c:a2:5e:34:94:2c:4d:9e:5b:16:e1:e2:f8:a4:
0b:30:3d:79:3a:28:c6:45:cb:6e:8e:70:19:6c:0b:84:93:20:
1e:b0:08:87:68:f7:2f:ea:69:7e:97:a7:f9:ef:95:2e:bb:43:
f4:2f:f9:eb:14:b8:29:d4:e9:b7:aa:ec:91:cd:ed:6c:b0:e1:
00:f4:4a:07:64:f6:63:4c:9f:51:93:4e:59:dd:18:b5:cf:41:
d0:55:31:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK6VLmZxmh0gfIRIVfY4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGVjOTU5ZmRlYThmZGM4OTg1MmQ0MmQ1MDYyMmQ4MmQ2
Y2ExMmMwHhcNMjYwNDE3MDIwMTA3WhcNMjYwNDE4MDIwMTA3WjAzMTEwLwYDVQQD
Eyg4YTNkYTE3NTk4N2NiYzU2NGRiNWZkMzIwNmM2YjIxMmM5NWI0NDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLpp7ls3koUbOfZpfYNw+H0UcbZa
jYO7dsjUgA0iCPMIJ68xK9DP3ROMIoWy0lneUNEtQY6cbyS+1pXf2xb/a8y8o7p9
NRcSKx+Dbno2XzFIbBaAq4lWylGEp2YuKGjRNGnhWbQIKHP7n2xL8TzS6dXOA429
6kdexBtfQtdFOZ7QCO1nw822vK1tDtsNO/OiCquFDxof9S2Q8U4MiH/gWgLO36v8
6FMK8qIAdhzsNgv6iFLXP3yNV73qvahJ16R/d+ZJz/bvzuzlWgEIMOBa1AXo3BGJ
BrrVgFf9sdIp6uBZsxu0Ss2Cc677wg8dPiDE2ZAYeqHMGbvGXJcFGhhPcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo9oXWYfLxWTbX9MgbGshLJW0RyMB8GA1UdIwQY
MBaAFMSOyVn96o/ciYUtQtUGItgtbKEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTk0MjctMTNlMC00ZDY0LThjMGMt
NDMzM2FkNGUyMTNhLzEveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NTk0MjctMTNlMC00ZDY0LThjMGMtNDMzM2FkNGUyMTNh
LzEveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOc8MTgH
haYRZhkr7tq8bXH4vPkyA5OGQRfOX01PCwTEf+OBiPH4Xdib+A1kZYc297gyCFIn
Mw/pvZo1fDmQnDShDdI9ZmdZN1bXcQmsiKZhB7UCSN1OKbXp+rncFQO96qKWmQZL
F2Kck9Cd+F8F+UROmzER0pHjSbEfstQXbcilYpIeBzbTh6iQHRmwcfhhJ4QPx2jB
cmnsTdl1o37nVHQLlJmCwiyiXjSULE2eWxbh4vikCzA9eTooxkXLbo5wGWwLhJMg
HrAIh2j3L+ppfpen+e+VLrtD9C/56xS4KdTpt6rskc3tbLDhAPRKB2T2Y0yfUZNO
Wd0Ytc9B0FUxog==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:48 2026 by rpki-client