Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: xX0msxijrT3Qca8jiccFiTEPyJYi31QOGHnpEl35WO0=
Subject key identifier: 1C:E4:83:FB:61:EF:EB:D2:3C:B4:30:FD:0F:4F:CF:65:55:CD:F7:18
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 019D38D2CB291C2A3E76564A3A87BC44A0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 17C9
Signing time: Sun 29 Mar 2026 09:00:31 +0000
Manifest this update: Sun 29 Mar 2026 09:00:31 +0000
Manifest next update: Mon 30 Mar 2026 09:00:31 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: WQcKi0KklqHG/vzdj0TUJHuvzHuZ1tZh+ZfhrjJE0MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cb:29:1c:2a:3e:76:56:4a:3a:87:bc:44:a0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Mar 29 09:00:31 2026 GMT
Not After : Mar 30 09:00:31 2026 GMT
Subject: CN=1ce483fb61efebd23cb430fd0f4fcf6555cdf718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:bc:4d:61:98:ad:8c:e8:7c:6a:d9:25:1b:
40:b9:3a:ba:2c:8e:35:b6:5a:54:e2:a4:c3:5d:da:
93:d0:95:98:04:6c:e6:05:42:f7:37:4d:cc:4e:d6:
04:fd:65:21:98:4d:84:25:e5:b5:17:91:2f:c2:03:
88:6f:2b:3d:5a:f7:95:26:13:fe:7d:e7:ae:d2:da:
4f:c4:f8:0d:e7:fc:7b:99:44:d7:c4:40:29:4f:97:
24:ca:a8:09:ec:23:81:f2:ba:20:ec:3f:99:b9:0a:
17:b0:28:7c:86:76:5f:b1:2d:80:15:e1:cd:3d:a3:
92:1d:10:72:56:1f:db:aa:52:da:5a:a7:9c:89:e8:
a3:33:bd:95:3c:6b:af:f1:b9:25:c5:a6:d5:4d:0f:
4c:72:84:c9:0d:36:4c:bf:9a:92:9d:cb:f5:91:fa:
5f:a1:eb:80:16:23:da:a3:7a:2d:db:81:85:f6:0a:
2b:f1:4e:a8:55:74:47:be:bf:cc:67:9b:eb:3b:03:
1c:fc:24:04:5c:72:ee:22:89:64:5f:03:57:fc:85:
ec:2a:37:08:f6:13:03:3d:55:85:49:79:87:a0:6e:
89:bf:83:a1:61:ac:3c:43:14:2b:18:e0:a4:91:1f:
a4:db:27:43:c6:96:54:3a:f5:e8:4b:35:5a:01:c8:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E4:83:FB:61:EF:EB:D2:3C:B4:30:FD:0F:4F:CF:65:55:CD:F7:18
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:23:62:5e:dc:76:6b:66:09:6b:2d:17:46:89:04:c5:ea:e0:
6d:a0:05:df:b6:00:84:ac:e7:ac:ea:e1:f4:e2:8e:79:da:8b:
60:04:32:e0:82:08:4a:38:4d:a8:90:b0:18:8f:8a:31:5e:9c:
df:b5:07:92:35:6d:d1:4a:95:ae:47:8a:40:c8:14:06:79:ca:
7d:da:3c:d0:b0:ba:f8:ba:67:1f:5f:df:95:0f:5d:45:b0:d2:
12:0b:95:bb:f9:ed:0a:9b:48:98:4b:37:ae:02:c8:68:ef:d7:
7d:d8:ef:87:01:09:e5:82:6e:d7:c1:a9:c5:e2:a1:64:57:e5:
8b:c3:8a:29:dc:33:b3:2b:1d:3d:7d:3b:97:ad:e3:98:7c:1d:
54:fe:3a:10:ef:4b:4d:01:90:ae:1f:69:4f:ea:cf:03:11:8a:
93:ab:26:22:1e:30:34:7e:4a:c5:50:4b:38:1f:a0:c0:b0:c3:
8c:ae:43:13:c6:5e:f0:64:1b:3e:da:76:ed:c6:8d:b5:a0:36:
23:40:ff:9b:34:b1:cd:37:86:ae:1a:1e:49:d2:9f:21:f9:b1:
16:c4:6d:75:af:86:db:30:6b:22:49:4f:ac:a8:ed:a0:79:94:
c8:c4:7a:6e:63:f7:03:a8:fc:b1:79:b8:bb:2d:86:be:2d:16:
f2:07:b2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:09 2026 by rpki-client