Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: 108PYs/5LnTb8TeauwVrQELGcxxZfCpb5TQ0YJ72+mA=
Subject key identifier: 5D:D4:72:DC:D1:7B:DB:F5:E3:DC:1D:5A:E8:A6:E7:78:00:AA:A9:29
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 019D3866455193AF3DAA9668AE33E10B7560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 1889
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: 3polWa2O8EO+nftj7x1aSLk1asdB6NHDNifigC8lldg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:45:51:93:af:3d:aa:96:68:ae:33:e1:0b:75:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=5dd472dcd17bdbf5e3dc1d5ae8a6e77800aaa929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:ee:a4:ed:58:6f:3a:46:a9:ef:a2:d8:7e:
96:13:c2:8f:2a:01:dd:59:dc:cb:ab:be:9e:64:fe:
69:77:69:82:7a:87:71:9b:37:1d:13:2e:5d:31:6f:
1d:c0:b4:ad:73:34:5a:ef:b4:f2:67:e3:10:d3:af:
4c:5c:ad:f4:f5:87:c3:f0:49:e0:b1:49:f6:52:d4:
97:a7:35:9d:30:aa:b0:c1:4c:07:67:ea:64:c0:02:
56:1c:ea:8d:3f:14:aa:e2:14:7f:8b:4b:e8:2c:6a:
13:d1:9d:2f:14:13:54:83:96:0b:11:53:77:2b:cf:
13:f9:d7:9a:82:20:be:7c:56:24:96:b6:df:94:f0:
b8:a8:48:46:5b:e7:10:d4:c2:4b:02:34:21:b8:99:
32:1f:dd:ad:6e:c9:5e:e4:8d:73:31:7e:e1:36:66:
23:d3:09:5e:5b:a1:65:62:37:1c:4f:a6:ba:28:7c:
48:48:84:d4:ae:25:d3:f0:a2:87:d3:9d:df:62:31:
70:5b:5b:8c:95:4f:e9:06:05:f5:71:12:05:da:b0:
8f:08:19:80:0f:5e:d7:de:0c:e9:ae:2c:f3:5f:56:
cb:27:8c:71:5f:3a:e8:5c:37:5f:71:a7:26:00:c2:
c2:5c:db:38:b5:cb:68:1f:1a:fa:9b:1c:8b:d5:00:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D4:72:DC:D1:7B:DB:F5:E3:DC:1D:5A:E8:A6:E7:78:00:AA:A9:29
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2c:de:67:ff:e8:ca:4f:71:65:25:f0:9c:5e:d3:de:e4:1b:
f8:8e:b7:db:0d:e5:f8:2c:28:36:c4:be:03:1c:fd:87:20:0c:
35:58:da:35:44:bc:a2:8b:00:66:85:a4:33:e4:d7:da:bd:00:
30:db:eb:b7:b9:09:bf:2a:b5:7e:1d:9b:e7:bc:c9:6b:83:04:
2e:c2:b3:7c:65:72:40:41:c6:e5:fb:af:51:dc:5e:5a:b1:1f:
29:2c:62:af:22:3d:b7:2d:fc:4e:a8:cb:06:a9:84:e7:56:c2:
48:cc:ec:ad:d6:0b:4e:a2:37:5e:9f:b4:1b:fa:41:6a:8c:b6:
0a:e2:c5:bc:ce:f2:20:31:7b:69:69:69:53:85:25:74:34:85:
2d:fe:a7:58:14:57:98:90:bf:4c:9f:37:3f:2b:3e:17:0f:d9:
a5:ea:d9:75:25:1b:a5:de:1f:c8:af:dd:d6:ce:16:40:2c:8c:
e6:73:1b:78:ee:38:c4:09:1d:2e:d2:9f:77:95:45:fa:c9:14:
b9:55:5b:f1:18:d4:f8:4e:5f:39:c7:8a:2e:65:40:86:2d:b0:
58:2c:fe:bc:9a:c6:93:3a:0b:5c:ec:84:25:5e:9a:7c:74:7c:
e1:83:29:19:71:5a:b8:4d:c1:7d:f1:2f:39:a6:fa:ae:3e:ab:
72:57:4d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:21 2026 by rpki-client