Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: Fc8y+GPy8Ynbe/DkNTzX/8GG9XRelcDw1FOAqSBHvr8=
Subject key identifier: 63:1F:00:97:BD:F7:D0:E4:0C:C9:26:5A:95:07:4F:BC:B9:F7:CC:43
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 019D3A1C3CA8F74FF6BE310E04B0E97ABEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0CE0
Signing time: Sun 29 Mar 2026 15:00:22 +0000
Manifest this update: Sun 29 Mar 2026 15:00:22 +0000
Manifest next update: Mon 30 Mar 2026 15:00:22 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: fqKj307KWS/qxwmqqOQOFvGsdM8tZ1bQXogisko6qv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:3c:a8:f7:4f:f6:be:31:0e:04:b0:e9:7a:be:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Mar 29 15:00:22 2026 GMT
Not After : Mar 30 15:00:22 2026 GMT
Subject: CN=631f0097bdf7d0e40cc9265a95074fbcb9f7cc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:6f:fa:38:8a:50:95:8a:2d:c5:3f:3e:7f:
10:54:67:d1:03:4c:45:1a:e3:92:78:01:50:fa:e2:
ea:be:cf:ff:86:da:ac:cf:a5:bf:0a:d6:e2:5a:4e:
68:79:63:8d:ac:62:a2:79:97:1e:61:07:e9:65:76:
8f:f7:d9:d3:f7:86:31:af:7c:03:86:b1:49:83:00:
af:0a:cc:28:ce:2c:d8:ab:22:ea:0b:f7:d3:c1:e0:
9d:e1:c8:ba:fa:1b:c6:e2:c2:03:1a:5a:0c:48:a6:
64:18:b9:48:48:67:03:06:72:7c:82:34:22:ea:6c:
39:78:27:dc:ca:88:d5:88:af:73:cb:96:e7:36:0f:
43:02:49:81:62:1f:8d:36:7d:3c:2a:ea:a8:86:17:
3c:c8:9e:ae:09:dd:f8:04:82:64:b1:4b:06:e5:e6:
b3:5f:43:da:a0:3a:83:a2:d9:72:cc:2b:32:c1:fd:
a6:3a:44:d2:df:56:22:f1:95:83:04:94:99:d7:6b:
2f:53:78:fa:26:1d:25:e7:5e:d8:62:4f:d0:2a:5c:
c1:8d:88:bb:18:67:4d:24:16:be:be:6d:96:4c:e5:
83:13:da:7a:ce:09:61:3b:98:90:7e:04:5d:da:9d:
09:ab:01:73:7f:88:63:e8:5c:75:99:2a:39:b9:ec:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1F:00:97:BD:F7:D0:E4:0C:C9:26:5A:95:07:4F:BC:B9:F7:CC:43
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:d4:cb:c1:ee:8a:c5:d1:21:c6:92:07:31:4a:95:0a:c7:
6d:c0:da:e8:d6:7d:80:69:bc:96:91:e6:f8:69:71:9c:4f:9e:
06:62:b8:24:02:f7:b7:2e:10:f2:53:98:1f:8b:e8:a0:02:aa:
f4:0b:0d:94:be:29:3a:06:f6:4f:01:0b:d7:85:db:f9:bc:89:
de:ff:cc:f4:1d:5e:7a:59:c7:40:4e:ab:7c:d0:cb:0a:29:a7:
af:7e:d2:0e:be:43:a6:20:75:92:e8:6f:25:28:ec:cb:02:81:
14:8b:6d:5c:11:e6:79:5c:ff:b1:66:ce:0c:a2:c4:3f:bc:c2:
0c:9c:9c:d4:83:0c:ab:4d:a0:3b:96:12:3e:f4:67:8e:a6:31:
1a:8b:0a:a5:11:fb:72:1e:fb:82:7d:c2:cf:7f:c6:b7:9f:56:
83:95:3f:73:c9:5f:58:ab:6c:ce:99:4f:e7:b3:e2:67:55:f9:
a7:51:79:3e:4f:49:e1:ce:03:40:6c:d9:66:31:e8:c5:24:87:
a5:89:99:16:de:76:17:d2:c9:08:bc:a2:96:6f:1e:2f:fc:dc:
21:7c:89:53:08:13:14:9c:42:25:24:bc:21:94:9a:bb:ae:29:
c5:b0:25:07:11:64:6b:18:d7:a9:10:be:bb:46:06:f5:5c:2d:
a8:3a:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:35 2026 by rpki-client