Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: LtD77apjsbzjcqGsmrE0URDjXXb4s8pK2zUYACKW0Kc=
Subject key identifier: 77:82:CB:70:A6:76:52:CC:1E:71:0B:3E:78:CB:BA:5F:73:27:B2:3F
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 019D38D2BBC0398A2A8BA8CF687F0C4B78B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 0619
Signing time: Sun 29 Mar 2026 09:00:27 +0000
Manifest this update: Sun 29 Mar 2026 09:00:27 +0000
Manifest next update: Mon 30 Mar 2026 09:00:27 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: +kWrIatCuJHDbVcmIQPXcdOxPFIOFl0UJEp/8lPtdnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bb:c0:39:8a:2a:8b:a8:cf:68:7f:0c:4b:78:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: Mar 29 09:00:27 2026 GMT
Not After : Mar 30 09:00:27 2026 GMT
Subject: CN=7782cb70a67652cc1e710b3e78cbba5f7327b23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:42:59:08:f5:f4:09:0f:7c:bc:51:8e:d7:
ca:79:3b:af:57:b8:e7:17:b2:eb:27:f7:35:d4:ff:
f5:71:fa:6a:9f:0f:ee:98:9d:55:d4:d2:f8:1e:b3:
58:b5:ef:3f:ca:27:4e:b1:b9:81:fa:84:4e:7b:5d:
66:74:b2:be:6e:61:db:00:a9:0d:15:25:6a:7f:35:
9b:4a:91:41:53:83:18:63:11:ab:a4:82:26:0f:1a:
3b:11:46:83:cf:58:10:e6:b9:1a:94:24:1d:ea:ab:
0e:20:f1:e2:c8:ed:71:d5:8a:38:e4:33:f8:97:37:
8c:11:6c:68:b8:c6:29:66:e8:e8:14:a6:e2:f6:ad:
5d:7a:cb:04:fe:c2:28:f0:8c:05:d1:46:3b:19:ec:
38:49:10:81:8b:0a:9d:e7:60:50:de:91:7c:73:d8:
b7:35:1a:97:0e:0c:2b:37:64:48:c6:fb:5e:85:87:
c0:f0:17:c6:46:25:8f:27:41:e1:8b:c2:9e:00:66:
85:ef:7f:3b:82:0b:47:01:60:c6:2b:a1:30:63:95:
09:2b:4f:05:d1:d9:9d:9a:8a:49:4f:59:a3:24:bd:
91:1e:ca:36:69:91:d1:4f:95:9b:d3:5c:1b:0c:06:
1f:fa:b7:d8:86:bb:db:79:d7:1d:bc:80:a2:b0:cc:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:CB:70:A6:76:52:CC:1E:71:0B:3E:78:CB:BA:5F:73:27:B2:3F
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fa:5f:a3:0f:dc:64:db:79:4a:4a:db:fe:8f:a2:07:1a:ca:
4b:e8:d9:dd:6f:60:a1:64:a3:d2:92:59:c8:ab:89:37:05:ca:
25:ce:ff:8f:e5:0c:f8:fd:20:da:e5:26:1d:e8:b5:54:be:d4:
19:ef:33:bb:01:10:c0:c1:f6:bf:58:01:64:af:59:2a:b9:c5:
15:b8:7d:72:c0:ed:67:ff:6c:be:42:11:2b:93:ba:f5:9f:be:
53:a2:cd:7c:ec:c9:05:6f:af:e2:63:ee:e3:55:12:43:68:af:
56:3c:51:b2:c3:ce:22:f3:69:cd:6a:e5:8f:78:36:80:ac:98:
ca:40:0c:2e:4f:33:3c:d3:18:3e:a0:d1:ac:f4:e0:a1:4d:c4:
67:f9:0d:b5:fd:39:9f:41:22:72:69:05:9b:07:a9:b9:0a:5c:
3f:44:f6:c8:b1:b7:47:fd:38:03:3f:68:65:a7:85:7f:61:ea:
c8:b1:8d:23:86:10:35:76:4b:23:36:ac:ae:fa:3b:14:dc:7c:
5f:6f:f9:e5:1c:1b:26:45:f6:5f:b3:11:30:03:90:12:cb:e0:
c0:cb:6f:b3:64:b9:6c:e1:e5:14:3f:93:79:c3:9d:f0:95:c6:
93:b5:a5:e1:9b:45:d5:e9:73:3f:11:97:3a:23:f1:d1:f7:12:
e5:be:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:01 2026 by rpki-client