Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
File: xljr82IzPBhfPBI8Qr5En9KneTg.mft (raw, json)
Hash identifier: qLcLvrZfWl9e9xUdZQWA5q8qAUrkluQYO838Z/rPRFM=
Subject key identifier: 55:47:DE:CF:D5:06:9A:2F:B9:D0:F5:70:15:D3:EA:78:DE:91:FB:89
Authority key identifier: C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38
Certificate issuer: /CN=c658ebf362333c185f3c123c42be449fd2a77938
Certificate serial: 019D389BE9A93996A64A16EC299A9990C871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
Manifest number: 01B6
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: xljr82IzPBhfPBI8Qr5En9KneTg.crl (hash: 7keAl4ZQHtzogaXJf1MOWKGhfGTlYSYkkn7jm1qDbyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e9:a9:39:96:a6:4a:16:ec:29:9a:99:90:c8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c658ebf362333c185f3c123c42be449fd2a77938
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=5547decfd5069a2fb9d0f57015d3ea78de91fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:e6:ac:42:aa:60:90:84:de:29:1c:66:45:
4a:92:54:c1:15:ee:dc:51:f4:d1:7e:3c:7f:4e:5f:
44:cd:2d:5a:1d:28:31:bc:aa:1e:70:c1:44:90:a7:
a2:d9:2a:d9:78:fc:6e:c6:0f:56:82:aa:07:30:9e:
fa:8f:86:3b:b8:3b:a8:17:a4:ab:47:58:cf:d6:d8:
72:20:5f:b2:b2:ec:95:05:d0:6b:e0:06:9c:a5:02:
4b:70:d4:d5:d0:05:6c:5b:25:ee:89:3d:79:67:d7:
f0:04:94:68:e8:c1:5c:6a:31:7a:7e:9b:f8:5b:60:
37:12:cc:81:a3:3f:cc:6e:66:56:44:05:b6:87:b5:
ed:1d:b5:fd:da:3f:74:1d:a3:b6:23:86:a5:a1:45:
c2:fd:70:09:8a:94:b8:3b:96:73:44:40:fc:2f:af:
15:ee:e2:b2:84:70:db:c7:f6:8e:0a:b7:7e:d6:d7:
ec:80:80:6d:93:b0:ff:4c:43:d5:2e:2b:bc:64:63:
07:10:87:f4:73:93:0d:8b:60:26:d0:e0:32:ff:5b:
86:eb:22:81:e1:7d:cf:f3:77:7e:ca:95:9e:cd:b3:
3b:e8:eb:8d:e4:30:7c:14:b7:95:3f:8e:30:ad:b8:
4e:d1:f9:30:03:be:8a:47:98:91:e1:5c:31:03:9e:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:47:DE:CF:D5:06:9A:2F:B9:D0:F5:70:15:D3:EA:78:DE:91:FB:89
X509v3 Authority Key Identifier:
keyid:C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e6:9c:61:1b:6c:33:71:e1:dc:2b:68:87:3d:c0:ec:65:fd:
dd:27:cd:bb:06:89:e7:22:b3:3b:89:24:2d:01:6f:2e:f5:6e:
b3:78:80:d6:21:a7:85:e8:30:5b:d4:19:ab:e5:80:d5:1c:48:
1a:6c:c6:a8:ca:0a:cf:b7:2d:64:21:e1:25:92:41:e0:2b:cb:
84:67:45:91:d7:86:23:12:17:ca:1a:af:d2:1c:0d:f2:11:3e:
94:a9:34:c9:1c:06:79:67:39:a0:cb:d9:9b:62:53:75:7f:66:
af:56:33:c1:96:21:81:d8:f5:2e:94:47:0c:fc:f4:62:66:e3:
2b:4e:f5:fd:b6:e3:14:cf:97:ce:97:69:50:54:63:ed:25:25:
fa:ca:65:e9:39:cc:59:8a:48:a6:c5:85:21:fb:09:e9:c0:42:
59:01:b8:3c:16:33:a3:da:ef:9d:38:6b:41:07:41:88:3a:a9:
75:1b:b5:5d:0b:8c:57:06:0a:fc:66:fb:10:74:09:6e:f3:02:
77:26:b4:d8:2f:4a:53:51:b7:ab:e3:f0:f8:a3:5f:32:77:16:
3a:15:0a:61:01:4f:3a:0e:2d:e7:38:4b:12:ec:f8:9b:19:ca:
2f:c0:f3:e6:29:d6:6c:f8:1c:6b:9f:15:e2:d6:ad:55:be:92:
c9:81:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:44 2026 by rpki-client