Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File: kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier: TRwhaYDAzG+UXa7CLuXNuxpausuWQuPZoTDN22yvgDU=
Subject key identifier: EB:BC:58:14:54:2C:6D:84:4A:B8:C9:14:2F:EF:57:F1:4E:99:8B:1B
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer: /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial: 019CAB6BA03F60BAF59D98AF9DC592B72D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number: 0B63
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: 07MRLfFzL/I3yHyoVPSOt1wzQacAylQmUy9zN8MWeSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a0:3f:60:ba:f5:9d:98:af:9d:c5:92:b7:2d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=ebbc5814542c6d844ab8c9142fef57f14e998b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:1d:06:2e:92:b1:2e:50:da:9d:ec:e8:7f:
46:ce:ff:61:3a:f3:84:f1:3f:aa:90:40:03:29:08:
36:87:a3:27:3e:a5:5f:80:e3:29:21:4d:39:48:8c:
ad:1b:f3:f3:96:3a:4c:49:41:a6:66:f3:ad:d5:6e:
a4:8c:8f:f7:c6:3f:53:1f:61:8d:ae:ca:fe:84:03:
ce:75:85:df:72:71:82:52:cd:54:7f:4a:51:b0:54:
88:7d:b7:94:0e:41:d4:2f:ed:f2:65:eb:46:fd:95:
8a:cb:e7:8c:01:83:a8:5b:d0:5f:56:2e:f9:2b:93:
2c:61:a3:9e:33:0a:a1:af:fd:d8:a6:eb:cf:1c:a3:
f0:9f:2f:0a:9f:cc:81:f3:36:31:03:ea:22:20:70:
29:59:c0:f4:27:96:43:69:4b:0a:29:3a:86:c7:00:
0f:5a:fd:8d:00:d2:ef:44:7a:62:d4:98:6d:80:96:
3f:8b:c6:e1:db:86:99:ff:9f:9e:d9:87:98:ea:5c:
d1:04:6d:61:13:23:12:ef:dc:c5:d8:ed:59:55:7f:
1d:13:7b:32:08:e0:28:1f:7f:57:fe:43:63:68:d4:
82:c3:2f:c0:fb:67:82:9f:9b:72:8e:18:77:48:db:
43:10:0d:dc:ad:0a:9e:4d:72:3d:a3:74:02:ae:dc:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BC:58:14:54:2C:6D:84:4A:B8:C9:14:2F:EF:57:F1:4E:99:8B:1B
X509v3 Authority Key Identifier:
keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:3e:5a:e6:30:66:db:83:6e:17:18:6c:2f:8a:72:58:ac:
0c:ff:4f:7f:b9:aa:bf:92:d4:32:13:07:ba:68:59:a7:80:76:
81:9c:47:2d:82:54:f7:6e:de:36:93:d5:f7:6a:49:9f:4c:27:
4a:b6:bd:c2:a6:53:7e:e6:b5:62:24:d6:d6:67:aa:c6:65:e1:
cd:a3:6c:a2:89:ae:7c:7e:eb:c8:64:0e:3e:e0:6a:43:1d:00:
47:90:7d:c4:19:04:bd:f9:53:30:51:df:fb:aa:e2:df:7c:dd:
c9:4a:9b:56:4e:81:a8:4b:02:81:9e:0c:bf:f5:16:9e:95:8f:
ee:92:e9:b3:56:83:80:14:f4:bc:6d:6d:84:cb:c1:d0:97:cb:
a6:95:67:62:bf:6b:21:68:8d:00:6b:19:82:6b:cc:74:58:80:
74:a8:7e:6b:57:79:25:b3:7a:77:9b:4b:9a:b6:3f:8b:39:2b:
1d:57:55:50:54:12:45:15:73:24:18:c8:06:8a:69:43:06:b5:
b1:8c:37:91:35:c9:23:00:a2:31:65:d4:6f:b9:ee:39:27:a5:
92:89:6b:42:74:e9:cf:c7:c9:ec:d0:ed:44:8b:1b:5b:6c:fe:
40:7a:52:75:b2:5e:ec:43:bf:ed:10:09:cb:4e:68:d0:4b:c9:
d1:1a:03:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6A/YLr1nZivncWSty1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNzU4ODVjZjk3OGQyZWY2NjEzNzYyMTQ1MzBiOWVkNjhj
NWI0NTgwHhcNMjYwMzAxMjIwMTIzWhcNMjYwMzAyMjIwMTIzWjAzMTEwLwYDVQQD
EyhlYmJjNTgxNDU0MmM2ZDg0NGFiOGM5MTQyZmVmNTdmMTRlOTk4YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XIdBi6SsS5Q2p3s6H9Gzv9hOvOE
8T+qkEADKQg2h6MnPqVfgOMpIU05SIytG/PzljpMSUGmZvOt1W6kjI/3xj9TH2GN
rsr+hAPOdYXfcnGCUs1Uf0pRsFSIfbeUDkHUL+3yZetG/ZWKy+eMAYOoW9BfVi75
K5MsYaOeMwqhr/3YpuvPHKPwny8Kn8yB8zYxA+oiIHApWcD0J5ZDaUsKKTqGxwAP
Wv2NANLvRHpi1JhtgJY/i8bh24aZ/5+e2YeY6lzRBG1hEyMS79zF2O1ZVX8dE3sy
COAoH39X/kNjaNSCwy/A+2eCn5tyjhh3SNtDEA3crQqeTXI9o3QCrtzyswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu8WBRULG2ESrjJFC/vV/FOmYsbMB8GA1UdIwQY
MBaAFJF1iFz5eNLvZhN2IUUwue1oxbRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQt
MWI5NTgxOWNmYzljLzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQtMWI5NTgxOWNmYzlj
LzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSU+WuYw
ZtuDbhcYbC+KclisDP9Pf7mqv5LUMhMHumhZp4B2gZxHLYJU927eNpPV92pJn0wn
Sra9wqZTfua1YiTW1meqxmXhzaNsoomufH7ryGQOPuBqQx0AR5B9xBkEvflTMFHf
+6ri33zdyUqbVk6BqEsCgZ4Mv/UWnpWP7pLps1aDgBT0vG1thMvB0JfLppVnYr9r
IWiNAGsZgmvMdFiAdKh+a1d5JbN6d5tLmrY/izkrHVdVUFQSRRVzJBjIBoppQwa1
sYw3kTXJIwCiMWXUb7nuOSelkolrQnTpz8fJ7NDtRIsbW2z+QHpSdbJe7EO/7RAJ
y05o0EvJ0RoDBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:40 2026 by rpki-client