Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: Bdblh3RPfP8htzgSKGEzHHG3VKg/Ru7J3AWsxQOzqp0=
Subject key identifier: D2:07:48:B3:88:53:BD:12:EE:E5:A5:91:9F:97:02:17:62:AC:F0:50
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 019DA4F84745F6FA4F33E827265ED172EA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 1077
Signing time: Sun 19 Apr 2026 09:00:27 +0000
Manifest this update: Sun 19 Apr 2026 09:00:27 +0000
Manifest next update: Mon 20 Apr 2026 09:00:27 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: 2wLsGdmhJ3gKZFnT8p6bjdITJr9gmIwGX6jeb4yJpe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:47:45:f6:fa:4f:33:e8:27:26:5e:d1:72:ea:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Apr 19 09:00:27 2026 GMT
Not After : Apr 20 09:00:27 2026 GMT
Subject: CN=d20748b38853bd12eee5a5919f97021762acf050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:95:72:ad:b8:da:d6:7f:78:e0:e5:23:80:
82:8c:42:43:35:d4:79:aa:04:14:fb:28:e2:11:89:
c9:d2:90:0d:c6:50:1a:32:8e:36:eb:a9:84:e5:54:
6d:ac:32:23:94:43:01:56:a9:d2:51:ed:b5:61:27:
1f:2c:b6:f2:2c:48:b7:22:fe:58:87:0f:cc:6d:24:
c3:62:c1:da:64:b1:8e:3f:bb:7a:bf:35:5a:1e:fc:
ab:2b:3c:9f:1d:f7:86:2a:10:69:0f:94:b0:e0:00:
ea:6e:d5:6d:3b:46:a6:ba:0d:0b:18:7c:81:d2:07:
51:b9:9e:a6:97:4f:8a:11:44:cf:3b:11:4a:db:a3:
99:fc:2d:9f:46:f8:c3:54:69:f3:58:08:56:cb:2e:
d1:77:47:33:1e:cf:7e:fb:bb:47:d7:07:75:ba:ec:
91:b4:80:9d:9b:4c:89:6d:12:f1:50:43:23:b5:be:
41:53:2e:3f:84:33:e1:61:38:ba:28:d0:c4:00:9f:
ca:84:39:a7:c1:cc:e9:fb:78:a7:ab:df:7b:f3:f0:
bc:8c:e3:d2:65:af:69:ab:b2:50:e4:3a:c5:25:d5:
78:01:72:a9:b5:4a:bc:f0:c9:f3:f7:4e:9a:c7:10:
96:2c:38:1a:03:0c:03:fe:9f:96:83:41:4f:df:ab:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:48:B3:88:53:BD:12:EE:E5:A5:91:9F:97:02:17:62:AC:F0:50
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:86:3c:8f:ac:70:4b:86:54:0e:a3:73:8b:88:77:70:23:a2:
a3:37:52:dd:52:fc:e4:fa:74:95:48:66:13:2b:79:7e:c8:dc:
1a:da:3e:89:bd:2b:db:02:fc:31:53:5a:71:ad:2f:24:64:d5:
35:7c:8d:c5:61:97:cb:8c:98:a1:7f:b7:b6:ca:01:a4:84:8c:
94:78:76:61:41:00:08:8b:d6:f8:05:62:94:b8:60:3f:22:60:
83:a5:c9:c6:b8:29:af:b9:2f:4b:2e:1b:72:e4:e0:ae:3b:1a:
fc:1f:92:0d:96:ef:7a:02:c5:0b:70:80:f6:5f:33:55:b2:99:
0e:52:fc:26:2d:55:92:3e:85:f5:e5:f7:35:dd:b9:b0:45:05:
dd:43:95:b7:92:3b:a8:36:65:5c:4e:67:0b:e7:20:86:47:df:
f8:2f:a5:09:e8:f4:88:d1:b3:b7:c1:65:07:3f:2e:83:cd:61:
2c:c0:4e:59:58:2b:4b:11:de:67:11:1a:23:c0:0d:b7:62:85:
0a:11:06:ab:69:af:49:be:85:b3:b2:2b:13:d0:ad:06:61:da:
03:9a:e1:88:7c:f8:87:38:47:05:e0:90:c0:50:ab:a8:4a:47:
ba:b7:0f:a0:6e:e6:fb:17:de:37:56:f9:6a:1d:b6:ec:a0:d3:
45:d0:dc:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+EdF9vpPM+gnJl7RcupQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNzJkNjY0NTEwYTZiZmI5NmYyYTZhNWMxMjA5ODdkYzk3
NzRiZjgwHhcNMjYwNDE5MDkwMDI3WhcNMjYwNDIwMDkwMDI3WjAzMTEwLwYDVQQD
EyhkMjA3NDhiMzg4NTNiZDEyZWVlNWE1OTE5Zjk3MDIxNzYyYWNmMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusqVcq242tZ/eODlI4CCjEJDNdR5
qgQU+yjiEYnJ0pANxlAaMo4266mE5VRtrDIjlEMBVqnSUe21YScfLLbyLEi3Iv5Y
hw/MbSTDYsHaZLGOP7t6vzVaHvyrKzyfHfeGKhBpD5Sw4ADqbtVtO0amug0LGHyB
0gdRuZ6ml0+KEUTPOxFK26OZ/C2fRvjDVGnzWAhWyy7Rd0czHs9++7tH1wd1uuyR
tICdm0yJbRLxUEMjtb5BUy4/hDPhYTi6KNDEAJ/KhDmnwczp+3inq9978/C8jOPS
Za9pq7JQ5DrFJdV4AXKptUq88Mnz906axxCWLDgaAwwD/p+Wg0FP36s+eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIHSLOIU70S7uWlkZ+XAhdirPBQMB8GA1UdIwQY
MBaAFK1y1mRRCmv7lvKmpcEgmH3Jd0v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjkt
NzcwZDlhMzg5Mjk1LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjktNzcwZDlhMzg5Mjk1
LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIY8j6xw
S4ZUDqNzi4h3cCOiozdS3VL85Pp0lUhmEyt5fsjcGto+ib0r2wL8MVNaca0vJGTV
NXyNxWGXy4yYoX+3tsoBpISMlHh2YUEACIvW+AVilLhgPyJgg6XJxrgpr7kvSy4b
cuTgrjsa/B+SDZbvegLFC3CA9l8zVbKZDlL8Ji1Vkj6F9eX3Nd25sEUF3UOVt5I7
qDZlXE5nC+cghkff+C+lCej0iNGzt8FlBz8ug81hLMBOWVgrSxHeZxEaI8ANt2KF
ChEGq2mvSb6Fs7IrE9CtBmHaA5rhiHz4hzhHBeCQwFCrqEpHurcPoG7m+xfeN1b5
ah227KDTRdDceA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:27 2026 by rpki-client