Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier: sjdAob4HoseMDM4Jk/+8Sj1KAksT+kAbZxeI3gW1mfw=
Subject key identifier: 86:E7:69:48:F9:D2:CF:76:C3:4E:69:61:30:CC:B8:35:54:73:4D:7F
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial: 019D98F49B7B23A778A88F272CE285D66ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number: 0F3D
Signing time: Fri 17 Apr 2026 01:01:00 +0000
Manifest this update: Fri 17 Apr 2026 01:01:00 +0000
Manifest next update: Sat 18 Apr 2026 01:01:00 +0000
Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: 58rkbc1qGU+VujEyNRhzA/+Rh8PvFr3BUpEHIjDvoh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:9b:7b:23:a7:78:a8:8f:27:2c:e2:85:d6:6a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
Validity
Not Before: Apr 17 01:01:00 2026 GMT
Not After : Apr 18 01:01:00 2026 GMT
Subject: CN=86e76948f9d2cf76c34e696130ccb83554734d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:3b:a2:13:d5:ee:13:9b:ad:99:1e:91:31:
c8:7f:8a:fb:72:6c:31:61:e5:14:53:67:63:73:77:
ce:79:97:b2:11:98:94:71:47:57:0e:a8:f9:67:83:
8f:ce:b9:f6:ab:a6:c2:04:78:6e:6e:26:5b:54:f0:
cf:aa:65:9c:1c:a5:ca:33:c1:8e:a5:43:3e:bf:f3:
b9:14:bf:f6:bc:59:57:ea:ff:78:dd:33:23:9b:ae:
e9:47:1c:25:be:a6:a5:5a:bd:f0:2d:65:d0:ba:5b:
7c:a9:08:71:e8:09:ad:c8:d0:2e:c9:07:8c:a5:7f:
4f:e1:0a:ae:69:b6:70:d6:84:99:d5:46:6a:b9:87:
0a:35:2e:e7:fe:f0:95:54:95:7c:6a:5b:64:5f:ad:
5d:0e:a2:f1:bf:21:ce:2f:de:3a:9c:18:fb:6d:6c:
da:72:2c:77:78:e3:fb:49:91:05:13:41:b3:34:11:
7f:91:21:d1:96:7b:6e:16:f9:a6:fc:6f:bb:77:8d:
a5:2a:f5:b6:c6:92:e7:a7:37:a3:75:67:84:b7:fd:
ce:4f:de:2c:a6:57:56:63:fb:01:55:3a:3a:31:66:
9f:e1:77:bb:30:12:1b:08:4d:1e:9c:d7:7d:70:63:
a9:c6:90:83:36:3b:9f:89:9a:8c:c1:d3:25:24:9b:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:69:48:F9:D2:CF:76:C3:4E:69:61:30:CC:B8:35:54:73:4D:7F
X509v3 Authority Key Identifier:
keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:86:d6:49:21:e1:01:6f:e5:d7:9d:38:e1:44:51:72:a1:ec:
b5:15:b8:0b:8e:31:54:c4:a3:3b:db:64:ce:c3:21:44:09:0d:
70:ac:5a:f8:26:df:92:90:ac:2a:ac:13:53:5d:11:1a:7b:9e:
a9:0a:89:62:c0:99:89:0d:2a:5c:a5:50:ea:c2:a1:40:1e:07:
7e:07:b7:6b:39:c3:fc:aa:c8:26:97:94:2a:d3:55:ac:29:55:
d8:ab:61:e5:4f:46:de:d6:63:6a:15:ee:e9:23:f4:b3:1b:82:
f8:19:4b:e9:9d:c3:49:61:66:03:b7:46:d8:f8:7d:77:dc:5e:
73:1c:f9:bc:37:52:4d:a4:ce:b3:96:69:57:1a:7e:ef:c5:61:
f4:9b:8f:18:97:39:5a:eb:ca:1c:43:b6:c5:24:dc:8b:57:e2:
d3:6a:13:39:88:5b:46:50:40:6b:98:2d:65:a5:39:b1:cb:a1:
97:b8:97:00:1d:fb:ef:32:be:0d:57:eb:12:97:a0:f0:08:9b:
bb:e4:ca:d0:90:9e:97:8d:55:a4:b2:07:cc:69:31:99:29:5f:
ca:74:24:64:34:cb:42:a1:b1:8b:3f:22:c3:78:95:b1:db:cd:
f1:88:ed:20:11:af:97:63:65:45:af:03:b1:d1:df:9f:f6:53:
2d:e0:a6:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Jt7I6d4qI8nLOKF1mrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYjc5Mjc1NjU5ZGQ5NjFjNzQyYmYyMWQ4ZGNhMTg0YTQ0
MzBkODUwHhcNMjYwNDE3MDEwMTAwWhcNMjYwNDE4MDEwMTAwWjAzMTEwLwYDVQQD
Eyg4NmU3Njk0OGY5ZDJjZjc2YzM0ZTY5NjEzMGNjYjgzNTU0NzM0ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIo7ohPV7hObrZkekTHIf4r7cmwx
YeUUU2djc3fOeZeyEZiUcUdXDqj5Z4OPzrn2q6bCBHhubiZbVPDPqmWcHKXKM8GO
pUM+v/O5FL/2vFlX6v943TMjm67pRxwlvqalWr3wLWXQult8qQhx6AmtyNAuyQeM
pX9P4QquabZw1oSZ1UZquYcKNS7n/vCVVJV8altkX61dDqLxvyHOL946nBj7bWza
cix3eOP7SZEFE0GzNBF/kSHRlntuFvmm/G+7d42lKvW2xpLnpzejdWeEt/3OT94s
pldWY/sBVTo6MWaf4Xe7MBIbCE0enNd9cGOpxpCDNjufiZqMwdMlJJsyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbnaUj50s92w05pYTDMuDVUc01/MB8GA1UdIwQY
MBaAFF23knVlndlhx0K/IdjcoYSkQw2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81Mjc0MGUtNWNiMC00ODE0LWEyMWEt
YTA5NjdhNDM1YTZhLzEvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81Mjc0MGUtNWNiMC00ODE0LWEyMWEtYTA5NjdhNDM1YTZh
LzEvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4bWSSHh
AW/l15044URRcqHstRW4C44xVMSjO9tkzsMhRAkNcKxa+CbfkpCsKqwTU10RGnue
qQqJYsCZiQ0qXKVQ6sKhQB4Hfge3aznD/KrIJpeUKtNVrClV2Kth5U9G3tZjahXu
6SP0sxuC+BlL6Z3DSWFmA7dG2Ph9d9xecxz5vDdSTaTOs5ZpVxp+78Vh9JuPGJc5
WuvKHEO2xSTci1fi02oTOYhbRlBAa5gtZaU5scuhl7iXAB377zK+DVfrEpeg8Aib
u+TK0JCel41VpLIHzGkxmSlfynQkZDTLQqGxiz8iw3iVsdvN8YjtIBGvl2NlRa8D
sdHfn/ZTLeCm/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:11 2026 by rpki-client