Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: WJrKyw7DGOsRowd0o+1uW5KUB7Is9rQivVDlbyqFw1s=
Subject key identifier: 8A:09:D5:D9:87:24:5E:2A:60:E3:E6:24:B8:F5:69:46:2E:EF:72:B1
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 019D38D3579D4968BF37F57EB08F3327B95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 10B9
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: C5aL5tFOICLFujZrmkJsFiGOurD3ICey0Hge4NGvab4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:57:9d:49:68:bf:37:f5:7e:b0:8f:33:27:b9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=8a09d5d987245e2a60e3e624b8f569462eef72b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:d8:7d:73:ac:b5:ab:db:61:36:ee:0e:fc:
b6:d1:98:82:6a:63:17:03:c5:bb:2f:81:64:bc:69:
40:54:bb:ea:b2:fd:c9:34:73:86:fd:65:45:91:27:
c7:ad:d1:d9:d8:36:db:14:85:0d:9b:38:6a:79:9c:
66:92:d2:de:48:a4:d3:70:e0:a4:15:5c:93:43:95:
6c:88:6e:59:85:ca:a0:2d:59:cc:ad:8b:f3:84:6e:
4f:e2:08:2c:0c:36:08:12:f0:40:87:ea:2a:36:6c:
a2:3a:b7:48:b5:01:b6:4f:e8:1c:33:fb:73:07:9a:
44:e6:09:e1:77:20:c8:e7:0e:1d:87:f1:94:9f:eb:
43:27:04:7a:54:2e:02:6b:c8:7e:ca:d6:75:1f:8a:
2c:44:5c:82:52:d8:91:d9:27:12:f7:51:5f:43:a4:
f4:66:a6:69:c1:4a:fa:1b:81:e0:91:70:3a:93:1f:
7b:a4:c9:35:d3:40:7a:2f:6d:2c:2d:3f:20:a8:fc:
1a:f5:6e:04:90:af:f0:3d:cf:b8:21:de:83:44:61:
dc:2c:20:27:8e:91:bf:4d:47:e8:63:52:37:65:ab:
f4:d5:94:eb:36:51:a6:8a:99:1f:ba:c4:20:30:89:
d7:82:4a:88:64:8c:14:26:20:1d:b3:0d:94:09:0a:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:D5:D9:87:24:5E:2A:60:E3:E6:24:B8:F5:69:46:2E:EF:72:B1
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:02:dd:14:c8:f3:ed:88:6c:c7:92:1a:51:d6:4f:4f:3b:8a:
c0:84:ca:b9:29:d9:9a:68:46:96:87:39:a2:19:4c:f5:51:c7:
44:17:9f:3c:e3:fc:2e:8b:a1:01:93:a1:0e:e1:a3:7f:5f:d3:
5b:04:e9:32:cd:6a:fb:12:27:46:6b:57:57:f0:83:90:a0:25:
d1:db:dd:5c:75:ca:a0:1c:32:be:d2:9d:4b:83:e8:79:09:af:
62:6f:2e:e8:8c:84:16:59:62:55:8e:9e:dd:d0:eb:7c:7f:01:
c8:f2:51:7e:87:36:56:df:9c:2f:1f:37:60:b8:48:67:99:6c:
76:3a:c0:dc:1d:33:97:4d:85:6b:a5:b5:f7:4c:7a:ca:4b:8b:
0d:d6:8f:37:2c:5b:5e:b5:a2:95:1a:50:64:01:11:73:e3:e4:
23:7d:a9:8f:16:b4:34:8d:b2:5b:2a:e9:62:9e:49:6f:65:6d:
ba:40:d9:72:e6:c6:9f:8c:b1:81:49:e4:cf:a1:50:d5:f8:39:
6f:65:41:3b:e2:21:2e:4b:ec:b9:8e:be:93:8a:3b:3f:85:97:
04:b8:96:f0:d2:c8:9a:15:3c:3f:20:c7:ec:16:27:11:9e:ca:
78:bf:77:d4:d0:ad:3c:45:d0:92:54:91:e5:ae:af:37:40:55:
e1:42:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:13 2026 by rpki-client