Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: aZTmj3iZxWwvNew4gQvdErHC17bWrFbzHgFmnaREvmc=
Subject key identifier: 17:20:8F:53:58:94:23:19:83:94:FB:34:46:54:B8:71:33:13:D9:9A
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 019D9AE2CD3E7500172232FDC76E0548A0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0FA2
Signing time: Fri 17 Apr 2026 10:00:48 +0000
Manifest this update: Fri 17 Apr 2026 10:00:48 +0000
Manifest next update: Sat 18 Apr 2026 10:00:48 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: MAiUCrRS9Kb1CdKNnH4AMpptOQkVF3WO5/bh5lITorw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:cd:3e:75:00:17:22:32:fd:c7:6e:05:48:a0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Apr 17 10:00:48 2026 GMT
Not After : Apr 18 10:00:48 2026 GMT
Subject: CN=17208f53589423198394fb344654b8713313d99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:0e:41:f3:5d:4b:1a:78:49:37:a4:2f:fa:
69:df:8c:80:d1:a8:25:63:ae:94:8c:fe:67:dc:29:
41:a4:35:3b:6e:b3:40:46:0c:fe:a7:3e:5e:6f:a3:
ee:57:4d:2b:e3:7b:ac:a4:38:da:77:4a:4d:a2:87:
a3:71:94:34:74:eb:ec:d1:89:32:fa:1d:52:b7:9a:
c9:f3:32:b8:b1:a7:69:2c:61:60:78:49:04:69:da:
34:e6:ca:5d:7e:f5:84:2e:d9:80:bf:df:00:e9:f3:
5b:9a:77:7a:25:4f:7b:39:4c:0b:90:14:d7:7a:2f:
32:c2:3f:02:b7:60:d8:7c:c0:9e:ad:0c:77:af:d1:
3b:0e:de:3c:60:31:5b:6b:4f:e2:1d:d2:cd:72:d3:
9e:38:ac:55:7f:e3:a2:e6:db:fc:bb:09:f1:2b:ff:
f8:f3:c7:dd:39:64:89:8d:63:f3:73:7c:10:08:6e:
bc:a9:07:b1:73:98:21:c9:ec:5e:26:a3:26:b5:bf:
6e:6b:d5:fa:99:ba:4e:97:1d:e1:c2:01:b3:b1:0a:
48:27:2d:09:fb:bc:23:77:83:c1:5b:ba:3f:e8:43:
f4:22:81:1f:4e:bb:d7:04:a7:38:ab:4c:2f:30:4f:
20:37:f3:91:d4:17:d4:0a:cf:55:e5:a4:17:ae:3d:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:8F:53:58:94:23:19:83:94:FB:34:46:54:B8:71:33:13:D9:9A
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fb:b3:ce:bc:96:14:a9:d5:73:66:dc:9b:97:d1:44:34:ce:
33:ef:5b:74:3e:8b:c1:d8:91:2d:ca:94:05:4f:93:d2:cc:10:
35:4f:e1:c3:8c:8b:fc:e9:87:96:c2:1f:4f:40:64:fb:6e:69:
2d:1b:84:82:d3:98:ce:21:75:c0:50:28:48:22:b4:8f:00:1f:
16:fa:4a:5b:e4:ac:01:e0:51:5c:1a:e4:49:6d:b9:97:94:73:
69:5e:85:a9:44:e7:ef:1e:f0:dd:96:54:e7:3b:df:18:f5:61:
14:2c:5f:77:e9:a6:9f:de:89:08:a8:55:11:cd:94:d0:a8:f0:
34:cf:28:94:04:5e:45:43:3d:bc:a1:d6:ba:94:c2:3a:75:8c:
08:8d:79:62:0f:10:4d:df:ff:bf:bd:58:55:5b:08:57:30:2c:
8d:e4:8c:7c:fa:c8:83:e8:d3:34:da:73:87:60:43:51:41:36:
85:78:c7:fb:ee:94:ba:36:1f:07:b7:6d:c0:b9:40:4a:e4:8f:
bd:d4:c1:75:6f:a1:ff:71:f6:8b:d8:c9:c8:69:71:01:73:18:
20:2a:71:1f:28:17:f8:fc:c0:c5:32:c3:a2:10:89:15:62:27:
c2:cb:f0:68:48:38:c0:96:28:c9:f2:d6:52:f8:d1:9a:9b:6c:
f6:cc:9b:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4s0+dQAXIjL9x24FSKD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTU3MGNlM2Q4MmUyOTU1NjhiNzQxN2Q1NTZhYTNiMDYx
Mjk2MTAwHhcNMjYwNDE3MTAwMDQ4WhcNMjYwNDE4MTAwMDQ4WjAzMTEwLwYDVQQD
EygxNzIwOGY1MzU4OTQyMzE5ODM5NGZiMzQ0NjU0Yjg3MTMzMTNkOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr74OQfNdSxp4STekL/pp34yA0agl
Y66UjP5n3ClBpDU7brNARgz+pz5eb6PuV00r43uspDjad0pNooejcZQ0dOvs0Yky
+h1St5rJ8zK4sadpLGFgeEkEado05spdfvWELtmAv98A6fNbmnd6JU97OUwLkBTX
ei8ywj8Ct2DYfMCerQx3r9E7Dt48YDFba0/iHdLNctOeOKxVf+Oi5tv8uwnxK//4
88fdOWSJjWPzc3wQCG68qQexc5ghyexeJqMmtb9ua9X6mbpOlx3hwgGzsQpIJy0J
+7wjd4PBW7o/6EP0IoEfTrvXBKc4q0wvME8gN/OR1BfUCs9V5aQXrj3f3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcgj1NYlCMZg5T7NEZUuHEzE9maMB8GA1UdIwQY
MBaAFF9VcM49guKVVot0F9VWqjsGEpYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYt
MjMyZWI0NTFkMjc3LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYtMjMyZWI0NTFkMjc3
LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/uzzryW
FKnVc2bcm5fRRDTOM+9bdD6LwdiRLcqUBU+T0swQNU/hw4yL/OmHlsIfT0Bk+25p
LRuEgtOYziF1wFAoSCK0jwAfFvpKW+SsAeBRXBrkSW25l5RzaV6FqUTn7x7w3ZZU
5zvfGPVhFCxfd+mmn96JCKhVEc2U0KjwNM8olAReRUM9vKHWupTCOnWMCI15Yg8Q
Td//v71YVVsIVzAsjeSMfPrIg+jTNNpzh2BDUUE2hXjH++6UujYfB7dtwLlASuSP
vdTBdW+h/3H2i9jJyGlxAXMYICpxHygX+PzAxTLDohCJFWInwsvwaEg4wJYoyfLW
UvjRmpts9sybQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:31 2026 by rpki-client