Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/RXql3Y1V8JjPfoYBZIt8pKw0PTE.mft
File: RXql3Y1V8JjPfoYBZIt8pKw0PTE.mft (raw, json)
Hash identifier: b8f379mCA+Tte3JBlLSZZrosvMfKqW0kPkXBeJIbkRA=
Subject key identifier: 14:1B:8A:5F:E5:5A:B0:13:25:CE:BC:24:FF:3A:4C:D4:DB:21:9A:25
Authority key identifier: 45:7A:A5:DD:8D:55:F0:98:CF:7E:86:01:64:8B:7C:A4:AC:34:3D:31
Certificate issuer: /CN=457aa5dd8d55f098cf7e8601648b7ca4ac343d31
Certificate serial: 019D3977E28FFAB326D65C624D947D977658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXql3Y1V8JjPfoYBZIt8pKw0PTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/RXql3Y1V8JjPfoYBZIt8pKw0PTE.mft
Manifest number: 6B
Signing time: Sun 29 Mar 2026 12:00:51 +0000
Manifest this update: Sun 29 Mar 2026 12:00:51 +0000
Manifest next update: Mon 30 Mar 2026 12:00:51 +0000
Files and hashes: 1: RXql3Y1V8JjPfoYBZIt8pKw0PTE.crl (hash: YudlpnhQWe5XsOHL4ebz3x6SnZYYmRarUDbJc8pSzSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/RXql3Y1V8JjPfoYBZIt8pKw0PTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/RXql3Y1V8JjPfoYBZIt8pKw0PTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXql3Y1V8JjPfoYBZIt8pKw0PTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e2:8f:fa:b3:26:d6:5c:62:4d:94:7d:97:76:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa5dd8d55f098cf7e8601648b7ca4ac343d31
Validity
Not Before: Mar 29 12:00:51 2026 GMT
Not After : Mar 30 12:00:51 2026 GMT
Subject: CN=141b8a5fe55ab01325cebc24ff3a4cd4db219a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:97:24:95:03:75:4a:80:e1:b5:f2:dc:2b:
23:24:15:8b:f2:c2:ef:29:ca:ec:7f:90:16:2c:ba:
06:95:34:fc:87:8d:83:00:16:3f:43:dc:49:85:bf:
d5:c9:72:2f:4e:21:e2:ed:1a:f2:8d:f5:c6:4c:fa:
11:e5:54:cb:9c:a7:07:77:e1:a2:1f:44:1f:27:c9:
61:d9:47:09:1b:e7:df:81:4d:aa:39:70:44:ca:63:
00:c0:6c:37:d6:3c:2e:7f:2e:33:1b:a8:10:aa:9f:
cd:f0:cb:7f:7a:f9:ab:18:0a:08:0e:8b:9e:84:4c:
83:27:9d:c9:ee:94:33:51:83:51:4f:48:fc:9b:8b:
cd:98:18:f6:82:8d:c8:68:e0:39:af:ba:86:b8:5d:
79:79:fe:5c:3f:e3:1e:d8:ae:b4:96:69:7f:84:b2:
e8:a3:ac:99:31:74:db:8d:67:68:7b:d1:aa:fc:46:
4b:2c:30:dc:97:82:ad:76:2e:05:07:19:d2:0c:b8:
e5:3d:7e:2f:79:48:48:12:1c:08:79:4d:f8:a2:18:
14:32:02:11:00:36:79:dc:b7:b5:4c:b9:da:86:df:
bf:d0:47:4b:9a:fd:da:a1:e1:af:87:0b:79:24:78:
d3:e0:6e:e7:c3:51:82:53:eb:9c:f1:6d:4e:e5:13:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:8A:5F:E5:5A:B0:13:25:CE:BC:24:FF:3A:4C:D4:DB:21:9A:25
X509v3 Authority Key Identifier:
keyid:45:7A:A5:DD:8D:55:F0:98:CF:7E:86:01:64:8B:7C:A4:AC:34:3D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXql3Y1V8JjPfoYBZIt8pKw0PTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/RXql3Y1V8JjPfoYBZIt8pKw0PTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d438ef-9f01-48f8-bcca-f0cf756eff37/1/RXql3Y1V8JjPfoYBZIt8pKw0PTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fa:d6:cd:17:0c:e1:6b:15:0c:52:38:20:18:b9:a0:1d:e4:
f1:fe:c3:4a:0f:ea:b6:b6:3d:ec:89:1d:98:84:18:90:23:41:
3e:3f:ff:f9:68:2c:ff:08:09:d0:ca:38:d2:11:bc:22:3e:9d:
6b:aa:da:3a:60:15:09:8f:4b:e1:6d:10:e4:56:75:f9:48:de:
11:1d:ec:60:54:60:10:9c:a5:ef:32:22:18:b4:c1:0f:a1:fd:
96:a8:29:34:db:ec:7d:d8:5d:16:80:0a:ea:9f:8e:ce:ae:1f:
b2:b0:73:95:5e:01:0c:85:f7:cd:bc:8a:0e:dd:42:bb:e9:bc:
a3:bf:77:a7:e2:61:3b:89:39:59:c0:59:99:b9:a0:17:8e:db:
c1:57:40:47:a3:15:bf:e5:fd:5c:ce:61:34:3e:b6:4f:d9:b1:
21:59:35:ce:c9:a9:7a:88:52:5e:58:45:aa:61:42:be:7b:73:
b3:68:3d:6c:d1:07:4a:06:ba:81:6f:0b:b2:a1:03:ca:89:f8:
f9:a9:f7:ce:1c:5f:c5:41:71:27:8e:23:1f:b9:79:57:43:47:
b5:a2:9f:0c:46:03:b6:f6:35:7b:f3:76:e3:a5:f6:c7:fa:1a:
0e:76:f9:a6:6c:54:ef:26:08:76:d8:a9:93:82:e4:74:20:0b:
a4:53:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:20 2026 by rpki-client