Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: eBS0hvgMl8kBs4qikHTd2LDp0kruNYNqxCM7Oo4dsAM=
Subject key identifier: BA:AB:0E:86:54:35:7E:89:75:A5:EF:7E:A9:49:5D:33:D2:35:95:51
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 019D38D2ECA250B568B4E978937E21F69320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 1354
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: LiQK1kEcaj3xOoSlMVbdGG8+3WBgqlw7yofGBuQbeP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ec:a2:50:b5:68:b4:e9:78:93:7e:21:f6:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=baab0e8654357e8975a5ef7ea9495d33d2359551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:b3:d5:6b:cf:4d:e1:f6:4e:73:04:9c:1d:
80:67:c8:31:cf:ae:0a:9f:3a:11:db:35:d9:03:a3:
38:7f:d9:0b:2d:6a:29:75:0c:f4:9b:f6:91:84:a4:
03:02:c2:e9:dd:62:b3:16:c4:c4:80:70:1d:c4:14:
25:bf:78:2c:95:d0:8f:f7:19:91:d5:9a:50:8b:d0:
4c:49:da:54:02:b2:ea:48:58:eb:75:1c:c8:f5:b0:
c1:95:03:8a:35:53:0b:eb:58:c0:7d:86:4f:77:9b:
0b:c9:90:25:19:04:32:1d:a9:9d:50:14:40:3f:78:
3c:52:ed:20:c6:46:5f:5f:d6:88:7d:0f:42:3d:d1:
38:da:ad:ae:27:d1:27:13:36:21:36:58:b2:41:69:
1d:95:47:01:07:af:cc:d6:0a:e8:a5:68:07:82:3a:
99:83:4d:50:23:56:de:75:4c:d0:6d:47:8c:14:bf:
01:5f:08:f5:e0:ea:fd:6b:e7:25:5b:2e:0a:9b:80:
08:7e:02:46:d0:9b:cb:da:03:51:dd:4c:54:74:6f:
e1:09:ac:89:45:a6:02:bb:4f:11:16:18:0c:f7:42:
38:e8:7c:28:f4:c0:63:81:9f:cb:f8:58:f3:9e:b0:
e8:68:7d:f7:4b:22:15:8f:70:28:5a:1f:a6:f6:bf:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AB:0E:86:54:35:7E:89:75:A5:EF:7E:A9:49:5D:33:D2:35:95:51
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8a:1b:b1:f6:40:ba:0e:2d:c5:8d:2a:a0:61:fa:99:15:09:
5c:78:51:d3:d8:e8:49:57:b4:ba:af:b6:82:f4:8e:da:0d:b9:
0e:40:e0:19:b0:e9:a5:c6:e5:d9:70:e2:3c:bc:c9:2e:0a:ee:
ef:51:05:df:5b:66:1a:3a:2b:65:62:e2:66:52:aa:69:2c:a5:
a4:5e:af:0b:8b:1d:7a:8e:af:de:72:fd:7e:f1:5a:7c:a8:22:
f0:85:5c:e5:0c:9e:58:8e:c6:d5:2f:bc:a5:45:61:92:d3:a9:
e4:e4:df:aa:ae:57:87:05:57:2f:3b:78:b7:46:62:74:a0:e9:
20:40:fa:37:56:ed:21:64:e5:e2:11:8e:8e:e0:47:6a:54:ee:
be:50:c0:58:5c:1a:1e:02:a6:4d:70:57:a0:ed:e3:cb:0e:93:
ca:36:0e:6c:a1:e8:6a:82:64:06:50:71:c8:b4:51:19:b9:60:
73:d8:1d:25:9f:e6:32:99:eb:24:e1:bc:eb:1b:4a:39:e7:b6:
17:e8:dc:8d:95:38:71:b5:25:b5:6b:f0:85:03:6a:07:77:dc:
02:08:df:50:5f:ee:9c:6f:5f:38:2d:0e:4d:04:f7:15:88:91:
66:bd:59:80:23:d5:eb:b2:58:90:d0:d6:65:6c:1c:3b:48:63:
2a:da:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:45 2026 by rpki-client