Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: /2vBwt2X2sBxujKYszeLE6ntQJtf1EI9gfdfVqnpGTs=
Subject key identifier: 89:47:9C:C1:99:F3:9D:9D:81:F6:FB:64:02:6A:BE:63:24:F1:A0:D2
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 019D98509ED8FD7DEF2AF48B278D4312639D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 22:01:53 +0000
Manifest this update: Thu 16 Apr 2026 22:01:53 +0000
Manifest next update: Fri 17 Apr 2026 22:01:53 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: Zs+cCdc2yRzch0USJ9VMzQajHqXgsv7B1430lkhdsNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:9e:d8:fd:7d:ef:2a:f4:8b:27:8d:43:12:63:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: Apr 16 22:01:53 2026 GMT
Not After : Apr 17 22:01:53 2026 GMT
Subject: CN=89479cc199f39d9d81f6fb64026abe6324f1a0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:65:64:c6:59:31:b9:1a:7b:f9:c2:a3:db:
ca:b0:a1:4c:3f:84:c5:6c:bc:5c:b1:6c:87:59:a3:
14:8a:2d:f8:d0:20:46:61:b7:ee:ca:6d:9b:29:44:
ff:9d:78:f2:79:81:06:c7:b6:60:31:27:af:83:30:
e3:b6:79:56:76:e3:50:b5:26:5a:c3:c0:30:af:42:
56:dd:c4:c3:c4:f2:3b:07:b7:ed:01:23:e0:d8:17:
a7:64:da:28:9f:97:e8:c4:ad:ce:a8:d8:db:0b:fd:
0f:09:e9:6e:84:23:18:47:37:d1:41:da:cf:96:b2:
8d:d7:ad:f0:41:32:22:b7:7c:bd:4a:d9:86:24:b7:
67:ae:86:a4:68:96:7c:fb:da:ca:56:58:1e:9f:bb:
08:ed:6c:7a:40:7b:cc:f7:de:0e:05:5d:bf:c1:f0:
da:54:bf:d3:a6:48:07:a1:b8:12:79:ec:58:04:2b:
8d:de:a2:85:63:22:dd:09:70:7e:0d:5a:96:82:8b:
d8:d5:e8:94:e4:fb:a7:38:7a:04:80:ab:d1:f4:30:
af:1f:c0:2e:e4:3a:28:d2:82:a6:0d:3d:38:95:67:
ad:ef:02:f8:7d:99:9a:52:5c:4d:c8:a1:ca:31:0e:
a8:08:97:0f:6f:e9:64:5b:50:94:b4:3e:36:73:83:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:47:9C:C1:99:F3:9D:9D:81:F6:FB:64:02:6A:BE:63:24:F1:A0:D2
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2d:f6:ba:51:5b:b5:15:74:db:ef:df:85:67:d2:53:79:cf:
61:ad:70:fb:ef:fd:5b:2e:8e:8d:bf:d4:ec:fc:93:75:9e:23:
87:17:7c:31:18:73:06:52:12:b5:6f:00:c1:a1:0f:fa:dd:04:
8e:c8:db:34:e2:e9:e6:b4:ae:c5:a4:c1:60:40:c4:50:16:4b:
34:eb:a8:37:40:4c:e9:84:36:87:20:03:94:79:7b:69:d7:87:
83:86:6d:26:8d:8c:06:33:04:b4:9c:bc:d8:b7:83:99:f0:eb:
7b:bd:25:f8:d1:b6:e0:be:c9:23:35:12:65:e5:3d:32:67:c1:
97:53:94:43:ce:00:39:b8:cd:ee:60:76:6a:5f:ae:8c:3e:ed:
4f:af:2c:09:57:99:01:36:35:4d:c4:85:a8:ce:eb:53:cc:99:
e9:0a:3f:77:32:27:68:8e:e8:10:2e:2c:e7:67:c1:c0:9e:c5:
3d:d6:03:40:8e:88:32:44:d2:36:8f:39:9c:97:ce:12:ad:ca:
78:93:a0:e2:a0:78:b4:e5:e7:21:d9:23:05:a0:ce:2e:d9:5a:
a2:e1:a8:89:17:ea:f7:52:8a:5b:80:55:a5:4f:eb:29:86:db:
e5:38:86:72:80:49:44:e8:ac:0b:bc:33:bd:e3:9e:a5:e5:b0:
51:83:4b:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUJ7Y/X3vKvSLJ41DEmOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYTg1ZjFkZDRkMDM0NjQ4MGYwMDk4NzRhOGY1NjcwZTMx
MDg1YzIwHhcNMjYwNDE2MjIwMTUzWhcNMjYwNDE3MjIwMTUzWjAzMTEwLwYDVQQD
Eyg4OTQ3OWNjMTk5ZjM5ZDlkODFmNmZiNjQwMjZhYmU2MzI0ZjFhMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLZlZMZZMbkae/nCo9vKsKFMP4TF
bLxcsWyHWaMUii340CBGYbfuym2bKUT/nXjyeYEGx7ZgMSevgzDjtnlWduNQtSZa
w8Awr0JW3cTDxPI7B7ftASPg2BenZNoon5foxK3OqNjbC/0PCeluhCMYRzfRQdrP
lrKN163wQTIit3y9StmGJLdnroakaJZ8+9rKVlgen7sI7Wx6QHvM994OBV2/wfDa
VL/TpkgHobgSeexYBCuN3qKFYyLdCXB+DVqWgovY1eiU5PunOHoEgKvR9DCvH8Au
5Doo0oKmDT04lWet7wL4fZmaUlxNyKHKMQ6oCJcPb+lkW1CUtD42c4N+OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlHnMGZ852dgfb7ZAJqvmMk8aDSMB8GA1UdIwQY
MBaAFF6oXx3U0DRkgPAJh0qPVnDjEIXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFoZkhkVFFOR1NBOEFtSFNvOVdjT01RaGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lZjc4MDgtMTIyYi00Yjg5LTkzNTgt
NTkwYzVmMWIwMWIzLzEvWHFoZkhkVFFOR1NBOEFtSFNvOVdjT01RaGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lZjc4MDgtMTIyYi00Yjg5LTkzNTgtNTkwYzVmMWIwMWIz
LzEvWHFoZkhkVFFOR1NBOEFtSFNvOVdjT01RaGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPi32ulFb
tRV02+/fhWfSU3nPYa1w++/9Wy6Ojb/U7PyTdZ4jhxd8MRhzBlIStW8AwaEP+t0E
jsjbNOLp5rSuxaTBYEDEUBZLNOuoN0BM6YQ2hyADlHl7adeHg4ZtJo2MBjMEtJy8
2LeDmfDre70l+NG24L7JIzUSZeU9MmfBl1OUQ84AObjN7mB2al+ujD7tT68sCVeZ
ATY1TcSFqM7rU8yZ6Qo/dzInaI7oEC4s52fBwJ7FPdYDQI6IMkTSNo85nJfOEq3K
eJOg4qB4tOXnIdkjBaDOLtlaouGoiRfq91KKW4BVpU/rKYbb5TiGcoBJROisC7wz
veOepeWwUYNLdA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:09 2026 by rpki-client