Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File: kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier: sgTBrRlMDrP1yJRvPsrQt2NVtdA8teSWGJuDCodBKqI=
Subject key identifier: 40:7A:47:FF:BF:6A:29:51:C2:C9:86:B7:40:76:47:FA:90:35:0F:28
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer: /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial: 019DA48B31E67D249B3C74994DEB1224E70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number: 0BE4
Signing time: Sun 19 Apr 2026 07:01:18 +0000
Manifest this update: Sun 19 Apr 2026 07:01:18 +0000
Manifest next update: Mon 20 Apr 2026 07:01:18 +0000
Files and hashes: 1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: Dj2y0Zj7s0NCo3YoUbkF6w1Y5+JiZnNupmjf8SzBcEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:31:e6:7d:24:9b:3c:74:99:4d:eb:12:24:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
Validity
Not Before: Apr 19 07:01:18 2026 GMT
Not After : Apr 20 07:01:18 2026 GMT
Subject: CN=407a47ffbf6a2951c2c986b7407647fa90350f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:2d:47:56:25:48:39:f9:35:60:a5:79:9c:
1e:ab:5c:20:7b:99:7b:a3:a9:fa:57:bb:4d:0d:72:
78:7a:15:13:18:24:ea:b9:9c:8d:ba:17:08:4e:74:
0e:d5:cf:f1:cd:e9:93:1b:78:ec:ce:0b:76:8c:a0:
58:b2:96:21:1c:84:a3:fe:0f:19:e6:11:c2:95:5e:
84:36:15:4f:51:85:2f:ff:94:60:27:4e:83:c3:6d:
2f:49:a3:a4:e9:95:d3:af:af:4a:46:dc:8a:8a:7a:
5c:b8:a2:26:d1:13:14:ad:58:0a:66:04:e6:d7:3e:
7e:a4:86:85:6e:ac:c3:e6:4f:04:4f:94:44:f0:3c:
8e:93:12:85:d5:b7:b0:5b:3c:b0:3e:27:69:91:ac:
b6:76:fa:c0:4d:91:c4:ba:f7:9c:a1:4e:1b:9c:b8:
ca:05:dd:5b:8c:c3:04:f2:21:5e:04:cc:21:11:df:
af:19:40:05:00:9c:95:21:b0:f3:5c:ee:d6:39:d6:
5f:4e:ca:2f:11:fb:ec:6b:cc:b9:d7:4f:0c:3d:ab:
c8:dd:b6:91:ff:41:8e:5c:9e:12:dc:e2:66:9d:91:
72:70:ee:e9:86:de:ee:d2:a3:89:98:b1:91:74:4a:
2e:0d:1a:97:09:fa:df:fa:d0:46:cd:56:46:a8:1b:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:47:FF:BF:6A:29:51:C2:C9:86:B7:40:76:47:FA:90:35:0F:28
X509v3 Authority Key Identifier:
keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:58:0c:68:8a:46:ea:2c:99:05:10:b0:03:15:53:58:d1:33:
15:32:c6:39:5e:7a:a5:ad:b8:87:72:3f:4c:7a:c7:5f:b3:e0:
db:8f:f6:c5:03:a3:b7:db:62:3f:94:c8:92:a9:77:20:43:eb:
a1:48:91:29:f5:ef:b7:85:be:b3:0a:b0:b3:24:15:77:7a:c1:
e3:fe:44:9a:be:81:ba:6b:17:1e:db:bb:08:3d:e6:87:bf:b3:
81:d8:a2:8a:51:b4:4c:0b:e6:4d:29:15:58:f8:2c:5a:c1:f4:
dd:91:fa:60:35:51:a7:90:4f:3d:05:9e:29:cb:ab:9f:27:ca:
47:e8:06:cb:50:32:69:0f:23:8f:9a:63:46:e7:87:66:25:86:
a9:fe:9f:aa:c4:32:c4:ce:d8:aa:16:c7:59:7f:52:36:b2:94:
61:f4:b4:fc:fa:22:e3:e9:3a:a9:35:55:e6:59:79:c8:f2:60:
c5:91:09:82:ce:e7:58:45:a5:2e:46:11:da:2d:d4:d8:56:94:
b5:12:bf:0f:a6:1c:85:e4:d1:dd:11:de:44:d3:13:44:02:1b:
6c:3e:6e:0e:9b:f3:40:77:ed:2a:82:60:5f:bc:04:e7:1d:7a:
69:b0:3d:b0:d5:7f:40:cb:bb:3a:30:8b:12:3a:d4:a8:5b:f2:
47:fd:57:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kizHmfSSbPHSZTesSJOcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNzU4ODVjZjk3OGQyZWY2NjEzNzYyMTQ1MzBiOWVkNjhj
NWI0NTgwHhcNMjYwNDE5MDcwMTE4WhcNMjYwNDIwMDcwMTE4WjAzMTEwLwYDVQQD
Eyg0MDdhNDdmZmJmNmEyOTUxYzJjOTg2Yjc0MDc2NDdmYTkwMzUwZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUotR1YlSDn5NWCleZweq1wge5l7
o6n6V7tNDXJ4ehUTGCTquZyNuhcITnQO1c/xzemTG3jszgt2jKBYspYhHISj/g8Z
5hHClV6ENhVPUYUv/5RgJ06Dw20vSaOk6ZXTr69KRtyKinpcuKIm0RMUrVgKZgTm
1z5+pIaFbqzD5k8ET5RE8DyOkxKF1bewWzywPidpkay2dvrATZHEuvecoU4bnLjK
Bd1bjMME8iFeBMwhEd+vGUAFAJyVIbDzXO7WOdZfTsovEfvsa8y5108MPavI3baR
/0GOXJ4S3OJmnZFycO7pht7u0qOJmLGRdEouDRqXCfrf+tBGzVZGqBu+xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB6R/+/ailRwsmGt0B2R/qQNQ8oMB8GA1UdIwQY
MBaAFJF1iFz5eNLvZhN2IUUwue1oxbRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQt
MWI5NTgxOWNmYzljLzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQtMWI5NTgxOWNmYzlj
LzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFgMaIpG
6iyZBRCwAxVTWNEzFTLGOV56pa24h3I/THrHX7Pg24/2xQOjt9tiP5TIkql3IEPr
oUiRKfXvt4W+swqwsyQVd3rB4/5Emr6BumsXHtu7CD3mh7+zgdiiilG0TAvmTSkV
WPgsWsH03ZH6YDVRp5BPPQWeKcurnyfKR+gGy1AyaQ8jj5pjRueHZiWGqf6fqsQy
xM7YqhbHWX9SNrKUYfS0/Poi4+k6qTVV5ll5yPJgxZEJgs7nWEWlLkYR2i3U2FaU
tRK/D6YcheTR3RHeRNMTRAIbbD5uDpvzQHftKoJgX7wE5x16abA9sNV/QMu7OjCL
EjrUqFvyR/1XAw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:59 2026 by rpki-client