Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
File: X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft (raw, json)
Hash identifier: CdhVyHGLpAS3lYl3dgNVw0XDxovZgT4S6t40XaoAIME=
Subject key identifier: 7F:5B:F8:1E:DC:0B:78:56:04:30:7F:B5:CD:89:5B:3F:5D:6E:BE:B2
Authority key identifier: 5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
Certificate issuer: /CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Certificate serial: 019D382E83333E2A58D5A5A997A1E825C970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl (hash: zI6Cn2sdpUWPhChAJhEKj5Ffn0h2AKY4JkAE/fyNjdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:83:33:3e:2a:58:d5:a5:a9:97:a1:e8:25:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=7f5bf81edc0b785604307fb5cd895b3f5d6ebeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:a6:22:f3:3b:47:5d:89:ab:07:12:cb:06:
b2:52:8c:e7:3d:91:f8:1f:ef:8b:3d:bf:af:a9:55:
e4:7a:57:63:34:16:f7:3c:b2:48:aa:4b:44:ac:76:
98:7d:78:79:04:7f:1c:d6:cb:4e:e4:66:a4:76:3f:
a0:87:4c:c9:ff:b0:bf:14:ff:82:3e:f3:eb:ac:12:
e3:36:0c:f8:57:64:58:b2:40:ba:f2:dc:18:e8:af:
e1:4b:67:27:55:f8:43:4b:46:1f:b0:43:0c:fc:51:
e0:7c:2a:15:b9:a0:40:e6:0f:65:7b:30:70:00:c5:
b3:b6:17:b2:69:1f:89:f8:bc:40:97:60:77:00:3e:
07:86:b4:ff:01:c5:b8:ec:39:fa:be:d5:bf:5e:60:
a7:a5:c8:1c:f6:50:3c:73:d1:81:21:04:f1:63:01:
04:79:93:be:32:4b:4c:cd:65:d0:13:5a:43:d4:48:
c3:94:aa:1f:f0:97:b7:d0:4f:ef:aa:da:51:b3:a6:
1e:3a:fa:b5:1c:d6:fd:86:03:fb:b3:07:db:c2:1d:
55:db:b2:25:82:bc:6d:cd:1e:1d:e7:b3:b3:d5:6b:
88:5f:d4:86:52:8c:28:ee:1b:31:d1:d5:3d:19:61:
b2:a6:38:12:36:84:88:cc:6d:c3:54:12:67:87:c1:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5B:F8:1E:DC:0B:78:56:04:30:7F:B5:CD:89:5B:3F:5D:6E:BE:B2
X509v3 Authority Key Identifier:
keyid:5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3e:5d:a4:3e:8c:b9:9e:17:b9:1d:71:0c:5e:2d:3b:5f:6f:
e2:41:c1:c8:69:c9:ca:77:f0:2f:ae:66:ce:c9:17:31:f0:fa:
65:5e:fa:78:5d:9a:1c:8d:ba:ff:74:8d:04:88:47:33:5c:4a:
9a:aa:c8:3d:8a:35:5b:6d:36:5a:b4:9e:46:eb:4e:1d:1a:70:
6f:0b:67:80:3e:32:60:aa:7c:02:70:1f:63:4e:c1:48:f4:87:
15:0f:d5:98:fd:a0:92:f0:68:a8:39:ea:b4:3b:0d:89:f3:55:
12:74:f1:80:e4:3a:50:8d:ce:15:82:c8:6c:d9:26:3e:ac:2b:
61:b7:b3:f1:b5:f1:59:5f:2d:d3:0b:c2:d5:eb:0e:a1:1f:e0:
1d:e6:bf:4a:79:e9:e1:18:c2:63:37:fe:33:2c:8d:ad:cf:d2:
63:5c:26:5e:24:05:00:d9:3d:a1:f0:3d:d7:da:e7:60:97:22:
9c:e1:51:e0:0b:9f:76:fe:06:f4:08:31:98:66:2e:b3:25:43:
ce:f2:bd:69:e8:5b:65:b9:84:2c:58:ff:09:ec:7b:66:d1:78:
ee:58:18:fb:69:8a:6e:91:93:17:5a:85:95:69:55:8d:15:14:
ff:85:cc:04:3b:b2:2d:5d:be:d1:48:f3:b8:0b:2f:af:04:b6:
c3:9e:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:07 2026 by rpki-client