Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: dCB+W3lGrNYntQ5TrqovqUj7piXD8nSh/wbsOaOYmQk=
Subject key identifier: B3:C1:04:5B:02:BB:69:41:72:B0:A4:87:01:53:E9:E6:EB:F9:46:52
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 019D3865E5AA0E34EE127E9396E403E2E932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 0C02
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: tOLiIJTJdlMbH2V0ikWlAowW+jimwaPHGoEikaHQcs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e5:aa:0e:34:ee:12:7e:93:96:e4:03:e2:e9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=b3c1045b02bb694172b0a4870153e9e6ebf94652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:3f:d9:1d:a8:29:7a:b3:d1:08:84:be:e8:
9c:b7:e9:f2:8d:d9:2b:0f:f6:ac:7d:29:31:6b:e8:
96:7a:a4:36:07:0f:de:4e:a2:9d:d1:6c:f9:49:08:
a8:05:61:8b:79:37:0c:ee:7a:a1:dc:e5:f6:f5:10:
97:1e:db:34:f7:83:f6:b7:30:51:92:b6:f3:9d:c8:
22:10:df:15:31:a7:94:12:1d:24:86:6a:76:64:d1:
67:0a:0f:a9:60:8d:e3:47:71:bf:58:b1:21:67:4b:
cb:5f:3f:9c:49:2a:b0:18:e6:81:1d:f3:91:15:7f:
0a:8f:82:28:5f:c1:1f:f8:43:66:cc:50:de:76:8c:
b7:c4:af:3b:38:18:de:f8:6b:40:31:b4:5b:be:5c:
ad:3a:7f:f2:6c:4c:91:16:ca:a7:fc:bf:14:c0:21:
1b:c9:b5:a3:27:31:a0:61:ee:4e:20:37:4e:68:ec:
18:19:b6:e9:d2:09:e5:79:30:8e:56:6c:ca:4d:e1:
3e:44:ae:ff:2d:7b:96:a6:16:b4:f8:fc:92:27:57:
f1:18:04:98:5e:d5:36:3e:59:6f:55:04:1a:6c:bc:
42:f9:24:63:c5:f9:28:26:5e:49:d7:ed:e1:68:eb:
b3:e1:26:1d:af:7c:a7:e9:cf:34:7a:06:2d:65:6f:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:04:5B:02:BB:69:41:72:B0:A4:87:01:53:E9:E6:EB:F9:46:52
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0a:bd:22:f9:b9:39:6f:33:f8:5d:db:73:84:4c:1c:d7:cc:
66:1b:ef:3b:98:04:50:fd:87:f4:32:20:49:87:cb:8b:65:69:
29:4e:c0:a2:22:f5:75:cc:25:a6:af:19:8b:21:7a:77:09:ba:
fe:f2:a7:f5:d4:56:6c:ac:08:59:c1:f2:b1:be:5d:5a:1d:17:
ec:e2:b2:68:0b:b8:92:ee:3f:ae:3d:9c:59:29:b5:09:29:09:
cd:56:fc:43:a8:a3:54:0a:bb:93:ba:7a:a9:1d:ce:67:ba:e4:
45:41:ac:58:47:7b:d6:cd:f8:3f:fd:db:4d:ba:d6:58:fc:31:
4d:f2:5f:86:dc:01:05:11:44:23:c2:f5:fd:5f:98:9d:a0:66:
48:3e:bb:42:9d:58:ec:26:39:48:16:15:20:58:22:cf:5d:8e:
62:36:e6:af:6b:69:52:96:8d:18:6c:44:66:9c:b2:13:38:91:
1e:d1:35:90:78:fd:55:c4:f7:c2:6a:b1:25:9c:5b:83:f2:00:
93:3e:2b:c1:04:0d:7e:39:c0:ff:f7:1e:43:ee:7f:67:ef:3f:
d6:8e:c9:07:33:8f:fb:e7:a1:3c:e2:d4:96:bd:cf:96:81:3c:
e7:f5:be:ac:6b:d4:94:40:93:cf:c5:72:c7:a3:23:45:a1:20:
96:cc:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:46 2026 by rpki-client