Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: LE7vyLYYbKWUkypTKdNhg7+OkHSssWBImIw8aN75BTo=
Subject key identifier: A5:58:F9:1C:B8:68:5B:EA:26:1C:D0:3E:FE:A5:82:41:8F:DE:27:A5
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 019D38664E07EAF79C6DE1ED5F556C54B9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 1368
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: 60Xh+y3a/3wSBdSzn4QHyM8nT4CHSzkeH4BMaBM6jeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4e:07:ea:f7:9c:6d:e1:ed:5f:55:6c:54:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=a558f91cb8685bea261cd03efea582418fde27a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:1d:1e:a5:1a:eb:5c:b6:89:d8:f4:90:48:
05:ac:dc:f4:fd:ec:ae:32:7b:78:ef:d3:4f:27:7a:
0f:3d:81:7c:4b:83:6a:69:b0:d2:af:87:a7:5e:b1:
f8:7d:d9:9e:1b:4a:3f:62:ad:53:58:71:2d:5a:23:
d4:01:06:af:10:16:fe:42:8a:98:b3:c6:f2:c7:40:
66:60:42:99:c1:4f:a3:ef:93:fb:a4:f5:dc:23:da:
9e:61:cd:e1:ee:9f:69:e3:2f:99:39:c1:44:a9:22:
37:6a:b7:aa:98:b5:a6:72:8a:4b:15:5a:c1:fe:2d:
98:26:56:9a:a0:f0:f1:08:db:db:92:bf:f1:de:48:
bc:44:a2:bf:fa:c0:c8:bb:15:1e:33:98:e2:20:94:
1a:27:9b:33:2d:50:bc:ba:29:21:3c:df:80:00:79:
b4:e6:41:a6:d6:30:a5:f1:0d:41:d8:97:8e:31:7b:
ca:e1:63:34:f0:5a:75:94:5e:a8:b3:8c:c1:82:80:
f4:4f:11:5f:51:d7:d0:1c:fe:9c:69:89:88:37:96:
79:8f:e0:f3:aa:d8:1d:aa:50:4b:ad:31:77:40:22:
14:78:26:dc:75:bb:10:ff:53:36:34:dc:dc:41:2c:
ec:bc:e6:27:58:63:fd:03:9a:6b:b4:72:f2:b3:e2:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:58:F9:1C:B8:68:5B:EA:26:1C:D0:3E:FE:A5:82:41:8F:DE:27:A5
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:bc:83:52:58:ac:20:09:5c:73:2c:b4:7b:2c:dd:ab:db:
3a:1a:24:8f:ba:4a:ac:81:4c:7e:a4:44:f3:ff:a4:b8:75:8f:
c8:63:eb:65:15:2c:9f:14:9a:26:bf:ab:b3:85:30:78:fa:fb:
ae:8f:2b:b2:c4:ce:da:72:22:56:8f:5b:1e:ce:d9:56:ce:11:
5e:8d:50:95:3c:37:83:f3:53:03:59:35:ff:c0:2e:1a:9d:ba:
54:8d:4e:ce:88:27:5a:c8:49:28:64:67:b3:e0:90:e9:e9:60:
a3:d0:c1:16:02:5f:b0:30:88:f3:79:2c:ae:2e:0e:c0:1b:ed:
e4:59:bf:f0:89:f3:ac:f8:86:ef:2c:06:2f:20:b7:3c:c7:d9:
ec:8c:30:86:5d:6e:48:76:77:93:df:59:26:95:90:62:04:51:
8f:f3:10:00:0c:c2:b2:a7:21:ee:77:74:32:ff:94:b9:31:75:
a6:3c:85:4f:f9:32:be:d9:72:d7:43:d8:da:2a:c1:3c:0b:3c:
b4:47:0b:84:ce:68:1f:10:a1:1d:38:88:cf:4a:56:02:2d:a1:
98:dd:73:01:1f:bf:69:9e:be:06:8e:fc:97:db:f8:b4:94:10:
8d:c9:22:66:99:63:d8:ad:d0:cc:8e:88:aa:05:10:44:04:35:
47:40:2a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:53 2026 by rpki-client