Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: 7xnqbHso+Rb5SfjHQ7zB06awgncpk2gb9is2goSe/MY=
Subject key identifier: CB:C3:00:D3:01:9C:8D:5F:DB:59:E2:8E:7F:45:97:7B:3D:F5:9C:E2
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 019CAD595A1D7E2D8AFB250442F6889B6BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0C03
Signing time: Mon 02 Mar 2026 07:00:39 +0000
Manifest this update: Mon 02 Mar 2026 07:00:39 +0000
Manifest next update: Tue 03 Mar 2026 07:00:39 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: AzBtMOe7V8J+YOoQa8mLmv+8ZE6JMtkrWn2FMZSq7PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:5a:1d:7e:2d:8a:fb:25:04:42:f6:88:9b:6b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Mar 2 07:00:39 2026 GMT
Not After : Mar 3 07:00:39 2026 GMT
Subject: CN=cbc300d3019c8d5fdb59e28e7f45977b3df59ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:d3:20:f6:91:5c:2b:31:01:cc:fb:b0:7b:
21:34:d7:73:04:73:ba:52:14:e8:49:8e:31:89:0f:
69:88:b6:53:69:d6:24:f7:6c:fd:fc:55:84:2e:b6:
5a:fe:4f:c8:92:cc:fc:03:64:a0:b9:46:eb:f2:51:
45:c0:15:25:84:83:3c:35:a9:42:0a:9e:fe:13:77:
7f:70:88:45:d1:0e:30:59:38:50:83:f2:be:32:f1:
07:98:47:21:68:1c:a6:e4:b9:3c:cb:a6:4f:8c:d5:
9f:4e:d4:58:74:ea:50:ab:98:62:ba:53:e8:2b:06:
f7:b2:95:63:0c:a7:36:4f:f8:07:72:76:f9:87:b0:
6e:60:a5:90:e3:ef:b8:67:09:e0:1d:ce:36:9d:8e:
45:e6:b3:50:80:48:ce:bc:73:d7:88:1e:33:b0:e9:
c6:e1:43:db:d0:2f:36:5d:18:db:7c:d2:f0:30:65:
a9:09:d9:0b:3c:d9:c0:73:14:b5:38:cb:14:9e:b9:
5f:d8:d2:b6:56:26:3d:24:a1:06:be:ec:dd:44:8c:
68:c1:a0:d0:79:7c:d4:25:a7:ca:db:34:0c:8d:4d:
7a:28:0a:39:da:45:67:f2:2e:b2:19:51:be:32:5d:
94:75:0f:0e:ae:a4:a6:64:64:37:9e:d2:61:0c:58:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C3:00:D3:01:9C:8D:5F:DB:59:E2:8E:7F:45:97:7B:3D:F5:9C:E2
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:b8:44:9c:f7:35:13:a6:b4:f4:ea:73:72:71:6f:05:8b:
88:f7:70:86:e5:ce:b8:6e:1e:8a:e9:53:5c:36:e2:35:9e:9a:
24:79:37:1b:19:c1:e4:c2:71:c5:91:5c:65:fe:49:78:00:2a:
01:bd:17:d4:61:f1:fb:d8:a9:e1:f4:ac:4c:e2:c5:f1:b0:d5:
8c:ef:f8:d3:66:8d:d9:69:1c:74:12:d0:99:59:59:2c:15:99:
e0:37:2c:7a:8c:18:1d:3c:fb:26:34:ab:7b:c9:c1:8f:23:d7:
d6:47:e9:94:e2:8a:6e:6f:26:a7:bb:d5:70:f8:74:62:79:13:
9f:03:c2:9f:6b:9d:33:60:52:29:a7:d4:2f:aa:19:6f:d1:39:
ec:5a:dc:5a:5d:f2:48:72:56:3e:47:e1:e4:be:e1:f5:0c:7f:
f9:69:bd:28:7e:b6:ad:c9:f5:01:90:b5:1a:f4:f5:00:52:2d:
3f:10:0b:b4:bb:6e:03:70:45:75:9c:6e:d1:14:76:1d:22:1b:
9b:0f:5b:18:71:0b:4e:17:40:dc:b3:13:26:00:72:35:1d:73:
9c:7d:13:34:49:c8:cc:c7:74:04:b7:8b:63:c2:37:fd:29:f8:
b2:39:cf:0a:a0:5c:69:ae:57:9d:7a:16:b8:df:bf:31:97:cd:
77:e3:39:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWVodfi2K+yUEQvaIm2vdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzQyM2I2MDNhNjIwM2NiOTI4YzhkZWYzZTU4Y2Q4ZGFh
ZmQ2ODgwHhcNMjYwMzAyMDcwMDM5WhcNMjYwMzAzMDcwMDM5WjAzMTEwLwYDVQQD
EyhjYmMzMDBkMzAxOWM4ZDVmZGI1OWUyOGU3ZjQ1OTc3YjNkZjU5Y2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttzTIPaRXCsxAcz7sHshNNdzBHO6
UhToSY4xiQ9piLZTadYk92z9/FWELrZa/k/Iksz8A2SguUbr8lFFwBUlhIM8NalC
Cp7+E3d/cIhF0Q4wWThQg/K+MvEHmEchaBym5Lk8y6ZPjNWfTtRYdOpQq5hiulPo
Kwb3spVjDKc2T/gHcnb5h7BuYKWQ4++4ZwngHc42nY5F5rNQgEjOvHPXiB4zsOnG
4UPb0C82XRjbfNLwMGWpCdkLPNnAcxS1OMsUnrlf2NK2ViY9JKEGvuzdRIxowaDQ
eXzUJafK2zQMjU16KAo52kVn8i6yGVG+Ml2UdQ8OrqSmZGQ3ntJhDFhqVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvDANMBnI1f21nijn9Fl3s99ZziMB8GA1UdIwQY
MBaAFF40I7YDpiA8uSjI3vPljNjar9aIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMt
Y2RjZTY2N2QzY2E3LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMtY2RjZTY2N2QzY2E3
LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8m4RJz3
NROmtPTqc3JxbwWLiPdwhuXOuG4eiulTXDbiNZ6aJHk3GxnB5MJxxZFcZf5JeAAq
Ab0X1GHx+9ip4fSsTOLF8bDVjO/402aN2WkcdBLQmVlZLBWZ4DcseowYHTz7JjSr
e8nBjyPX1kfplOKKbm8mp7vVcPh0YnkTnwPCn2udM2BSKafUL6oZb9E57FrcWl3y
SHJWPkfh5L7h9Qx/+Wm9KH62rcn1AZC1GvT1AFItPxALtLtuA3BFdZxu0RR2HSIb
mw9bGHELThdA3LMTJgByNR1znH0TNEnIzMd0BLeLY8I3/Sn4sjnPCqBcaa5XnXoW
uN+/MZfNd+M5Yg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:47 2026 by rpki-client