Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: br5BM+XyUNm90PqpU4Y4Gzo13Ot4QQman1UDu2OLKFQ=
Subject key identifier: 2F:D1:44:3E:E5:79:CF:58:81:99:5D:41:FC:79:1E:49:5B:E9:EB:0F
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 019D37895C7B922F40D425A521D3E90BC5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: hG+iCIBL7JRoetsXPs+UI9EE3cWZk4EyhfZgpOBXtm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5c:7b:92:2f:40:d4:25:a5:21:d3:e9:0b:c5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=2fd1443ee579cf5881995d41fc791e495be9eb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:87:0d:99:46:99:b9:1b:92:f0:e6:07:78:
f7:0a:ab:81:32:e2:ea:cb:2c:3a:e9:81:4f:a5:41:
8f:ca:59:fa:39:f6:3b:46:53:dd:88:be:6b:07:ae:
28:a3:b0:e9:d6:f7:e5:c1:42:77:d0:90:01:69:ac:
28:81:9d:93:db:54:34:8e:57:15:0b:4b:87:9b:ef:
0a:91:9f:8e:83:ea:dc:d3:20:d8:d2:d2:7c:da:c9:
da:1e:15:ac:ea:3a:64:ea:a2:50:75:1a:c3:53:cd:
ad:98:31:ca:f7:b2:09:54:6b:b9:b1:30:c0:58:30:
df:aa:b4:db:9f:34:05:f4:31:0f:8d:75:81:66:c3:
8f:92:aa:f3:3b:c2:3d:e0:4d:03:52:49:e9:79:3b:
99:36:16:72:15:f8:9e:0d:b4:a7:d5:0b:36:48:64:
6b:29:27:17:be:fd:ad:7b:4a:34:1d:b1:63:c6:3a:
8d:40:9a:b2:c8:27:80:41:b4:8a:c5:9c:e7:93:ba:
a5:6d:e5:da:c9:f5:7a:e7:81:08:16:dd:09:19:83:
41:8f:07:aa:8d:76:07:c7:93:09:6b:01:c9:9f:78:
56:a9:aa:c9:a3:2e:3d:20:45:15:04:62:03:c7:61:
ca:ba:67:5f:f6:78:df:a7:a6:3d:65:5f:c7:00:2b:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:44:3E:E5:79:CF:58:81:99:5D:41:FC:79:1E:49:5B:E9:EB:0F
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b3:70:75:0e:15:57:6e:5a:37:44:f0:93:71:49:a6:ba:6e:
e8:75:fc:5d:f8:8e:12:2d:d9:dc:2f:83:dd:7e:39:91:c3:8a:
85:62:1d:24:09:8d:ce:da:09:b8:01:84:ae:c5:52:86:a4:87:
29:ce:93:30:1b:83:5c:f2:87:b7:09:95:b4:6a:7b:8f:b8:6f:
69:22:51:66:52:04:27:b4:bf:6f:78:88:e7:35:25:01:e7:9f:
ea:04:4c:a0:d1:8e:88:7a:fa:92:da:b8:c3:da:8d:0c:ac:84:
f7:17:93:aa:84:6b:eb:e7:57:30:45:e7:7b:7e:f5:08:5c:cf:
53:c7:d6:f4:23:37:38:db:f6:8c:ee:89:98:0a:8d:26:7e:8a:
35:c6:b3:86:59:53:14:54:0f:5e:2b:b0:7d:93:4e:7c:0b:fc:
d2:2a:cb:71:f5:27:56:4b:fe:a9:1a:aa:09:0a:bd:a0:57:71:
f0:c3:81:10:5e:5f:01:4c:e8:0c:cb:95:23:b5:72:d5:d1:e9:
b4:b8:f1:9f:c0:b5:26:99:51:50:37:6b:c7:29:35:e7:c2:bb:
62:07:22:ce:69:48:03:b4:67:30:6c:5b:ee:35:95:86:76:f2:
ab:56:8c:12:d8:59:f8:3d:19:8f:1f:aa:54:42:f5:32:b8:6a:
a8:40:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:21 2026 by rpki-client